Cybersecurity researchers have disclosed what has been described as a “long-standing supply chain attack” on QuickFox, a virtual private network (VPN) and network acceleration tool designed for overseas Chinese users. According to Fortinet FortiGuard Labs, the supply chain attack has… Read More "QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer"
A newly discovered Windows infostealer and remote access trojan (RAT), dubbed Dolphin X, is using an AI-powered profiling system to help cybercriminals identify their most valuable victims, according to researchers at Varonis Threat Labs. Advertised on a cybercrime forum, the… Read More "New Dolphin X Stealer Employs AI Profiling to Prioritize Targets"
Ravie LakshmananAug 05, 2026Vulnerability / Patch Management The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The list of… Read More "CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited"
The rapid adoption of enterprise AI tools is the fastest-growing source of new exposure for businesses, and it puts them at risk to additional cyber threats, a new report has warned. Published on July 22, the Sophos AI Security 2026… Read More "AI Agents Now the Enterprises Fastest Growing Exposed Attack Surface"
GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could use them to access sensitive data and downstream credentials without exploiting a software vulnerability. We scanned public GitHub commits for… Read More "Leaked n8n API Tokens Exposed Live Instances to Credential Theft"
Iranian cyber adversaries are actively targeting internet-exposed industrial systems across brands like Rockwell Automation, Allen-Bradley, Schneider Electric and Siemens. In an advisory update published on July 22, the US Cybersecurity and Infrastructure Security Agency (CISA) said the FBI had observed… Read More "Iranian Hackers Target Siemens and Schneider Industrial Systems"
Swati KhandelwalAug 07, 2026Artificial Intelligence / Vulnerability A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI runners behind Anthropic’s and Google’s own coding-agent repositories. On OpenAI’s, it was enough to… Read More "Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets"
Two-thirds of organizations have delayed or cancelled deployment of Microsoft Copilot over concerns that the AI-powered assistant could expose confidential data, a survey of security leaders has revealed. CoreView’s State of Microsoft 365 Security and Governance 2026 report, published on… Read More "Microsoft Copilot Deployments Delayed Over Security Concerns"
Swati KhandelwalAug 07, 2026Endpoint Security / Vulnerability Entra ID researcher Dirk-jan Mollema demonstrated that malware already running in a signed-in Windows session can silently use the victim’s Windows Hello for Business key to authenticate to Microsoft Entra ID. The attacker… Read More "Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access"
Russian state-supported hackers are targeting organizations with a new attack technique using a Zero-Click method which doesn’t require users to interact with the phishing email. The campaign is designed to compromise networks and gain persistent access, a joint advisory from… Read More "Russian Hackers Exploit New ‘Zero-Click’ Attack"
