Ravie LakshmananJul 02, 2026Network Security / Ransomware The recently discovered financially-motivated FortiBleed campaign has been attributed to INC and Lynx ransomware operations, indicating that the verified, stolen credentials were intended for follow-on intrusions. “An operator tied to FortiBleed’s infrastructure was… Read More "FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations"
“CISOs should therefore evaluate which workloads can communicate with the Argo CD control plane, whether east-west traffic is appropriately segmented, and whether unnecessary trust relationships exist between application workloads and GitOps infrastructure,” Grover said. “The assessment should focus on attack… Read More "Argo CD flaw shows why GitOps infrastructure should be treated as tier zero"
Secure-by-design systems, segmented networks, and logging and monitoring are among the best ways to defeat cyber adversaries, according to penetration testers. That is according to the National Cyber Security Centre (NCSC), which explained in a blog post published on July 1,… Read More "NCSC Shares Tips on How to Make a Pen Tester’s Job Harder"
.png?w=1140&resize=1140,855&ssl=1 "Best Vulnerability Management Tools & Software in 2026")
Every security team runs vulnerability scans. It’s the follow-up questions that cause headaches: Which of these 12,000 findings matter, who owns the fix, and how do we prove it held? Staring at a massive spreadsheet of identical “Critical” alerts while… Read More "Best Vulnerability Management Tools & Software in 2026"
The US Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday said threat actors have been exploiting a high-severity vulnerability in Microsoft SharePoint Server. Described as a deserialization of untrusted data bug, the exploited security defect allows authenticated attackers to execute… Read More "CISA Warns of Actively Exploited Microsoft SharePoint Vulnerability"
Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER and says a large language model handled the whole job:… Read More "AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack"
The US Justice Department has announced the arrest and extradition of a teenager accused of various hacking-related offenses as part of the infamous Scattered Spider group. Peter Stokes, 19, is a dual US and Estonian citizen but was arrested in… Read More "Alleged Scattered Spider Member Extradited to US"
Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories on GitHub that claim to exploit hot new CVEs. Run… Read More "New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos"
The FBI has repeated calls urging members of the public not to fall for cryptocurrency investment schemes, after claiming that scammers are using couriers to bypass bank checks. Financial institutions are increasingly capable of spotting and blocking suspicious fund transfers… Read More "FBI Warns Courier Cash Pickups Are Driving Crypto Scams"
Ravie LakshmananJul 02, 2026Vulnerability / Threat Intelligence The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked… Read More "SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation"
