Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
Broadcom has released security updates to address multiple security flaws impacting VMware ESX, vCenter, Workstation, and Fusion, three of which have been de...
general
20 articles
Cyberattacks on emergency systems have become a tool of psychological warfare
Emergency communications systems are an oft-neglected part of protecting critical infrastructure.
CubePilot hit by DNS hijacking attack, warns of potential credential theft
The attack, which occurred on July 24, involved an unauthorized individual gaining control of CubePilot's cubepilot[.]org domain DNS settings.
New AI security approach analyzes model internals
Offensive-security researchers are presenting a model-agnostic method for activation analysis at Black Hat USA 2026.
US effectively bans foreign-made advanced robots over security concerns
The Federal Communications Commission (FCC) has added foreign-made advanced robotic devices to its Covered List, prohibiting their import due to unacceptable...
Russian-Alligned TA488 Returns With Persistent Outlook Web Access Attack
TA488 returned with OWA half-click exploit deploying OWAReaper implant that survived re-imaging
CVSS 10.0 RufRoot Vulnerability Allowed Attackers to Hijack Ruflo Without Login
Ruflo fixed a CVSS 10.0 flaw that exposed its MCP bridge without any authentication, putting AI provider keys, stored chats and persistent agent memory at risk.
Stack Sports notifies users of payment card data exposure
Stack Sports discovered suspicious activity on June 8, 2026, after its internal security monitoring systems detected unauthorized activity affecting the Spor...
Hackers target over 30 Minnesota water utilities in coordinated OT attack
The Minnesota IT Services (MNIT) agency activated its cybersecurity incident response capabilities across the entire state after hackers targeted more than 3...
Gen Z shows low cybersecurity awareness, Kaspersky study finds
A Kaspersky study of 7,200 respondents across 18 countries highlights that only 27% of Gen Z use mobile antivirus software, and a mere 28% regularly back up ...
CAF Bank suspends online services due to third-party software vulnerability
As outlined in The Register, CAF Bank, which serves approximately 14,000 charities, temporarily suspended its online banking services to address a security v...
Laundry Bear’s webmail hackers had more in store after February, report says
Researchers say the Russian state-linked hacking group tracked as Laundry Bear recently began exploiting a bug in Microsoft Outlook Web Access.
University of Pennsylvania breach highlights SSO security risks
As detailed in Bleeping Computer, the University of Pennsylvania experienced a significant data breach in 2025 due to a compromised single sign-on (SSO) acco...
New 'PleaseFix' vulnerabilities expose agentic browsers to widespread attacks
Based on information from Dark Reading, security researchers identified a new class of vulnerabilities, dubbed "PleaseFix," that significantly compromise the...
Tanaka emerges as top data leak broker in first half of 2026
Following insights from The Cyber Express, the cybercrime economy is increasingly valuing stolen data as a significant commodity, with one threat actor, Tana...
OpenWrt releases security updates for critical DHCPv6 flaw and other vulnerabilities
As noted by The Hacker News, OpenWrt released version 24.10.
Model Context Protocol releases major update to AI interaction technology
The latest release of MCP overhauls its request metadata processing, replacing a complex handshake workflow with a stateless protocol core.
JetBrains patches critical TeamCity flaw enabling unauthenticated code execution
JetBrains released security updates for TeamCity On-Premises to address a critical vulnerability, CVE-2026-63077, which carries a CVSS score of 9.8.
vBulletin forum software vulnerable to remote code execution
A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through template rendering, posing a ...
Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities
Las Vegas, USA, July 29th, 2026, CyberNewswire Catches rogue AI agents – and stops them in live production before they cause damage Sweet Security, the proac...