Ravie LakshmananJul 02, 2026Hacking News / Cybersecurity News This week’s security news is mostly about weak spots. Browsers, bots, sandboxes, AI systems, and email flows all show the same problem in different ways. Everything looks normal until someone tests a… Read More "AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories"
A new version of the Gremlin stealer has evolved from a basic credential harvester into a modular toolkit, according to researchers at Palo Alto Networks’ Unit 42. The infostealer first emerged in April 2025, now just 12 months later the… Read More "Gremlin Stealer Evolves into Modular Threat"
Threat actors began exploiting the latest CitrixBleed-like vulnerability in NetScaler ADC and NetScaler Gateways less than 24 hours after public disclosure, Scottish cybersecurity firm Lupovis reports. Tracked as CVE-2026-8451 (CVSS score of 8.8), the security defect was disclosed on June… Read More "New CitrixBleed Vulnerability Exploited Immediately After Public Disclosure"
Ravie LakshmananJul 02, 2026API Security / Cyberespionage The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that’s designed to gain surreptitious access to a victim’s email correspondence via the Google API. “In this campaign,… Read More "ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API"
A pseudonymous security researcher has released over 30 proof-of-concept exploits for zero-day vulnerabilities in open-source projects without disclosing them to the maintainers first. The dump, called ‘Exploitarium,’ was shared publicly on GitHub by an individual going by name ‘bikini’ and… Read More "Researcher Explains Release of Undisclosed Zero-Day Exploits"
Traditionally, an audit independently examines records, processes and controls to verify compliance and assess financial and operational integrity. In the modern world, such an approach should extend to the software development lifecycle (SDLC) – especially in the age of artificial… Read More "How to Conduct a Successful Audit of AI-Driven Software Development"
Identity lifecycle management was architected around a person with an employment record, a manager, and a departure date. AI agents have none of those. As autonomous principals proliferate across enterprise environments, the governance model built for humans develops structural blind… Read More "Identity Lifecycle Management Wasn’t Built for AI Agents "
Cybercriminals are posing as international law enforcement agencies in a phishing campaign designed to deliver ransomware attacks. As detailed by Bitdefender Antispam Lab in a blog post published on July 1, the phishing attacks target small businesses across Europe, Asia, the… Read More "Criminals Pose as Interpol in Phishing Emails to Deliver Ransomware"
A threat intelligence platform (TIP) is the software layer that bridges the gap between raw threat data and your team’s security decisions. It aggregates signals from open, deep, and dark web sources, normalizes indicators of compromise (IOCs), enriches them with… Read More "Best Threat Intelligence Platforms and Vendors"
The Trump administration has lifted restrictions on artificial intelligence company Anthropic’s latest versions of its Claude chatbot, ending a weekslong ban tied to cybersecurity concerns. Anthropic said Tuesday night that its AI model called Claude Fable 5 is now widely… Read More "Trump Administration Lifts Restrictions on Anthropic’s Claude Models After Cybersecurity Alarm"
