U.S. CISA adds iCagenda and Balbooa Forms flaws to its Known Exploited Vulnerabilities catalog
U.S.
General
20 articles
Critical U-Boot Bugs Undermine Secure Boot on Millions of Devices
Binarly found six U-Boot flaws, including two that enable code execution during boot image verification, impacting 50+ releases. Binarly’s research team has ...
AWS GovCloud Credential Leak Leads CISA to Share Critical Cyber Incident Lessons
The Cybersecurity and Infrastructure Security Agency (CISA) has disclosed details of an internal security incident involving exposed AWS GovCloud credentials...
Wireshark 4.6.7 Released, (Sat, Jul 11th)
Wireshark release 4.6.
'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets
A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit,' slipped past AI code reviewers...
Researcher finds 9 vulnerabilities in ATM security software
Matt Burch, a principal security researcher at Atredis Partners, will present his findings on CryptoPro Secure Disk at Black Hat USA 2026.
Silver Fox group uses new Rust-based MODBEACON RAT
QiAnXin, a Chinese cybersecurity company, reported that while the group's operations may appear unsophisticated due to the use of SEO poisoning and counterfe...
Keysight launches new cybersecurity test platform for AI traffic
The APS-ONE-400, part of Keysight's APS-100/400-gigabit Ethernet (GE) hardware line, offers 400 Gb/s Layer 4-7 throughput and 95 Gb/s of elephant flow throug...
Scottish NHS Trust staff member emailed personal patient data
The incident involved a staff member transferring a spreadsheet containing patient data from the maternity system to their personal email.
Inmate charged with stealing seized cryptocurrency while serving prison sentence
A Bulgarian national, already serving a lengthy prison sentence for laundering millions stolen from American fraud victims, has been charged with stealing $2...
Progress Software warns ShareFile users of external security threat
Progress Software has alerted ShareFile customers who utilize Storage Zone Controllers, which allow for on-premises file hosting while using ShareFile's clou...
CISA shares postmortem of GitHub credential leak
CISA credentials and code were uploaded to a public repository on a contractor’s personal GitHub account in May.
Post-quantum HTTPS migration faces enterprise browser challenges
Post-quantum HTTPS may expose browser, cookie and TLS proxy security gaps.
OpenMandriva Linux project reportedly targeted in attempted sabotage after contributor dispute
The incident occurred after a contributor's abusive behavior reportedly led to some members leaving the project.
Injective Labs SDK npm package compromised to steal cryptocurrency keys
The supply-chain attack was detected by application security companies Socket, Ox Security, and StepSecurity via version 1.20.
Borg, GitLost, ColdFusion, GodDamn, GhostApproval, OWA, Epaphroditus, Josh Marpet,.. - SWN #597
Okta warns of vishing scheme that extorts data
Attackers pose as IT and tell employees to enroll an MS passkey, but the bad guys register their own key and take over the user.
Europe revives law allowing big tech to scan for CSAM
The law known as Chat Control 2.0 passed in the European Parliament, permitting companies like Google, Meta and Microsoft to scan users' messages to hunt for...
CISA looks to remedy ailments from big May credential leak
A major credential leak spurred the Cybersecurity and Infrastructure Security Agency to strengthen protections for its sensitive materials, improve how resea...
Stop trying to 'lock down' your AI: Why rigid guardrails are a gift to hackers
Flexible governance, not restriction, of AI agents preserves productivity while providing oversight and accountability.