Hackers exploit FastJson vulnerability for remote code execution
Bleeping Computer disclosed that hackers are actively exploiting a critical vulnerability in the FastJson open-source Java library, enabling remote code exec...
general
20 articles
German government report details Windows Hello for Business biometric security limitations
Germany’s Federal Office for Information Security (BSI) published a technical analysis of Windows Hello for Business, detailing how the system performs biome...
Italian organizations targeted by 148 ransomware attacks in first half of 2026
Italian organizations faced 148 confirmed ransomware attacks in the first half of 2026, with the manufacturing sector being the most frequently targeted.
Malicious Steam workshop map delivered malware to MECCHA CHAMELEON players
As outlined in Cyber Insider, a malicious Steam Workshop map for the game MECCHA CHAMELEON exploited a vulnerability in the game's mod-loading system to deli...
Google introduces new cybercrime naming taxonomy, diverging from Microsoft's initiative
The Register reports that Google unveiled its own taxonomy for categorizing cybercrime groups, a move that appears to sideline a previous industry-wide effor...
CubePilot drone software dev hit by DNS hijacking to intercept traffic
CubePilot, an Australian firm that designs flight controllers for drones (UAVs), announced a severe operational disruption caused by a DNS hijacking attack. [.
Deep Fakes, Molten Salt, PLCS, Checkpoint, Hugging Face, CENTOS, Josh Marpet and More - SWN #602
Here’s what Anthropic found when it turned Mythos loose on encryption algorithms
Claude Mythos exposed mathematical weaknesses in a post-quantum candidate and a simplified version of AES, marking a major breakthrough for AI-driven cryptan...
OpenAI models used Artifactory zero-days to escape to the internet
JFrog has confirmed that OpenAI models exploited zero-day vulnerabilities in self-hosted Artifactory servers to help escape an isolated testing environment a...
IPMI bug in BMCs found after 22 years, exposes 24,000-plus servers
Decades-old IPMI bug leaves thousands of internet-facing servers exposed.
Mate Security Grows Over 500% Since Q3 2025 and Pushes Past $50M in Funding
Mate Security secures $35M in Series A funding after 500% growth, as Fortune 500 demand grows for its agentic AI security operations platform worldwide.
Dysphoria Botnet Uses Blockchain Domains to Hide C2 Infrastructure
Researchers uncovered the 200,000-device Dysphoria botnet, which uses Ethereum and Solana domains to hide its command servers. QiAnXin XLab, jointly with Chi...
Coordinated cyberattack disrupts water utilities in 30+ Minnesota communities
A cyberattack of undetermined origin disrupted water treatment plants in at least 30 communities in Minnesota, according to the state's technology bureau. Th...
Claude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES Attack
Anthropic says Claude Mythos Preview helped derive an end-to-end key-recovery attack against HAWK-256 and a 200- to 800-fold speedup for an attack on seven-r...
CISA shares advice on isolating vital systems during cyberattacks
The U.S.
vBulletin fixes critical pre-auth RCE flaw with public exploit
A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through template rendering. [.
PhantomEnigma Infects Organizations with Malware via Hijacked Government Websites
PhantomEnigma abuses Brazilian government websites and trusted email channels to spread malware, target banks, evade security checks, and maintain access.
FBI sees Anthropic’s Mythos as a law enforcement challenge
The post FBI sees Anthropic’s Mythos as a law enforcement challenge appeared first on CyberScoop.
ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 Leak
EY confirmed the theft of client tax documents from its third-party support platform. ShinyHunters claims responsibility and is threatening to publish the data.
How AI is turning old data sprawl into a new security risk
AI is exposing hidden data sprawl, making governance a cybersecurity priority.