Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3797 articles
Akamai says the MCP 2026-07-28 specification reduces protocol-level risks but shifts security responsibility to server implementers, who must address potential workflow hijacking, cross-tenant access, header leaks, XSS and DoS.
Uber has appointed Philip Martin as CISO. He joins from Coinbase, where he led security and related teams, and previously built incident response and security engineering teams at Palantir.
Homeland Security Secretary Markwayne Mullin said CISA needs about 600 hires and could take a year to rebuild. He cited China-related cyber threats, counter-drone technology and AI as priorities.
The FCC approved rules requiring stronger authentication, passwords, patching and firewalls for emergency alert systems, while updating undersea cable licensing, oversight and supply-chain security requirements.
Gen Digital reports that scammers are planting fake receipts in Shop order histories to lure users into calling fraudulent support numbers and disclosing credentials, payment details, and OTPs; some are also pushed to install remote access software.
Polish authorities arrested four suspects accused of breaching telecom partners and employee email accounts to enable SIM swaps and cryptocurrency account theft. Investigators estimate millions of dollars were stolen and laundered; the FBI and HSI supported the case.
StepSecurity says Secure Registry can now attribute npm and PyPI requests to developer machines or CI workflows in its audit log, helping teams identify where a compromised package was pulled.
GuardDog 3.0 adds YARA-based package scanning, an attack-chain risk score, and default sandboxing for npm and PyPI package analysis. Datadog also describes nightly evaluations using clustered malicious-package samples and labeled packages.
Netcraft reports that Bluekit now uses rrweb to relay legitimate login pages through an attacker-controlled browser, enabling operators to capture session tokens. The kit also uses victim filtering and anti-analysis checks.
SentinelOne reports that Gaslight, a Rust-based macOS backdoor and infostealer, embeds fake logs and prompt-injection strings intended to make AI-assisted malware analysis tools doubt or abandon their analysis. Successful bypass was not demonstrated.
Microsoft extended free consumer Windows 10 Extended Security Updates through October 12, 2027. Enrolled personal devices will continue receiving critical updates automatically, giving users more time to move to Windows 11.
This weekly roundup covers curl and Hoppscotch flaws, proxyware in LG and Samsung TV apps, credential theft and malware campaigns, a legacy credential used to steal Salesforce data, and law-enforcement developments.
Island researchers found that Adblock for YouTube, installed by over 10 million users, could run arbitrary JavaScript on any website after a server-side change. No malicious payload was observed, but the dormant capability raises security and privacy concerns.
Darussalam Assets became the first organization in Brunei to earn CIS Controls Accreditation after a multi-year effort and a CREST assessment, demonstrating its adoption of the cybersecurity framework across its group.
Nathan Austad was sentenced to 18 months for his role in a 2022 credential-stuffing scheme that compromised about 60,000 DraftKings accounts. Prosecutors did not name DraftKings in court filings; the details match the company’s disclosure.
Citizen Lab found evidence that Russian authorities used Cellebrite UFED to access Andrey Pivovarov’s phone in 2021, despite contract cancellation. Researchers suspect the data may have aided later dissident surveillance; Cellebrite disputes the effectiveness of legacy,
A LevelBlue analysis describes QuimaRAT, a Java RAT marketed as a subscription MaaS targeting Windows, macOS and Linux. The analyzed sample uses encrypted configuration, environment checks, OS-specific persistence and HANDSHAKE/HEARTBEAT C2 commands.
AI security platform Runlayer raised $30 million in a Series A led by Felicis, bringing its total funding to $42 million. The company says its platform monitors AI use and can block risks including prompt injection and data exfiltration.
Wiz says its Runtime Sensor now feeds live workload network activity into its Security Graph, correlating connections with existing cloud risks to surface attack paths, including links to sensitive data and remote MCP servers.
NIST is seeking public feedback on draft SP 800-213 Revision 1, updated to address current IoT security needs. The draft focuses on IoT products in risk management; comments are due August 24.
Nathan Austad, known as “Snoopy,” was sentenced to 18 months in prison after pleading guilty to conspiracy to commit computer intrusion in the DraftKings account-hacking scheme.
StepSecurity says Maven support is now available in GitHub Checks and OSS Package Search, adding compromised-package and publication-cooldown checks plus dependency location across pull requests, branches, and developer machines. Registry and device coverage are planned
Threat Fabric reports IPTV-themed campaigns in Portugal, Italy, Turkey and India that use social media ads and unofficial streaming apps to deliver mobile malware, including Antidot, Medusa and BTMOB.
Operation Endgame partners disrupted Amadey and StealC infrastructure, dismantling 326 servers and 142 domains. Authorities say they recovered 27 million stolen credentials and restricted more than $47 million in criminal crypto assets.
