News PricingLogin

§The archiveMon · Wed · FriM · W · F

News.

Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.

Follow on LinkedIn

Browse by topic

CVE & Vulnerabilities Ransomware Phishing & Social Engineering Data Breaches

sec-news.ai

About•Privacy Policy•Terms of Use•Submit or contribute•API Access•RSS

Built by Guillaume Bonnet · Questions or feedback? Reach out on LinkedIn

V U L N E R

Monday, July 13

Dell BIOS Vulnerability Exposes Admin Passwords to Quick Recovery
Premium
Critical Dell BIOS weakness (CVE-2026-40639) allows instant admin-password recovery from SPI flash, risking device takeover and firmware abuse.
Jul 13·cybersecuritynews.com
cve & vulnerabilities cybersecuritynews.com

Friday, July 10

Rising Threat: Malicious AI Agents in Open Source Repositories
Premium
ESET finds an increase in malicious AI agents in open-source repos designed to trick developers and steal secrets.
Jul 10·infosecurity-magazine.com
infosecurity-magazine.com
Chrome 150 Update Bolsters Security with 27 Patches
Premium

Wednesday, July 8

Critical Vulnerabilities Found in BeyondTrust Software
BeyondTrust disclosed two critical vulnerabilities in Remote Support and Privileged Remote Access that could bypass authentication.
Jul 8·bleepingcomputer.com
cve & vulnerabilities bleepingcomputer.com
Critical Flaw in Writer AI Allows Cross-Tenant Account Takeovers
WriteOut session isolation bug in Writer AI could leak session tokens across tenants enabling full account takeover.

Previous1…181920…28Next

Dispatches 361–380 of 552 · Page 19 of 28

Get these articles delivered to your inbox.

Subscribe free

Google's Chrome 150 fixes 27 vulnerabilities, including 13 use-after-free bugs and two critical flaws.

Jul 10·securityweek.com

cve & vulnerabilities cloud security securityweek.com

AI Coding Agents Vulnerable to Exploitation by Malicious Code

Premium

AI Now Institute's 'Friendly Fire' shows autonomous AI coding agents can be tricked into executing attacker code during self-approved scans.

Jul 10·thehackernews.com

cve & vulnerabilities thehackernews.com

GhostApproval Flaw in AI Coding Assistants Poses Security Risks

Premium

Wiz-discovered GhostApproval symlink flaw lets six AI coding assistants run attacker-controlled code by tricking file approvals.

Jul 10·thehackernews.com

cve & vulnerabilities thehackernews.com

Chinese APT Group UAT-7810 Enhances ORB Network Using New Malware

Premium

Cisco Talos finds China-linked UAT-7810 expanding its ORB proxy network using new LONGLEASH malware targeting network devices.

Jul 10·thehackernews.com

malware apt & threat actors thehackernews.com

Cybercriminals Exploit Microsoft Entra Passkey System to Breach Corporate Accounts

Premium

Threat group O UNC 066 uses phone-based phishing to trick employees into registering attacker-controlled Entra passkeys to hijack accounts.

Jul 10·cybersecuritynews.com

cve & vulnerabilities phishing & social engineering data breaches cybersecuritynews.com

AI Gateways: A New Frontier for Cybersecurity Threats

Premium

AI gateway compromise led to cryptomining, demonstrating exposure of models, cloud resources, and IAM data via gateway attacks.

Jul 10·darkreading.com

darkreading.com

Critical Roundcube Update Fixes Zero-Click Security Flaws

Premium

Roundcube 1.7 patches zero-click stored XSS via crafted MIME attachments enabling remote compromise without user interaction.

Jul 10·cybersecuritynews.com

cve & vulnerabilities cloud security cybersecuritynews.com

Global CMS Vulnerability Exploitation Campaign Uncovered by ACSC

Premium

ACSC warns a global campaign is exploiting CMS vulnerabilities to deploy webshells and persist on small to mid-size websites.

Jul 10·cybersecuritynews.com

cve & vulnerabilities cybersecuritynews.com

Latvian Forestry Company Grapples with Ongoing Recovery After Ransomware Attack

Premium

State-owned Latvijas Valsts Mezi (LVM) remains recovering weeks after a financially-motivated cyberattack corrupted systems.

Jul 10·therecord.media

ransomware therecord.media

GigaWiper: The Destructive Windows Backdoor Unveiled

Premium

GigaWiper backdoor combines disk-wiping, overwriting, and fake ransomware behaviors to deliver destructive Windows intrusions.

Jul 10·thehackernews.com

ransomware malware thehackernews.com

Massive Security Flaw Exposes Baby Monitors to Unauthorized Access

Premium

Vulnerabilities in cloud-connected baby monitors and cameras exposed nearly one million devices and private video data.

Jul 10·news4hackers.com

cve & vulnerabilities data breaches news4hackers.com

Massive Data Breach at AssuranceAmerica Compromises Millions of Driver Records

Premium

AssuranceAmerica breach exposed nearly 6.9 million drivers' records after attackers accessed internal systems earlier this year.

Jul 10·bleepingcomputer.com

data breaches bleepingcomputer.com

Massive KDDI Data Breach Exposes 12 Million Email Accounts

Premium

KDDI data breach exploited a third-party zero-day, affecting roughly 12 million users' email accounts for ISPs.

Jul 10·securityweek.com

cve & vulnerabilities data breaches securityweek.com

AI-Powered Attack Compresses Cloud Breach Timeline to 72 Hours

Premium

Sygnia analysis shows agentic AI compressed cloud intrusion timelines to 72 hours, emphasizing speed and orchestration risk.

Jul 10·infosecurity-magazine.com

data breaches infosecurity-magazine.com

GodDamn Ransomware Exploits PoisonX Driver to Evade Security Measures

Premium

Researchers detail GodDamn ransomware's use of a signed PoisonX kernel driver to disable security tools and evade detection.

Jul 10·thehackernews.com

cve & vulnerabilities ransomware thehackernews.com

Microsoft Addresses Critical Zero-Day in Malware Protection Engine

Premium

Microsoft released fixes for the RoguePlanet Defender zero-day (CVE-2026-50656), addressing privilege escalation in the Malware Protection Engine.

Jul 10·bleepingcomputer.com

cve & vulnerabilities malware bleepingcomputer.com

Jul 8·thehackernews.com

cve & vulnerabilities thehackernews.com

News.

Dell BIOS Vulnerability Exposes Admin Passwords to Quick Recovery

Rising Threat: Malicious AI Agents in Open Source Repositories

Chrome 150 Update Bolsters Security with 27 Patches

Critical Vulnerabilities Found in BeyondTrust Software

Critical Flaw in Writer AI Allows Cross-Tenant Account Takeovers

AI Coding Agents Vulnerable to Exploitation by Malicious Code

GhostApproval Flaw in AI Coding Assistants Poses Security Risks

Chinese APT Group UAT-7810 Enhances ORB Network Using New Malware

Cybercriminals Exploit Microsoft Entra Passkey System to Breach Corporate Accounts

AI Gateways: A New Frontier for Cybersecurity Threats

Critical Roundcube Update Fixes Zero-Click Security Flaws

Global CMS Vulnerability Exploitation Campaign Uncovered by ACSC

Latvian Forestry Company Grapples with Ongoing Recovery After Ransomware Attack

GigaWiper: The Destructive Windows Backdoor Unveiled

Massive Security Flaw Exposes Baby Monitors to Unauthorized Access

Massive Data Breach at AssuranceAmerica Compromises Millions of Driver Records

Massive KDDI Data Breach Exposes 12 Million Email Accounts

AI-Powered Attack Compresses Cloud Breach Timeline to 72 Hours

GodDamn Ransomware Exploits PoisonX Driver to Evade Security Measures

Microsoft Addresses Critical Zero-Day in Malware Protection Engine