Posted inTechnology
ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More
Ravie LakshmananJul 13, 2026Cybersecurity / Hacking Somewhere right now, a security tool is quietly finding bugs faster than…
Posted inTechnology
The Case for Combining Autonomous AI with Analyst Copilots
A few days ago, I was sitting with the CISO of a Fortune 50 company, walking through how…
Posted inTechnology
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics,…
Posted inTechnology
Meta Files Patent for AI That Can Listen All Day and Track How You’re Feeling
Meta has filed a patent application for an AI that listens to your voice throughout the day, works…
Posted inTechnology
Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365
An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a public…
Posted inTechnology
iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
Ravie LakshmananJul 13, 2026Vulnerability / Web Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two…
Posted inTechnology
Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns
Cybersecurity researchers have disclosed details of sustained cyber espionage activity against several Pakistani law enforcement organizations undertaken by…
Posted inTechnology
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
Version 8.14.0 of the jscrambler npm package shipped with a malicious preinstall hook that silently drops and runs a native infostealer during…
Posted inTechnology
Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions
Ravie LakshmananJul 11, 2026Vulnerability / Email Security Zimbra is urging customers to apply updates to address a critical…
Posted inTechnology
Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access
Ravie LakshmananJul 10, 2026Enterprise Security / Authentication A threat actor has been targeting organizations spanning multiple sectors with…