Ransomware has always needed a human at the keyboard or writing the script behind it. That assumption no longer holds. Researchers have documented what appears to be the first fully autonomous ransomware operation, driven entirely by an AI agent rather…
Category: EN
Microsoft Outlook Bug Removes Copilot Button For Windows Users
A software defect in classic Outlook for Windows caused Copilot Chat and Copilot entry points to vanish for affected users, with Microsoft confirming the issue was tied to specific Basic-tier Copilot licenses. The bug has since been resolved through a…
Opera Blocks Clipboard Attacks, Including ClickFix, With New Paste Protect Feature
Opera has introduced a new built-in security feature called Paste Protect, designed to defend users against clipboard-based cyberattacks, including the increasingly common ClickFix technique. The feature is now integrated directly into the Opera browser. It is enabled by default, providing…
Hackers Use Fake VLC Executable and Malicious libvlc.dll to Deploy ValleyRAT
Cybercriminals have found a clever way to slip past security defenses by hiding malware inside a program most people trust without a second thought. Researchers have uncovered a campaign that abuses the popular VLC media player to quietly install ValleyRAT,…
900+ Oracle E-Business instances Exposed Online Amid Active Vulnerability Exploitation
More than 900 Oracle E‑Business Suite instances have been found exposed on the public internet. At the same time, attackers actively exploit a critical vulnerability in the platform, putting mission‑critical ERP environments at immediate risk of compromise. Recent scanning data…
Cyber Briefing: 2026.07.02
Outpaced by the perimeter, overwhelmed by the data: inside the staggering reality of cyber workforce burnout and the chaos of rushed AI implementation. This article has been indexed from CyberMaterial Read the original article: Cyber Briefing: 2026.07.02
Scattered Spider suspect extradited over $8 million ransom scheme
A suspected Scattered Spider member has been extradited to the United States to face charges linked to cyberattacks against U.S. companies, including the breach of a luxury jewelry retailer that led to an $8 million cryptocurrency ransom demand after attackers…
ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API
The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that’s designed to gain surreptitious access to a victim’s email correspondence via the Google API. “In this campaign, the attackers focused their attention on corporate…
Opera Browser Adds Native Paste Protect to Stop Clipboard Hijacking and Code Injection Attacks
Opera has announced a new native security feature called “Paste Protect,” which aims to combat clipboard hijacking and command injection attacks directly within the browser. This marks a significant advancement in proactive endpoint protection at the user interaction level. Introduced…
How to Conduct a Successful Audit of AI-Driven Software Development
As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production. The post How to Conduct a Successful Audit of AI-Driven Software Development appeared first…
Context Engineering | Compaction & Agent Memory for Automated Malware Analysis
Compaction cut input tokens 86% across long-running agent evals with no quality loss. Context discipline matters as much as model selection. This article has been indexed from SentinelLabs – We are hunters, reversers, exploit developers, and tinkerers shedding light on…
Hackers Abuse ScreenConnect Remote Access Tool to Deploy AsyncRAT Through Fake Installers
A wide-reaching campaign in which attackers abused the legitimate remote administration tool ScreenConnect to deploy AsyncRAT via faux software installers. The infection chain leverages trusted binaries, DLL sideloading, reflective loading and process hollowing to achieve stealthy persistence and remote control…
WinRAR flaw could allow attackers to take control of your computer
A new WinRAR update fixes a serious security flaw, but without automatic updates many users could miss the patch. This article has been indexed from Malwarebytes Read the original article: WinRAR flaw could allow attackers to take control of your…
Pacemaker manufacturer Medtronic warns patients cybercrooks may have swiped health data
Company that also makes insulin pumps and other devices tells users what was exposed months after ShinyHunters attack This article has been indexed from www.theregister.com – Articles Read the original article: Pacemaker manufacturer Medtronic warns patients cybercrooks may have swiped…
FortiBleed Campaign Linked to INC, Lynx Ransomware Attacks
Researchers say credentials harvested from hundreds of thousands of FortiGate firewalls are being used to facilitate ransomware attacks by the INC and Lynx operations. The post FortiBleed Campaign Linked to INC, Lynx Ransomware Attacks appeared first on SecurityWeek. This article…
New iboss platform gives organizations instant visibility into AI tools and usage
iboss has launched the AI Security Platform, a new service that gives any organization visibility into the AI tools its people are using, free of charge. Signup is instant, deployment takes an afternoon, and a complete AI footprint appears within…
Researcher Behind ‘Exploitarium’ Explains Release of Undisclosed Zero-Day Exploits
Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities first This article has been indexed from www.infosecurity-magazine.com Read the original article: Researcher Behind ‘Exploitarium’ Explains Release of Undisclosed Zero-Day Exploits
NetScaler Memory Overread Flaw Revives CitrixBleed Fears
Citrix has patched a pre-auth NetScaler memory overread bug, CVE-2026-8451, that echoes the 2023 CitrixBleed flaw and was found while researchers dissected an earlier Citrix bug. NetScaler Memory Overread Flaw Revives CitrixBleed Fears on Latest Hacking News | Cyber Security…
Cursor IDE Vulnerabilities Let Prompt Injection Escape the Sandbox
Two critical Cursor IDE vulnerabilities, dubbed DuneSlide, let prompt injection break the editor’s command sandbox with no click required. Both are fixed in Cursor 3.0. Cursor IDE Vulnerabilities Let Prompt Injection Escape the Sandbox on Latest Hacking News | Cyber…
Cloudflare changes AI crawler access rules
Cloudflare introduced new controls that let website owners manage AI traffic across three categories: Search, Agent, and Training. The feature is available to all Cloudflare customers, including those on the Free plan, and gives website owners more control over how…