Red Hat’s official npm namespace has been hijacked to push backdoored package versions built to steal cloud and developer credentials, in a fast-moving supply chain attack against widely used software. According to new analysis by ReversingLabs, an attacker published malicious… Read More "Attackers Hijack Red Hat npm Scope to Steal Cloud Secrets"
Ravie LakshmananJul 09, 2026Hacking News / Cybersecurity News Most security mess starts as admin work. A link gets clicked. A tool gets trusted. A bucket name gets reused. A setting stays loose because nobody wants to touch it. This week is… Read More "Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories"
A threat actor has been observed using AI coding tools to develop and refine malware designed to slip past endpoint detection and response (EDR) software, in what was presented as a red team project. The activity was uncovered by Sophos… Read More "Threat Actor Uses AI to Build EDR Evasion Tools"
Spanish security startup 8Layers has announced closing a $1.1 million pre-seed extension round that brings the total raised by the company in early-stage investment to $2.9 million. The fresh funding came from Criteria Venture Tech and Bankinter. Previous backers include… Read More "8Layers Raises $2.9 Million for Identity Security Platform"
Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is built: not one tool but three older destructive programs bolted into one, offered as commands the operator can choose from. Each is… Read More "New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware"
There has been an explosion in AI-powered cybercrime tooling available on underground marketplaces over recent months, according to a leading ransomware expert. Cynthia Kaiser, SVP Ransomware Research Center at Halcyon, is also a former FBI deputy cyber director and White House advisor. At… Read More "Infosecurity Europe: AI-Powered Cybercrime Tools Surge on Dark Web"
Mount Royal University (MRU), a public university in Alberta, Canada, has confirmed that employee and student data was stolen from its network in a disruptive ransomware attack. The incident was discovered on June 17, after hackers deleted two file storage… Read More "Mount Royal University Confirms Data Stolen in Ransomware Attack"
Ravie LakshmananJul 09, 2026Developer Security / Supply Chain Security Datadog Security Labs is warning of “several overlapping campaigns” that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. “Operators rely on automated scraping tooling with custom… Read More "Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs"
Cyber, AI and geopolitics are now inseparable, according to Bharat Thakrar, board director at ISACA’s London Chapter. Speaking to an audience of cybersecurity leaders at Infosecurity Europe 2026, Thakrar warned that treating security as purely an IT problem is like… Read More "Why Execs and CISOs Must Treat Cyber Threats as Statecraft"
Nebula Security has published technical information and exploit code targeting a Linux kernel vulnerability that affects all major distributions since 2011. Tracked as CVE-2026-43499 and referred to as GhostLock, the security defect was introduced in Linux 2.6.39 and lurked in… Read More "15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google"
