Over 70 cybersecurity organizations have signed a new charter, vowing a responsible use of AI for cybersecurity purposes. The AI Charter, launched by cyber industry body CREST on July 9, is built around nine principles for AI-enabled cybersecurity activities that… Read More "New AI Security Charter Backed by Over 70 Cyber Firms"
GhostApproval Flaw Hits Six Major AI Coding Assistants
Six major AI coding assistants have been found to share a flaw that turns their approval prompts into a rubber stamp, letting a malicious repository write to sensitive files on a developer’s machine and, in the worst case, achieve remote… Read More "GhostApproval Flaw Hits Six Major AI Coding Assistants"
The future of AI security research isn’t autonomous, it’s human-amplified
Meet HTTP Terminator, a new AI system that has identified hundreds of websites vulnerable to HTTP request smuggling, hacked them live at scale, and even identified a “genuinely new class” of vulnerability, dubbed “shared-parser confusion.” But it didn’t do it… Read More "The future of AI security research isn’t autonomous, it’s human-amplified"
Chinese-Funded Interpol Cybercrime Crackdown Leads to 5,800 Arrests
A new global anti-fraud operation against cybercrime has led to the arrest of over 5800 people and the interception of almost $300m in illicit assets. The operational phase of the crackdown effort, dubbed Operation First Light 2026, ran from January… Read More "Chinese-Funded Interpol Cybercrime Crackdown Leads to 5,800 Arrests"
75% CISOs Fear Executives Don’t Understand Cybersecurity Risks
Over three quarters of cybersecurity leaders believe that the board level decision makers above them do not understand the cybersecurity risks associated with how their employees act in the workplace. That is according to a report by MetaCompliance, published on… Read More "75% CISOs Fear Executives Don’t Understand Cybersecurity Risks"
Multistate Water System Attacks Widen, Iran Suspected
Cyberattacks against water and wastewater systems reportedly have reached at least a dozen states, with threat actors exploiting low-complexity attacks against industrial controllers. The intrusions, possibly linked to the Iranian government, prove the US’s water infrastructure remains dangerously exposed. In… Read More "Multistate Water System Attacks Widen, Iran Suspected"
Vibe-Coded Malware Caught in Active Directory Attack
A threat actor has been caught using AI-generated malware in a real network intrusion, deploying a PowerShell script that an assistant had “vibe-coded” to map out an Active Directory environment. In a report published on July 8, Huntress said it… Read More "Vibe-Coded Malware Caught in Active Directory Attack"
Corporate Data Stolen in Levi Strauss Cyberattack
Denim company Levi Strauss & Co on Friday disclosed a cyberattack that affected certain corporate data stored on employee computers. The incident, it said in a Form 8-K filing with the US Securities and Exchange Commission (SEC), was the result… Read More "Corporate Data Stolen in Levi Strauss Cyberattack"
TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore
The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers once again in attacks targeting Russian companies spanning instrumentation, electronics, transport, energy, IT, and software development sectors. Russian cybersecurity vendor Kaspersky said it… Read More "TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore"
Ransomware Attacks Targeting Universities on the Rise
Universities have found themselves in the firing line of cybercriminals, as ransomware attacks against higher education institutions have increased, analysis of recent incidents has revealed. According to the Comparitech’s Education Ransomware Roundup for the first half of 2026, the number… Read More "Ransomware Attacks Targeting Universities on the Rise"