Nebula Security has published technical information and exploit code targeting a Linux kernel vulnerability that affects all major distributions since 2011. Tracked as CVE-2026-43499 and referred to as GhostLock, the security defect was introduced in Linux 2.6.39 and lurked in… Read More "15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google"
Ravie LakshmananJul 09, 2026Supply Chain Security / DevSecOps GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along with deprecating granular access tokens (GATs) designed to bypass two-factor authentication (2FA). The Microsoft-owned subsidiary… Read More "npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk"
As two of the leading frontier AI labs, OpenAI and Anthropic, expand access to their most advanced large language models (LLMs), Claude Mythos and GPT5.5, with evidence of their capabilities to autonomously find and fix vulnerabilities at scale, the way… Read More "Patch Responsibility Remains Up for Grabs as AI Unearth Flaws At Scale"
Palo Alto Networks on Wednesday published advisories describing more than a dozen vulnerabilities affecting its products. The new advisories cover 13 vulnerabilities specific to Palo Alto Networks products, as well as more than 500 flaws patched recently by Google in… Read More "Palo Alto Networks Patches 13 Vulnerabilities"
Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy business using an infrastructure comprising more than 230 lookalike domains. The activity dates back to at least August… Read More "Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes"
Six major AI coding assistants have been found to share a flaw that turns their approval prompts into a rubber stamp, letting a malicious repository write to sensitive files on a developer’s machine and, in the worst case, achieve remote… Read More "GhostApproval Flaw Hits Six Major AI Coding Assistants"
Israeli startup QIZ Security announced on Thursday that it has raised $17 million in seed funding for its cryptographic posture and post-quantum cryptography (PQC) management platform. The funding round was led by Bessemer Venture Partners and Merlin Ventures, with participation… Read More "QIZ Security Raises $17 Million for Cryptographic Governance Platform"
Ravie LakshmananJul 09, 2026Malware / Endpoint Security Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel driver to neutralize security software as part of its defense evasion strategy. According to a new report published… Read More "GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses"
“As a result, activities that once took weeks can now take minutes, reducing the time available for defenders to respond, detect, and contain them,” the blog post added. The Cyber Shield framework also prioritizes explainable AI, federated AI agents, automated… Read More "UK cyber agency unveils AI-powered Cyber Shield to counter attacks at machine speed"
A threat actor has been caught using AI-generated malware in a real network intrusion, deploying a PowerShell script that an assistant had “vibe-coded” to map out an Active Directory environment. In a report published on July 8, Huntress said it… Read More "Vibe-Coded Malware Caught in Active Directory Attack"
