IT Security News Daily Summary 2026-07-15

172 posts were published in the last hour

• 21:34 : Here’s the Truth About Whether Meta’s NameTag Face Recognition Tech ‘Exists’
• 21:11 : RabbitMQ Vulnerabilities Could Enable Unauthenticated Broker Takeover
• 20:10 : Facebook Tops the List of Social Apps People Worry About Most
• 20:10 : Zero-Day in Cursor Code Editor – Security Firm Discloses
• 20:9 : AI Security Is Never Finished: Building the Continuous Red Teaming Loop
• 20:9 : US and allied Governments’ Recommendations: Securing Network Devices Against Russian APT Groups
• 19:5 : IT Security News Hourly Summary 2026-07-15 21h : 13 posts
• 19:3 : Microsoft Urges Windows 11 Users to Install Updates Within Three Days
• 19:3 : Apple Warns Millions of iPhone Users: FaceTime Scams Are Spreading
• 19:3 : CMMC Assessment Pause Leaves Defense Contractors Facing a New Risk
• 19:2 : Microsoft Fixes Record 570 Security Flaws in Biggest Patch Tuesday Ever
• 19:2 : Jalisco, OmegaLord Phishing Kits Target Microsoft 365 Accounts
• 19:2 : Microsoft patches bug in video game Age of Empires II
• 19:2 : Hackers Expanding Destiny Stealer Across the US and Europe. Is Your Organization Ready to Defend?
• 19:2 : TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development
• 18:34 : Hack suggests AI music generator Suno scraped YouTube for training data
• 18:34 : Hackers Abuse Shared Claude Chats and Google Ads to Deploy MacSync Stealer on macOS
• 18:34 : GPT-5.6 Sol Ultra Builds Full Chrome Exploit Chain From Security Patches
• 18:34 : Windows 11 KB5101650 and KB5099414 Updates Released With Security Fixes and New Features
• 18:11 : Chaotic Eclipse Unveils LegacyHive Exploit Affecting Fully Patched Windows Systems
• 17:34 : Pentagon Pauses CMMC Phase Two Rollout for 60-Day Review of Cybersecurity Program
• 17:34 : Researchers Find Claude for Chrome Flaws That Could Let Malicious Extensions Trigger Sensitive Google Tasks
• 17:34 : RabbitMQ Flaw Exposes OAuth Secrets, Risks Full Broker Takeover
• 17:9 : Fake Céline Dion Paris Tickets Sold on Facebook and Ticketmaster Clones
• 17:9 : Turning threat intelligence into decisive action with Defender Experts
• 17:9 : OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps
• 16:35 : Microsoft patches record number of security vulnerabilities, citing its use of AI
• 16:34 : Q&A: Businesses Are Running Out of Time to Prepare for the Quantum Threat, Warns Moona Ederveen-Schneider
• 16:5 : Critical Cursor 0-Day Flaw Allows Malicious Git Repos to Trigger Automatic Windows Code Execution
• 16:5 : CISA warns that multiple vulnerabilities in SharePoint are under exploitation
• 16:5 : IT Security News Hourly Summary 2026-07-15 18h : 5 posts
• 15:35 : CISA sounds alarm over trio of exploited SharePoint flaws
• 15:34 : US launches vulnerability clearinghouse amid AI-fueled surge in flaws
• 15:9 : Unpatched Cursor Vulnerability Exposes Users to Code Execution
• 15:9 : LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software
• 15:9 : Phishing Campaign Abuses eCards to Deploy RMM Tools
• 14:38 : Lidl Data Breach Exposes Customer Details in Germany, Belgium, and the Netherlands
• 14:38 : Apple Tests New iMessage Warning for Malicious Messages
• 14:37 : US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62M from cybercrime victims
• 14:36 : Claude for Chrome flaw could let rogue extensions access your Gmail
• 14:34 : CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities
• 14:34 : Cyber Briefing: 2026.07.15
• 14:12 : Pulse Security Debuts Operational Management Platform Built for Security Leaders
• 14:12 : Microsoft cancels Patch Tuesday for some Dell users over surprise shutdowns, overheating devices
• 14:12 : F5 Insight for ADSP enhances BIG-IP operations with guided updates and AI audit trails
• 14:11 : Xint Pulse offers on-demand black-box penetration testing for web applications
• 14:11 : Socure rolls out Remote Verifier for higher-risk identity checks
• 14:9 : Threat actor impersonated hundreds of brands on GitHub to push infostealer malware
• 14:9 : Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws
• 14:8 : Eleven Vulnerable UEFI Shims Enable Secure Boot Bypass
• 13:50 : A New Definition of Hyperscale
• 13:48 : Smash and Grab at Scale: Agentic AI Is Reshaping the Threat to Commerce
• 13:47 : Russian-Speaking Hacker Uses Gemini CLI to Deploy C2 Botnet in Six Minutes
• 13:46 : Proton Launches Business Continuity Service to Keep Firms Communicating Through Outages
• 13:46 : Microsoft Confirms Dell Laptops Shut Down, Increase Heat Following July Windows Update
• 13:45 : CISA Warns of Microsoft SharePoint Server Vulnerability Actively Exploited in Attacks
• 13:43 : Hackers Abuse FaceTime Calls to Impersonate Banks and Hijack Victims’ Accounts
• 13:42 : Multiple Windows RDP Vulnerabilities Allow Attackers to Access Sensitive Data
• 13:39 : Multiple Dell PowerProtect Vulnerabilities Allow Hackers to Gain Full System Access Remotely
• 13:37 : UK NCSC Unveils AI-Powered Cyber Shield Initiative
• 13:35 : US launches AI-powered Gold Eagle cybersecurity group
• 13:15 : Insignary Launches Clarity On-Demand: SBOMs, No Annual Commitment Required
• 13:14 : Microsoft Blocks Windows 11 Security Update on Dell PCs Over Intel Driver Causing Shutdowns and Battery Drain
• 13:13 : OkoBot Malware Uses ClickFix and SeedHunter to Steal Ledger and Trezor Seed Phrases
• 13:12 : AsyncAPI npm Supply Chain Attack: Malware Injected Into Packages With 2 Million Weekly Downloads
• 13:12 : LegacyHive: ‘Bone-shattering’ zero-day from Microsoft’s serial tormentor not the haymaker that was promised
• 13:11 : Virtual Event Today: Cloud & Data Security Summit
• 13:11 : Windows Bind Link Attacks Can Hide Malware From EDR Tools
• 13:10 : Japan’s Largest Taxi Service Goes Offline After Cyberattack
• 13:10 : New Webinar: Closing the Approval Gap in AI-Era Ad Tech
• 13:10 : Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday
• 13:10 : SASE Has An AI Blind Spot. Inspecting Packets Is No Longer Enough.
• 13:9 : Compromised Logins Surge as the Most Common Entry Point for Ransomware Attacks
• 13:9 : Cursor Windows Code Execution Flaw
• 13:9 : ClickFix Social Engineering Ecosystem
• 13:9 : Lidl Data Breach via Third-Party IT Provider
• 13:9 : Black Duck Adds AI Triage to Coverity SAST
• 13:5 : IT Security News Hourly Summary 2026-07-15 15h : 13 posts
• 12:39 : PromptFiction Flaw Auto-Submitted Hidden Prompts in Claude Desktop
• 12:37 : 3 Russian Nationals Indicted for Running Bulletproof Hosting Network Behind $62 Million Cyberattacks
• 12:35 : July 2026 Patch Tuesday fixes 622 Microsoft CVEs, including three zero-days
• 12:34 : LatticeFlow AI connects governance frameworks with continuous AI risk monitoring
• 12:33 : Radware adds cloud intelligence to DefensePro X for web DDoS defense
• 12:19 : Tracking Peter Stokes and The Com: Allison Nixon and Her Work Unmasking Cybercriminals
• 12:18 : Microsoft’s July 2026 Patch Tuesday fixes 622 flaws and 2 exploited zero-days
• 12:17 : LabubaRAT Rust Malware Masquerades as NVIDIA Software to Backdoor Windows Systems
• 12:16 : US Charges Russian Individuals and Firms for Running Cybercrime Services
• 12:14 : Binary Defense’s NightBeacon CMD helps enterprise SOC teams automate threat investigations
• 12:12 : Nudge Security automates detection of risky OAuth grants and browser extensions
• 12:10 : Spanish police dismantle €140 million cybercrime network
• 12:8 : Progress Restores ShareFile Storage Zones Access After Vulnerability Exploit Concerns
• 11:52 : A Video Screen That Is Also a Camera
• 11:51 : Q&A: Cyber’s Headed Back to the CSIDES
• 11:49 : AI has crossed from assistant to operator, Check Point research warns
• 11:47 : Black Duck Adds AI-Powered Triage and CRA-Ready Checks to Coverity Static Analysis
• 11:45 : Lidl Confirms Data Breach After Third-Party IT Provider Hack
• 11:43 : Forescout Uncovers AI Assisted Phishing Campaign Using Fake eCards
• 11:40 : Chrome 150 Security Update Patches 15 Flaws, Including Two Critical Code Execution Ones
• 11:38 : Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow
• 11:36 : Polygraf AI Meeting Guard delivers real-time deepfake detection for enterprise meetings
• 11:20 : U.S. CISA adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalog
• 11:17 : ClickFix is changing the economics of social engineering
• 11:14 : Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution
• 11:12 : Microsoft July 2026 Patch Tuesday Fixes Record 570 Flaws Including Three Zero-Days
• 10:41 : Dell Warns of Critical PowerProtect Data Domain Flaws Allowing Remote Attackers to Take Complete Control
• 10:39 : White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative
• 10:36 : AI-driven bug hunting fuels record Microsoft Patch Tuesday
• 10:23 : TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development
• 10:21 : 11 Malicious NuGet Game Cheat Packages Deploy Pepesoft Windows Surveillance Malware
• 10:19 : Forgotten UEFI shims undermining Secure Boot
• 10:17 : OkoBot: new sophisticated malware framework targets cryptocurrency users
• 10:14 : Critical SonicWall Firewall 0-Day Vulnerabilities Actively Exploited in Attacks
• 10:11 : Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption
• 10:8 : Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware
• 10:5 : IT Security News Hourly Summary 2026-07-15 12h : 10 posts
• 9:38 : ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Rockwell
• 9:36 : Microsoft Patches 570 CVEs in Record Patch Tuesday
• 9:26 : OpenAI Plans Smart Speaker In First Hardware Foray
• 9:23 : SheetAgent RAT Runs 14 Virtual Machine Checks and Self-Deletes When Analysis Is Detected
• 9:21 : SonicWall warns of active exploitation of two SMA 1000 zero-days
• 9:19 : Fluke – 821,100 breached accounts
• 9:16 : This fake Apple app can unlock your Mac’s password vault
• 9:14 : FreeRDP 3.29.0 security update resolves 22 advisories
• 9:11 : AWS retools Security Hub for AI and multicloud threats
• 9:8 : Government Updates UK’s National Risk Register with Cyber Warnings
• 8:44 : UK Man Jailed Over SWAT Calls After Being Identified By FBI
• 8:42 : New LegacyHive Windows 0-day Vulnerability Allows Users to Load Another User’s Registry
• 8:40 : Gamers Download Fake Cheats and Hand Attackers a Live Remote Control of Their Windows PCs
• 8:38 : Chinese Hackers Embed Claude Code and DeepSeek in AI-Powered Government Cyberattacks
• 8:36 : Researcher Claims Bypass of EU Age Verification App Using Chrome Extension
• 8:12 : Virgin Media Fined After Dropping Calls Of Those Trying To Switch
• 8:10 : Product showcase: Trust Chain TPRM turns vendor compliance evidence into verified assurance
• 8:6 : Fortinet adds AI controls and data loss prevention to FortiEndpoint
• 7:40 : Drivers Sue Uber Over AI Manipulation
• 7:38 : FaceTime Scammers Combine Credential Theft, Remote-Access Apps, and iOS Exploits for Device Takeover.
• 7:37 : Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates
• 7:36 : CMMC Phase II suspended, tracking troops in Iran, defenders turn to context bombing
• 7:16 : 11 Old Signed UEFI Shims Just Broke Secure Boot on Millions of PCs
• 7:14 : Two Joomla Extensions Hit by Zero-Day File Upload Attacks Before Patches Landed
• 7:12 : Staff Sue Meta Over Alleged Use Of AI To Conduct Layoffs
• 7:10 : Google Chrome 150 Update Fixes 15 Security Vulnerabilities, Including 2 Critical Use-After-Free Flaws
• 7:8 : Hackers Abuse OAuth Device Codes and Entra ID Enrollment for Persistent SaaS Access
• 7:7 : Critical SonicWall SMA 1000 SSRF and Remote Code Execution Flaws Actively Exploited in the Wild
• 7:7 : Microsoft Fixes Multiple Windows RDP Flaws Exposing Sensitive Data Over the Network
• 7:5 : IT Security News Hourly Summary 2026-07-15 09h : 6 posts
• 6:35 : EU Sets Out Plans For Social Media Restrictions
• 6:35 : Fortinet Patches 7 Security Flaws Affecting FortiOS, FortiProxy, FortiPAM, FortiSASE, and FortiSandbox
• 6:34 : China-Linked Hackers Weaponize Claude Code and DeepSeek in Government Intrusion Campaign
• 6:34 : Critical Claude for Chrome Flaw Lets Malicious Extensions Read Gmail, Google Docs, and Calendar
• 6:34 : Americans are ignoring scam calls, but phishing emails still fool many
• 6:34 : Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands
• 6:3 : Russian Hackers Hijack Routers To Target Critical Infrastructure
• 6:3 : Notepad++ v8.9.7 Security Update Fixes 5 Vulnerabilities, Including Stack Buffer Overflow and Zip Slip Flaws
• 6:3 : Goose Creek – 6,574,121 breached accounts
• 6:2 : Multiple Notepad++ Vulnerabilities Enable PowerShell Command Injection Attacks
• 6:2 : Microsoft Active Directory Services 0-Day Vulnerability Actively Exploited in the Wild
• 6:2 : SingGuard-NSFA: Open-source guardrails for agentic AI
• 5:34 : Microsoft Patch Tuesday July 2026 – Record 570 Vulnerabilities Patched
• 5:33 : Artlist ClickFix Campaign Uses Infostealer-Stolen WordPress Credentials to Deploy RAT Malware
• 5:32 : SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits
• 5:32 : The MDR renewal question: What changes when AI can handle the alerts
• 4:35 : AI used to help plan the break-in, now it’s doing the break-in
• 4:34 : An AI overthinking attack can tie a robot up for over a minute
• 4:13 : Windows BitLocker 0‑Day Vulnerability Allows Hackers to Bypass Security Feature
• 2:34 : Six Minutes to Compromise: How ‘Patriot Bait’ Actor Used AI to Build and Deploy a C&C Botnet
• 2:33 : ShareFile explained, healthcare in critical cyber condition and click fix tops malware charts
• 2:4 : Recent DShield SIEM Update, (Tue, Jul 14th)
• 2:4 : ISC Stormcast For Wednesday, July 15th, 2026 https://isc.sans.edu/podcastdetail/10008, (Wed, Jul 15th)
• 1:5 : ICYMI: June 2026 @AWS Security
• 22:9 : Patch Tuesday security updates for July 2026, the largest update ever. 621 CVEs in one month
• 22:5 : IT Security News Hourly Summary 2026-07-15 00h : 3 posts
• 21:57 : IT Security News Daily Summary 2026-07-14