A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between the last week of June 2026 and into early July, per findings from ZeroBEC. “The campaign did not depend on… Read More "DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts"
A suspected China-aligned threat cluster has been exploiting vulnerable Roundcube mail servers at universities in the US and Canada to steal credentials and establish network access. New research from Proofpoint, published on June 7, tracked the activity under the name… Read More "Suspected Chinese Threat Group Targets Universities"
%20(1).jpg?w=1140&resize=1140,855&ssl=1 "25 Security Vulnerabilities That Have Defined the 2020s (Thus Far)")
Welcome to vulnerability management’s big bang. If it feels like your security team is running a marathon on a treadmill set to a permanent incline of 12.0 with 50lb sandbags tied around each ankle, you’re in good company. We have… Read More "25 Security Vulnerabilities That Have Defined the 2020s (Thus Far)"
Threat actors are exploiting a recently patched vulnerability in Adobe ColdFusion that carries a maximum severity rating. Tracked as CVE-2026-48282 (CVSS score of 10/10), the security defect is described as a path traversal that could lead to arbitrary code execution.… Read More "Critical Adobe ColdFusion Vulnerability Exploited in Attacks"
U.S. prosecutors linked an alleged Scattered Spider hacker to a break-in at a luxury jewelry retailer using a persistent Windows device ID, according to a newly unsealed federal complaint. Microsoft records tied that ID first to the account the attackers… Read More "Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker"
Scattered Spider has been reclassified as a decentralized cybercrime collective composed of independent clusters rather than a single, organized threat group. Group-IB analysis, published on June 7, challenges the traditional view of the activity as one coordinated operation, arguing that… Read More "Scattered Spider’s Structure More Like a Cybercrime Collective"
In August 2023, while thousands of students at William Jewell College were hauling mini-fridges and textbooks into dorms, the invisible, digital heart of the campus was flatlining. There was no internet. No email. Even the HVAC system, tied to a… Read More "Surviving a LockBit Ransomware Attack: The ROI of Visibility"
The US Cybersecurity and Infrastructure Security Agency (CISA) is using Anthropic’s powerful Mythos AI model to scan and audit federal government software for security vulnerabilities, according to a report from Reuters. Citing three sources familiar with the matter, Reuters reported that… Read More "CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws"
The Hacker NewsJul 07, 2026AI Security / Software Supply Chain Software supply chain security was hard enough. Then AI joined the build pipeline. For five years, “software supply chain security” meant one question: what’s in your code? Which open-source packages,… Read More "What Changes When Your Software Supply Chain Includes AI Writing Your Code?"
Konvu, the agentic AI triage management platform, has won the inaugural Infosecurity Europe Cyber Startup competition. Live on stage in the Cyber Startups Zone at Infosecurity Europe 2026, and in front of an audience of potential customers, partners and investors,… Read More "Vulnerability Management Innovator Konvu Wins Cyber Startup Award"
