clearinfosec.com ↗

Category: Threat Intelligence

Threat Intelligence Bulletins (TIB) on emerging threats, actively exploited vulnerabilities, and advisories.

Threat Intelligence Bulletin: July 29, 2026
Clear Infosec weekly Threat Intelligence Bulletin for July 29, 2026. Curated cyber security news, threats, and guidance with links to the original sources.

Cyber Security News
- Russian Hackers Exploit Zimbra Zero-Day Against US Ukraine Targets A state-sponsored threat group, dubbed “Laundry Bear,” sends “half-click” phishing emails that require a victim only to open or preview the…
- Ransomware Attack Puts a Chill on Japanese Frozen-Food Chain A cyberattack on a food and logistics firm disrupts the supply of frozen food to thousands of clients, including major franchises like Kentucky Fried Chicken…
- Attackers Are Learning to Live Off the AI Toolchain Sandworm_Mode is an early example of malware that exploits trusted AI tools and workflows to make malicious activity virtually indistinguishable from normal act…
- Thousands of Data Center Controllers Open to Takeover A host of Internet-exposed remote hardware management processors are subject to offline password-cracking attacks — and adversaries have taken note…
- Confused Deputy Flaws Persist in Google Cloud Microsoft Azure This category of vulnerabilities allows an attacker to easily acquire administrative level permissions and bypass cloud providers’ access controls…
Best Practices
- Ransomware groups are hammering your vulnerable VPNs Cybercriminals are actively exploiting a recently discovered vulnerability in Palo Alto Networks firewall and VPN appliances to deploy th…
- Microsoft’s 3-day patching directive comes with added operational risk Microsoft 365 Director Jeremy Chapman this month took to video to tell Windows admins that the days of delaying security patches are over…
- Critical Zimbra security update fixes 9 vulnerabilities Business email and collaboration suite Zimbra has received a major security update that fixes several critical issues that could allow at…
- Cisco’s new AI model tells code reviewers where to look for vulnerabilities Cisco has revealed a family of open-weight AI models called Antares that, it said, can help security teams isolate potentially vulnerable…
New Threats and Vulnerabilities
- Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite Executive summary A group of Russian state-su…
- Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge The Chaos ransomware group ran its command-and-control through the victim’s own browser. Cisco Talos on Thursday detailed msaRAT, the Rust implant behind it, fo…
- Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure desig…
- Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, whi…
Patch Management
- Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsofts Servers A crafted SVG submitted to Bing’s image search ran commands as NT AUTHORITY\SYSTEM on Microsoft’s production image-processing workers, and as root on the Linux…
- Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates Source code for the Flying Eagle Android remote access trojan (RAT) framework is circulating through criminal Telegram channels. Hunt.io and independent researc…
- Fake Notepad++ Plugin Delivers MATCHBOILV2 in UAC-0099 Attacks The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign that involves the use of a malicious program that’s dressed up as a Notep…
- Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, whi…
AI and Security
- AI has changed data architecture but storage hasnt caught up Your GPU dashboard says 70% utilization. On paper, the cluster is busy. In practice, a large chunk of that time is spent with your $40,000 accelerators sitting…
- How AI drove Shopify back to clean code E-commerce platform Shopify wants to make reading source code a thing again. And it has an unlikely ally for its back-to-the-roots approach: AI agents. The com…
- OpenAI admits it was the source of the agent swarm that attacked Hugging Face OpenAI has admitted that it was the operator of the autonomous agents that attacked model-mart Hugging Face last week, and that they did so after a research pr…
July 29, 2026
Threat Intelligence Bulletin: July 22, 2026
Clear Infosec weekly Threat Intelligence Bulletin for July 22, 2026. Curated cyber security news, threats, and guidance with links to the original sources.

Cyber Security News
- Remediating Vulnerabilities With LLMs: Inside Ivantis Automation Push Ivanti CSO Daniel Spicer says frontier models have shown surprising effectiveness in early stages; but cost and human-in-the-loop viability remain open question…
- Claude Flaw Automatically Sends Malicious Prompts to AI Agents When combined with another exploit, the “PromptFiction” vulnerability, which has been fixed, could have enabled an end-to-end attack on a targeted sys…
- 2-Click Cursor Exploit Enables Dev Environment Takeover Simple age-old bugs give bad actors access to developers’ secrets and source code-rich environments…
- Ukraine warns fake CAPTCHAs are being used to make you hack yourself Ukraine’s computer emergency response team, CERT-UA, has warned that the Kremlin-backed Sandworm hacking group is leveraging fake CAPTCHA checks on compromised…
Best Practices
- Attack on Amazon Bedrock-linked AI gateway highlights new cloud security risk A cloud intrusion that ended with the deployment of cryptomining malware has exposed a bigger risk for enterprises: AI gateways that conc…
- GitHub’s public APIs are becoming an enterprise reconnaissance tool GitHub continues to be a scintillating target for attackers because it sits in the middle of the software supply chain and gives threat a…
- GitHub AI agent leaks private repositories via prompt injection attack A prompt injection attack can trick GitHub’s preview Agentic Workflows into retrieving content from private repositories and publishing i…
- Cybercriminals exploit India’s tax filing season with a dual-malware campaign Cybercriminals are exploiting India’s tax filing season with a new malware campaign that refuses to put all its eggs in one basket. Re…
New Threats and Vulnerabilities
- Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents A single invisible comment in an Azure DevOps pull request can turn a reviewer’s own AI coding agent against them, driving it into projects the attacker has no…
- Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs Apple has moved to address a security flaw in its Hide My Email service that enabled users’ real email addresses to be unmasked, effectively undermining the fea…
- Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC A third SharePoint Server flaw patched by Microsoft as part of its Patch Tuesday update for July 2026 has come under active exploitation, per watchTowr. The vu…
- 20+ Hijacked Government Websites Became?an Attack Channel More than 20 Brazilian government websites were hijacked and turned into malware delivery channels in an active PhantomEnigma campaign uncovered by ANY.RUN, a l…
Patch Management
- Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HT…
- Firefox Chrome Adobe and VMware Updates Fix Multiple Critical Security Flaws Mozilla has released updates to address two critical flaws in Firefox for which it warned that exploit code has been published. The vulnerabilities are listed…
- Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads Any other browser extension that can run a script on claude.ai can still trigger Claude for Chrome tasks aimed at your Gmail, your latest Google Doc and its com…
- CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that’s capable of harvesting sensitive data from compromised systems…
AI and Security
- OpenAI hides Codex agent instructions behind encryption leaving developers in the dark OpenAI has never been as open as its name suggests and is becoming even less so. The free-spending AI giant recently revised the multi-agent orchestration in i…
- IBMs mainframe sales get mugged by AI hardware panic stock sheds more than a quarter of its value IBM says customers spooked by soaring demand for AI infrastructure raided their mainframe budgets to stockpile servers, storage, and memory instead, knocking B…
- AI spam filters are getting suckered by old-school text salting Notice more spam getting through that corporate email filter lately? Attackers are using a technique known as “text salting,” which hides benign-looking words…
July 22, 2026
Threat Intelligence Bulletin: July 15, 2026
Clear Infosec weekly Threat Intelligence Bulletin for July 15, 2026. Curated cyber security news, threats, and guidance with links to the original sources.

Cyber Security News
- China-Linked Group Targets Southeast Asia Critical Systems The group compromised at least 10 regional organizations, including two state-owned entities, and deployed a new backdoor…
- GitLost Flaw Leaks Private Data From GitHubs Agentic Workflows The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org’s public repository and then silently pull data from its private repos, too…
- Crafty Phishing Campaigns Auto-Adapt to Victims Device OS Attackers fingerprint victims through user-agent data to deliver OS-specific payloads, increasing compromise rates and campaign profitability…
- Lone Attacker Uses AI to Breach AWS Cloud Environment in 72 Hours The attacker exploited AI workflows, chained cloud weaknesses, and stolen credentials to extort a large Amazon customer…
- Weak Security Continues to Fuel Russian Cyberattacks In a first, the UK and the EU jointly imposed sanctions on Russian individuals and entities for cyberattacks and disinformation campaigns in the region…
Best Practices
- US authorities warn of Russian attacks on critical infrastructure The US authorities NSA, FBI, and CISA warn that Russian hackers have recently carried out a number of attacks on critical infrastructure…
- Attack on Amazon Bedrock-linked AI gateway highlights new cloud security risk A cloud intrusion that ended with the deployment of cryptomining malware has exposed a bigger risk for enterprises: AI gateways that conc…
- Watch out for fake support calls in Microsoft Teams Palo Alto Networks’ security division, Unit 42, is warning of yet another campaign targeting Microsoft Teams users. The new campaign b…
- Adobe premieres a second Patch Tuesday each month to deliver fixes faster Adobe will now issue security patches for its products twice as often to deal with the increasing pace of software vulnerability discover…
New Threats and Vulnerabilities
- 11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot Cybersecurity researchers have discovered 11 old, Microsoft-signed, Unified Extensible Firmware Interface (UEFI) applications that could be abused to bypass Sec…
- CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that’s capable of harvesting sensitive data from compromised systems…
- Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibe-coded PowerShell script for Active Directory (AD) enumerat…
- Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code ex…
- Attackers Exploit Ill Bloom Vulnerability to Drain Over $5 Million From Cryptocurrency Wallets Security firm Coinspect has disclosed a crypto wallet flaw it calls Ill Bloom, and attackers are already using it. The flaw is in how some wallet…
Patch Management
- Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics, antibot eva…
- Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts Cybersecurity researchers have warned of a “massive, ongoing, automated password spray attack” aimed at Microsoft’s Azure command-line interface (CLI), compromi…
- Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) tha…
- Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy b…
AI and Security
- Microsoft warns customers AI will mean busier Patch Tuesdays Microsoft has warned customers to expect more security patches for the foreseeable future, thanks to AI. “As AI helps defenders discover more issues, customers…
- Bug in top AI coding agents shows that Unix-era security headaches never really die UPDATED A “systematic vulnerability pattern” in at least six of the most widely used AI coding assistants can be abused to trick agents into accessing files ou…
July 15, 2026
Threat Intelligence Bulletin: July 8, 2026
Clear Infosec weekly Threat Intelligence Bulletin for July 8, 2026. Curated cyber security news, threats, and guidance with links to the original sources.

Cyber Security News
- Scammers race to cash in on Venezuelan earthquake disaster Scammers wasted no time exploiting Venezuela’s devastating earthquake, with researchers uncovering 212 newly-registered relief-themed domains in just five days…
- USB drives carrying China-linked malware infected Japanese military networks for nearly a year Read more in my article on the Hot for Security blog…
- Third-Party Breaches Teach Education Sector a Costly Lesson in Vendor Risk Rising threats from third-party actors are forcing institutions to play defense to protect student data from ransomware and other attacks…
- CitrixBleed-ing Again? NetScaler Vulnerability Under Attack Attackers wasted little time targeting the latest memory disclosure flaw in Citrix’s NetScaler products, after researchers published a proof-of-concept exploit…
- Ransomware Thugs Masquerade as Interpol to Entice Small Biz The ransomware campaign relies on basic social engineering and stretches across multiple regions, including the US, Europe, Middle East, and elsewhere…
Best Practices
- Detection engineering: A programmatic approach to identifying cyber threats Detection engineering, which was once a niche practice among mostly large companies, appears to have evolved into a capability that organ…
- Microsoft 365 users fall victim to one-in-a-million password spray attack Microsoft users have been hit by a massive, automated password spray attack. Among those targeted by the attack were clients of securi…
- Unpatched SharePoint servers opened the door to multiple attackers Microsoft finds What began as a routine ransomware investigation uncovered two unrelated attackers operating inside the same victim network at the same t…
- British public won’t tolerate cyber disruption any more The British public’s tolerance for cyber disruption, particularly at high-profile organisations such as retailers, is wearing thin, according to a TalkTalk Busi…
- Canvas breach hit 160 UK unis but caused limited damage The April 2026 ShinyHunters breach of the Canvas learning management system caused downstream impacts at more than 150 higher education institutions in the UK,…
New Threats and Vulnerabilities
- Defending Against China-Nexus Covert Networks of Compromised Devices Defending against china-nexus covert networks of compromised devices executive summary Defending against China-nexus covert networks of compromised devices&nb…
- Your Windows 11 PC might be hiding a 500GB storage bug – how to check A glitch in Windows 11 causes a specific system file to keep growing in size, though a patch is available. Here’s what you need to know about it…
Patch Management
- Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data New Microsoft research shows how attackers can hijack AI agents that act on a user’s behalf, using nothing more than a poisoned tool description to ma…
- RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured servers, then stitching them into a netw…
- Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily replacing wallet addresses wh…
- Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for. It routed every quer…
- ? Weekly Recap: Linux Kernel Flaws AI Malware Tricks Turla Backdoor Infostealers and More This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path, one missed patch, and suddenly the door is open…
AI and Security
- How is AI changing datacenter network fabrics? The network has become the nervous system of any organization running AI at scale. A single distributed training run can chew through thousands of GPUs for wee…
- OpenAI Codex bombards SSDs with needless write operations costing millions Modern SSDs have a limited number of write cycles before they expire. Now, OpenAI is scrambling to fix a flawed logging implementation that has been shortening…
July 8, 2026
Threat Intelligence Bulletin: July 1, 2026
Clear Infosec weekly Threat Intelligence Bulletin for July 1, 2026. Curated cyber security news, threats, and guidance with links to the original sources.

Cyber Security News
- Fake Bug Report Hijacks AI Coding Agents at Scale “Agentjacking” is the latest demonstration of how easily attackers can exploit an AI agent’s inability to differentiate between content and instructio…
- Attackers Hijack Exposed AI Endpoints to Power Offensive Ops Attackers don’t need any special authentication to reach a target endpoint — they just need to know where it is…
- Vulnerabilities Expose Private Data in Indian Government Systems One critical vulnerability, among many discovered by a researcher, could have allowed anyone to walk in and take over a national government portal…
- In Less Than 24 Hours Attackers Weaponize Cisco CUCM Flaw The flaw enables server-side request forgery (SSRF) and escalates privileges to root, impacting Cisco Unified CM and Unified CM SME deployments…
Best Practices
- Malicious Chromium extension spoofs Perplexity AI to hijack browser searches Google has removed a malicious browser extension masquerading as Perplexity AI after Microsoft researchers found it was intercepting user…
- Proposed US law would make AI risk reporting a legal obligation US lawmakers on Thursday introduced a bill that would require developers of advanced AI models to report major safety and security incide…
- Attackers exploit Cisco Unified CM flaw weeks after patch release A critical Cisco Unified CM vulnerability is now under active exploitation, weeks after the company issued patches warning it could allow…
- How a malicious AI agent skill passed security checks and reached 26000 users A fake AI agent skill that passed security checks reached over 26,000 users through Instagram, highlighting new risks as enterprises rely…
New Threats and Vulnerabilities
- Ransomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing Software Provider Summary The Cybersecurity and Infrastructure Security Agency (CISA) is releasing this advisory in response to ransomware actors leveraging unpatched instances o…
- Threat Actors Deploy LummaC2 Malware to Exfiltrate Sensitive Data from Organizations Summary The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are releasing this joint advisory to dissemina…
- Ransomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing Software Provider Summary The Cybersecurity and Infrastructure Security Agency (CISA) is releasing this advisory in response to ransomware actors leveraging unpatched instances o…
Patch Management
- Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26000 Agents Security firm AIR built a fake AI agent skill, pushed it through a popular skill marketplace and an Instagram ad, and says it reached roughly 26,000 a…
- Attackers Exploit Three Fortinet FortiSandbox Flaws One Patched Last Week Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. In a post shared on…
- 282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access through their network traffic. In many…
- Apple Patches 30+ iOS macOS Safari Flaws Including AI-Discovered WebKit Bugs Apple on Monday released security updates for iOS, macOS, and the Safari web browser to address over three dozen flaws, including four vulnerabilities in WebKit…
AI and Security
- Changing AI math could reduce the hardware burden researchers show Sophisticated AI models tend to require a lot of memory and take up a lot of storage space. One of the ways to reduce that footprint involves a process called…
- AI agents: Cause of database sprawl And also the proposed solution Database management work will soon be mostly automated by AI agents, just like coding, according to the CEO of Cockroach Labs, the company behind the distribut…
July 1, 2026
Threat Intelligence Bulletin: June 24, 2026
Clear Infosec weekly Threat Intelligence Bulletin for June 24, 2026. Curated cyber security news, threats, and guidance with links to the original sources.

Cyber Security News
- Maine forced to take down data breach portal after fake notices filed with authorities The US state of Maine has taken its public data breach notification portal offline after someone submitted fraudulent breach disclosures impersonating two well-…
- Copilot SearchLeak Attack Allows 1-Click Data Theft The critical, three-stage attack is now patched, but it’s part of a new group of AI prompt-injection issues that use hidden URLs and other variables…
- INC Ransomware Thrives by Mastering the Basics And one of those basics is focusing on sectors where a ransomware disruption creates immediate pressure to pay up, like with healthcare…
- Scope of Salesforce Attacks Expands as Icarus Leaks Data More victims have emerged after attackers breached application vendor Klue and used its OAuth tokens to steal customers’ Salesforce data…
- Hacker hijacks Brazil’s national alert system sending “misanthropy” to millions of phones Emergency alert systems work because people believe them. Every time one of these systems issues a false alert – whether through negligence or a deliberate atta…
Best Practices
- What are the cyber threats to the 2026 Fifa World Cup? Dig deeper on some of the security issues facing the 2026 World Cup as the tournament faces unprecedented threat levels and challenges…
- Attackers abuse Google Ads GitLab and Claude to deliver malware Threat actors are abusing trusted platforms, including Google Ads, GitLab pages, and Claude’s shared chat feature, to trick users into ex…
- FortiBleed campaign exposes 75000 Fortinet firewalls worldwide A massive credential-compromise campaign dubbed “Fortibleed” has been found to expose tens of thousands of Fortinet devices worldwide, wi…
- UK government and Cisco unveil AI digital skills initiative Networking giant and UK Department for Science, Innovation and Technology announce strategic collaboration to help increase AI adoption and widen access to digi…
- AI is exposing the biggest weakness in cybersecurity: We never built a health model Until now! For 30 years, cybersecurity has operated like an emergency room. Reactive. Crisis-driven. Always triaging. We are extraordinarily good…
New Threats and Vulnerabilities
- China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth Cybersecurity researchers have flagged two previously undocumented Windows variants of what was believed to be a Linux-only backdoor called SprySOCKS. “The Win…
- LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian…
- One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails Files and MFA Codes A single click on a trusted Microsoft link could have let an attacker pull emails, calendar details, and indexed files out of Microsoft 365 Copilot Enterprise S…
- Ransomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing Software Provider Summary The Cybersecurity and Infrastructure Security Agency (CISA) is releasing this advisory in response to ransomware actors leveraging unpatched instances o…
- Threat Actors Deploy LummaC2 Malware to Exfiltrate Sensitive Data from Organizations Summary The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are releasing this joint advisory to dissemina…
Patch Management
- AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution. S…
- Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware The North Korean state-sponsored hacking group known as ScarCruft (aka APT37) has been observed using spear-phishing messages impersonating Microsoft Account se…
- Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw Cisco has released security updates for a medium-severity security flaw in Catalyst SD-WAN Manager that has come under active exploitation in the wild. The vul…
- Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails A China-linked espionage group hid inside North American medical, academic, and military research networks for more than a year, quietly stealing sensitive rese…
- CISA Adds Cisco Chrome and Arista Flaws to KEV Catalog Amid Active Exploitation The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog…
AI and Security
- Anthropic recruits army to sell Claude to nonprofits AI may or may not be pushing lots of people out of the workforce, but Anthropic has good news as the Claude creator is creating temporary positions to promote…
- Inside the clouds new agentic AI-ready Arm-powered foundation When Spotify evaluated its cloud compute options, it needed more than incremental improvements. Its recommendation engine delivers real-time suggestions to mil…
June 24, 2026