A critical flaw in Google’s Dialogflow CX could have let an attacker with edit rights on one Code Block-enabled agent compromise other Code Block-enabled agents in the same Google Cloud project. From there, they could read live conversations, steal the… Read More "Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots"
Developers of the most powerful AI models have been invited, but not required, to hand their models to the US government for cybersecurity review before release, under an executive order signed on June 2. The order, signed by President Donald… Read More "Trump Signs Order Inviting Voluntary Review of Frontier AI Models"
.png?w=1140&resize=1140,855&ssl=1 "How to Comply with NIST SP 800-171 Revision 3 in 2026")
The National Institute of Standards and Technology (NIST) developed the NIST 800-171 framework to set guidelines and security requirements for protecting controlled unclassified information (CUI). NIST first created the framework in June 2015 but has since revised the publication several… Read More "How to Comply with NIST SP 800-171 Revision 3 in 2026"
A government entity in the US reportedly paid a $1 million ransom to the Kairos cyber extortion group to prevent the public dissemination of information stolen in a May 2025 intrusion, Ransom-ISAC reports. A leaked negotiation transcript shows that the… Read More "County Government Reportedly Paid $1 Million to Cyber Extortion Group"
Swati KhandelwalJul 07, 2026Malware / Mobile Security A new Android malware operation called RedWing is being rented out on Telegram as a ready-made bank-fraud service. It lets even low-skill criminals take over a victim’s phone, steal their banking logins, and… Read More "RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service"
Cybercriminals abused Facebook Messenger chatbots in a campaign which distributed phishing attacks designed to steal business information and other sensitive data from Meta For Business users. The campaign, identified by Huntress, found a way to successfully pass security validation checks… Read More "Phishing Attacks Targeted Facebook Users With Fake Verification Offer"
The “patch everything” model has become technically and operationally unsustainable for mid- to large-scale organizations. Today’s security teams navigate an environment where thousands of new CVEs are published monthly, necessitating a shift from reactive, point-in-time scanning to a disciplined remediation… Read More "What is Vulnerability Remediation? | UpGuard"
An Iran-linked advanced persistent threat (APT) actor has been using a modular command-and-control (C&C) framework in recent attacks targeting organizations in Israel, Check Point reports. Tracked as Cavern Manticore, the APT focuses on government entities and IT providers, and appears… Read More "Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks"
A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between the last week of June 2026 and into early July, per findings from ZeroBEC. “The campaign did not depend on… Read More "DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts"
A suspected China-aligned threat cluster has been exploiting vulnerable Roundcube mail servers at universities in the US and Canada to steal credentials and establish network access. New research from Proofpoint, published on June 7, tracked the activity under the name… Read More "Suspected Chinese Threat Group Targets Universities"
