Researchers ran 281 of the most popular free VPN apps on the Google Play Store through a new testing system and found that many fail at the basics people install a VPN for, i.e., keeping their traffic private and secure.… Read More "Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking"
A threat actor started exploiting a severe vulnerability in Cisco products at least two months before the flaw was disclosed, a new Google report warned. Tracked as CVE-2026-20245, this high-severity (CVSS 7.8) privilege escalation vulnerability stems from insufficient validation of… Read More "Cisco Vulnerability Exploited Months Before Disclosure, Google Warns"
A cybercrime crew left one of its own servers wide open on the internet for three weeks, and it exposed the operation’s inner workings: the hacking tools, the activity logs, and target lists naming more than 1.4 million websites. Far… Read More "Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites"
Japanese telecommunications operator KDDI has confirmed it suffered a breach that has affected five other internet services providers (ISPs) and potentially exposed 14.2 customer email accounts. In a public statement released on June 23, KDDI Corporation said an unauthorized actor… Read More "KDDI Breach Affects Six Japanese ISPs, Exposes 14.2 Email Credentials"
Ravie LakshmananJul 10, 2026Malware / Enterprise Security The China-linked cybercrime group known as Silver Fox has been attributed to a new Rust-based remote access trojan (RAR) called MODBEACON. Chinese cybersecurity company QiAnXin said that while the threat cluster may appear… Read More "New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic"
A North Korea-linked macOS backdoor has been caught hiding a prompt injection that targets malware analyst’s AI tools, rather than the sandbox analyzing it. SentinelLabs, the research arm of SentinelOne, said the Rust implant embedded 38 fabricated system messages designed to… Read More "macOS Backdoor Uses Prompt Injection to Evade AI Triage"
Vendor Risk Management (VRM) is a broad category that encompasses all measures that your organization can take to prevent data breaches and ensure business continuity. Legal issues, past performance, and creditworthiness are some of the common VRM issues that all… Read More "Vendor Risk Management Checklist (Updated 2026)"
Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardware as varied as home routers, smart cameras, and the management chips inside data-center servers. Four of the bugs can crash a device.… Read More "Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot"
The infrastructure of two infamous information stealer malware strains (infostealers), StealC and Amadey, has been disrupted by an international law enforcement takedown. The action against formed the latest part of Operation Endgame, an ongoing global police investigation to combat ransomware… Read More "Operation Endgame Takes Down StealC and Amadey Infostealers"
Sales enablement is the process of equipping sales teams with the content, tools, training, and information they need to engage buyers effectively and close deals. Most organizations scope it to pitch decks, competitive battlecards, CRM workflows, and onboarding programs —… Read More "What Is Sales Enablement? A Guide for Security and Compliance Teams"
