The UK government has added several new cyber-related scenarios to its National Risk Register; some of which could theoretically result in mass casualties. The register is based on the government’s internal, classified National Security Risk Assessment, and considers malicious risks… Read More "Government Updates UK’s National Risk Register with Cyber Warnings"
Google and Mozilla have released fresh Chrome 150 and Firefox 152 updates that resolve critical-severity vulnerabilities. Mozilla rolled out Firefox 152.0.6 with patches for two critical security defects, warning that exploit code has been published for both. The bugs are… Read More "Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates"
“The same generative tools that help security teams work faster are available to adversaries, and it shows,” Ahmed says. “Phishing campaigns read better and land more precisely than they did a year ago. Social engineering is harder to catch when… Read More "7 skills and traits of elite security engineers"
System administrators are in for a busy few weeks after Microsoft published updates to fix 200 vulnerabilities including three publicly disclosed zero-days June’s Patch Tuesday. A total of 33 critical CVEs were tackled, with most (28) remote code execution (RCE)… Read More "Microsoft Fixes 200 CVEs This Patch Tuesday"
Ravie LakshmananJul 15, 2026Vulnerability / Enterprise Security SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile Access (SMA) 1000 series appliances, one of which could be exploited to achieve arbitrary command execution. The vulnerabilities are listed… Read More "Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands"
Russian intelligence officers are trying to steal backup recovery keys from the Signal accounts of high-risk users, the FBI has warned. A new public service announcement (PSA) issued on June 26 revealed that “multiple clusters” of Russian spies, including Federal… Read More "FBI Sounds Alarm Over Russian Intelligence Signal Phishing"
SonicWall is urging customers to immediately update SMA1000 secure remote access appliances, which are being targeted by threat actors via two new zero-day vulnerabilities. The vulnerabilities are tracked as CVE-2026-15409 and CVE-2026-15410, and they affect SMA1000 versions 6210, 7210, and… Read More "SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits"
Security experts and practitioners have weighed in on a new report claiming that Russia was behind the Jaguar Land Rover (JLR) breach last year. The New York Times report cited people close to the investigation in its story on June… Read More "Russian Hackers Accused of Destructive Attack on Jaguar Land Rover"
Still, passkeys are not a silver bullet, as they do not stop endpoint compromise, session token theft, malicious insiders, or attackers who already have control of a trusted device. Enterprises must complement passkeys with endpoint protection, continuous monitoring, conditional access… Read More "Microsoft is forcing an enterprise transition to passkeys"
The US National Association of Insurance Commissioners (NAIC) has suffered a security breach that has exposed US citizens’ credit rating data. The breach was detected on June 11 and the non-profit association for the US federal insurance system disclosed it… Read More "US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw"
