Prioritize the critical ABAP kernel issue, plus the AppRouter request smuggling note, and the Commerce Cloud sample-credential issue first, he said, because these are the most likely to produce direct security impact in real environments. But do not treat the… Read More "Patch Tuesday roundup: Microsoft fixes a monthly record 569 holes; SAP patches a critical memory corruption bug"
A cheap, Telegram-controlled remote access trojan (RAT) dubbed Millenium RAT has infected over 60,000 Windows devices across more than 160 countries, most of them in the first three months of 2026. New analysis by security firm Group-IB found that the… Read More "Telegram-Based Millenium RAT Campaign Infects 60,000 Devices"
Ravie LakshmananJul 14, 2026Cloud Security / Identity Security At least two distinct threat actors are weaponizing a novel evasion technique called OAuth client ID spoofing in cloud campaigns, while slipping past telemetry. The activity allows users to enumerate user accounts… Read More "OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials"
OpenAI has previewed GPT-5.6 Sol, a new flagship model it describes as its “most capable model yet for cybersecurity.” Access however is restricted to a small group of vetted partners at the request of the US government. Announced on June 26,… Read More "OpenAI Reveals GPT-5.6 Sol Cybersecurity Model, Restricts Early Access"
Any other browser extension that can run a script on claude.ai can still trigger Claude for Chrome tasks aimed at your Gmail, your latest Google Doc and its comments, and your Calendar. Both this and ClaudeBleed need a rogue extension… Read More "Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads"
Identity crime experts have warned of “multi-layered crises” after revealing that many victims dealt with two or more incidents over the past year. The findings come from US non-profit the Identity Theft Resource Center (ITRC), which analyzed data from over… Read More "Over a Quarter of Identity Crime Victims Hit by Multiple Incidents"
Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already exploiting. The release covers 622 of Microsoft’s own CVEs by its Security Update Guide count, more than triple June’s previous high of around… Read More "Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack"
Just days after expanding its cybersecurity-focused frontier AI program, Project Glasswing, Anthropic released two new models, Claude Mythos 5 and Claude Fable 5. Mythos 5 has been presented by Anthropic as “an upgrade to Claude Mythos Preview” and the AI… Read More "New Anthropic Fable 5 Is a “Mythos-Class” LLM Available to All"
Silicon-to-systems design firm Synopsys says it has found no evidence of a data breach after a cybercrime group claimed to have hacked its systems and gained access to valuable data belonging to one of its major customers, Bosch. A new… Read More "Synopsys Finds No Evidence of Data Breach Amid Bosch Hack Claims"
Ravie LakshmananJul 14, 2026Enterprise Security / Vulnerability SAP has rolled out updates to address multiple vulnerabilities as part of its July 2026 security updates, including a critical flaw in SAP NetWeaver Application Server ABAP. The vulnerability in question is CVE-2026-44747… Read More "SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data"
