A macOS privilege escalation technique that silently disables enterprise security tools from an ordinary user account has been disclosed, affecting major endpoint detection and response (EDR) and mobile device management (MDM) products. New research from exposure management specialise XM Cyber… Read More "macOS Flaw Lets Standard Users Disable EDR and MDM"
The US cybersecurity and Infrastructure Security Agency (CISA) has published new guidance to help federal agencies replace their legacy internet gateways with Secure Access Service Edge (SASE) technology as part of the shift to zero trust. Published on June 24, the… Read More "New CISA Guide Helps Agencies Adopt SASE For Zero Trust"
Ravie LakshmananJul 10, 2026Cybercrime / Law Enforcement A 41-year-old former ransomware negotiator has been sentenced to nearly six years (i.e., 70 months) in prison in the U.S. for their role in conspiring with the now-defunct BlackCat ransomware operators to extort… Read More "Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks"
A large number of false negatives has significantly eroded confidence in automated AI testing for vulnerabilities, a new study from Cobalt has found. The Cobalt State of Pentesting Report 2026 is based on two comparative surveys in 2025 and 2026… Read More "Trust in Automated AI Vulnerability Scanning Collapses to 9%"
Ravie LakshmananJul 10, 2026Enterprise Security / Authentication A threat actor has been targeting organizations spanning multiple sectors with voice-based fake security requests that prompt Microsoft 365 users to enroll a new Entra passkey with an aim to carry out data… Read More "Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access"
Millions of residential IP connections in the US are collected annually for use in proxy services, with many households unaware that they may ultimately be used by threat actors, a new report has warned. Non-profit the Digital Citizens Alliance claimed… Read More "Twenty Million US IP Connections Used by Proxy Services"
Researchers ran 281 of the most popular free VPN apps on the Google Play Store through a new testing system and found that many fail at the basics people install a VPN for, i.e., keeping their traffic private and secure.… Read More "Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking"
A threat actor started exploiting a severe vulnerability in Cisco products at least two months before the flaw was disclosed, a new Google report warned. Tracked as CVE-2026-20245, this high-severity (CVSS 7.8) privilege escalation vulnerability stems from insufficient validation of… Read More "Cisco Vulnerability Exploited Months Before Disclosure, Google Warns"
A cybercrime crew left one of its own servers wide open on the internet for three weeks, and it exposed the operation’s inner workings: the hacking tools, the activity logs, and target lists naming more than 1.4 million websites. Far… Read More "Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites"
Japanese telecommunications operator KDDI has confirmed it suffered a breach that has affected five other internet services providers (ISPs) and potentially exposed 14.2 customer email accounts. In a public statement released on June 23, KDDI Corporation said an unauthorized actor… Read More "KDDI Breach Affects Six Japanese ISPs, Exposes 14.2 Email Credentials"
