An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a public port with directory listing switched on. The command that did it: python3 -m http.server 8080, was still sitting in the readable .bash_history. From that… Read More "Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365"
Security leaders should push for evidence requirements before AI systems move into production. At a minimum, organizations should know what logs are available, how long they are retained, who can access them and whether they are sufficient for investigation. For… Read More "Your AI risk register is not an incident response plan"
Australian government security experts have warned content management system (CMS) customers of a “highly scaled” effort to scan for and exploit vulnerabilities in their products. The Australian Cyber Security Centre (ACSC) said in an update on July 9 that many SMBs… Read More "Australian Cyber Agency Warns of Global CMS Exploitation Campaign"
Enterprise software giant Progress Software on Friday prompted ShareFile customers to shut down Storage Zone Controller servers amid security concerns. A Storage Zone Controller provides ShareFile customers with private data storage, either on-premises or on a third-party storage system, that… Read More "Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns"
Ravie LakshmananJul 13, 2026Vulnerability / Web Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security flaws impacting iCagenda and Balbooa extensions for Joomla to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation… Read More "iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days"
That workflow requires more than a model. It requires corporate data, secure infrastructure, feedback loops, security engineers, data scientists, and AI specialists who can work together. Schmidt also pushes back on the idea that running AI locally on powerful consumer… Read More "Can AI narrow cybersecurity’s class divide?"
Security researchers were awarded close to $1.3m after discovering 47 zero-day vulnerabilities at Pwn2Own Berlin. The three-day event, held between May 14 and May 16 and sponsored by TrendAI’s Zero Day Initiative (ZDI), was won by the Devcore team, which… Read More "Security Researchers Find 47 Zero-Days at Pwn2Own Berlin"
The UK’s National Cyber Security Centre (NCSC) has released new guidance for organizations keen to harness agentic AI but concerned about the associated cyber risks. The new document summarizes a more detailed report authored by the NCSC alongside its Five… Read More "NCSC Publishes Guidance on Securing Agentic AI Use"
At Infosecurity Europe 2026, five cybersecurity startups are set to take part in a competition offering them the opportunity to showcase emerging technologies, share their bold ideas and connect directly with potential customers, partners and investors. New for 2026, the… Read More "The Infosecurity Europe Cyber Startup Competition: Meet the Finalists"
International law enforcement agency Interpol has coordinated a first-of-its-kind cybercrime crackdown across the Middle East and North Africa (MENA) that led to 201 arrests. The effort, dubbed Operation Ramz, ran from October 2025 to February 2026 across 13 countries in… Read More "Interpol Launches Sweeping Cybercrime Crackdown in MENA Region"
