Threat actors have been exploiting critical vulnerabilities in the Balbooa Forms and iCagenda Joomla extensions that allow unauthenticated attackers to achieve remote code execution (RCE). The Balbooa flaw, tracked as CVE-2026-56291 (CVSS score of 10), is described as an unauthenticated… Read More "Organizations Warned of Exploited Joomla Extension Vulnerabilities"
Give an AI assistant a memory and access to your inbox, and you hand an attacker a way to rewrite what it thinks it knows about you. A single email can trick that agent into saving a false “fact” about… Read More "New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email"
Two rival nation-state cyber espionage operations, one linked to China and the other to India, have converged on the same Pakistani police force. According to new analysis published by SentinelLabs, the research arm of SentinelOne, on July 9, suspected China-… Read More "Pakistani Police Systems Hit by Chinese and Indian Espionage"
A vulnerability in RabbitMQ could allow attackers to obtain the broker’s confidential OAuth secret, potentially posing a serious threat to enterprises, according to cybersecurity firm Miggo. RabbitMQ is a popular open source message broker that routes, buffers, and distributes messages,… Read More "RabbitMQ Vulnerability Threatens Enterprise Systems"
Ravie LakshmananJul 13, 2026Cybersecurity / Hacking Somewhere right now, a security tool is quietly finding bugs faster than any human can fix them. That’s supposed to be the good news. The catch is that the attackers have the same tools,… Read More "ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More"
A single misconfigured server has exposed the complete toolkit of an active a three-actor phishing ecosystem. According to new research from French security firm Lexfo, the open directory was a Python HTTP server left running on a Budapest virtual private… Read More "Open Directory Exposes Three Evilginx Phishing Operators"
Jesse McGraw isn’t a hacker; at least, not by his own definition. He accepts he was a hacker, and a blackhat hacker, and that he still retains the mindset of a hacker. But he is no longer a hacker, he… Read More "Hacker Conversations: Jesse McGraw (GhostExodus), From Blackhat Hacker to Redemption"
A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, artificial intelligence (AI)-assisted lure creation, and post-compromise mailbox operations targeting Microsoft 365 accounts. Distributed via Telegram and costing $400 a… Read More "Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft"
Cyber-attackers are increasingly deploying a stealthy technique which enables them to spoof OAuth Client IDs to gain access to cloud environments, cybersecurity experts have warned. According to research by analysts at Proofpoint, cybercriminals are leveraging Microsoft Entra ID, the tech… Read More "Novel OAuth Client ID Spoofing Technique Targets Cloud Environments"
A data exposure at Dialog, the private events group cofounded by Peter Thiel, exposed personal information of multiple US national security personnel. These include an intelligence official on the National Security Council (NSC) and an active-duty intelligence officer supporting sensitive… Read More "The Pentagon Is Looking Into the Dialog Data Exposure for Unmasking National Security Officials"
