6 posts were published in the last hour 18:35 : Trump’s AI Safety Chief Quits Just Three Months After Taking Charge 18:34 : Hackers Hijack 20+ Government Websites to Deliver Malware Through Trusted Links 18:34 : This $2,000-a-Month Crypter Can…
Trump’s AI Safety Chief Quits Just Three Months After Taking Charge
Chris Fall has resigned as the director of the Center for AI Standards and Innovation (CAISI), leaving the Trump administration’s AI safety organization without a permanent leader just three months after his appointment. CNBC confirmed the departure on Monday following…
Hackers Hijack 20+ Government Websites to Deliver Malware Through Trusted Links
An active malware campaign, dubbed PhantomEnigma, that abuses compromised Brazilian government infrastructure to distribute malicious payloads while evading detection. The operation has hijacked at least 20 official “.gov.br” municipal and police portals, using them as trusted delivery points for malware…
This $2,000-a-Month Crypter Can Kill EDR and Make Malware Disappear From Disk
A criminal service called Cruciferra is giving malware operators a way to slip past Windows defenses. Sold as a subscription crypter for as much as $2,000 a month, it wraps malicious programs so security tools struggle to inspect, block, and…
Gemini 3.5 Flash Cyber With Automated Faster Vulnerability Detection and Patch Capabilities
Google has launched Gemini 3.5 Flash Cyber, a specialized cybersecurity model fine-tuned to find, validate, and patch software vulnerabilities faster and more efficiently than mainline Gemini Flash models. The release marks a significant expansion of Google’s automated security research efforts,…
Now You Can teach a Skill to Claude by Just Recording your Screen
Anthropic has rolled out a new capability in Claude Cowork that lets users teach the AI assistant a repeatable skill simply by recording their screen while performing a task. The feature, called “Record a skill,” turns a screen capture into…
Trump Orders Defense Contractors to Map Software, Suppliers Across Critical Supply Chains
New executive order calls for end-to-end visibility into defense supply chains, including software dependencies, foreign ownership and cyber-related supplier risks. The post Trump Orders Defense Contractors to Map Software, Suppliers Across Critical Supply Chains appeared first on SecurityWeek. This article…
Hardening MCP Gateways: Mitigating July 28 Security Risks in Java Applications
The upcoming release of the July 28 Model Context Protocol (MCP) specification is a massive milestone for AI integration. By shedding the baggage of stateful connections and embracing a streamlined, stateless HTTP paradigm, MCP has finally become enterprise-ready. Developers can…
AI Cybercrime Report Warns of Emerging AI-Powered Threats
A ThreatDown report warns that AI is making cyberattacks faster, smarter, and more accessible to threat actors. The post AI Cybercrime Report Warns of Emerging AI-Powered Threats appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet…
Cisco Launches Low-Cost AI Models for Source Code Security
The open-weight Antares models are designed to pinpoint known vulnerabilities in codebases faster and at a fraction of the cost of larger AI models. The post Cisco Launches Low-Cost AI Models for Source Code Security appeared first on SecurityWeek. This…
Volume Is Not Risk: Making Sense of the “Vulnpocalypse”
A briefing for security leaders on separating vulnerability disclosure volume from exploitable risk in 2026. This article has been indexed from Trend Micro Research, News and Perspectives Read the original article: Volume Is Not Risk: Making Sense of the “Vulnpocalypse”
Why Do Some Proxies Work Fine for Search But Fail Once You Start Filtering Results?
Automated web scraping, market intelligence data gathering, and large-scale search engine extraction platforms frequently hit an invisible wall. A collection of proxy IPs might execute initial search queries flawlessly, yielding a standard 200 OK status code and complete HTML payloads.…
Behavioral biometrics: How to detect nonhuman threat actors
<p>As Anthropic’s Mythos model makes clear, AI is a cybersecurity game changer. When released in preview, Mythos proved unexpectedly effective in finding and exploiting bugs in software. Anthropic said the preview release found more than 10,000 critical vulnerabilities across every…
Do more with AWS WAF labels using dynamic label interpolation
AWS WAF classifies web traffic by attaching metadata to each request it evaluates. Managed rule groups such as AWS WAF Bot Control and AWS WAF Fraud Control account takeover prevention (ATP) attach labels that describe what they found. A label…
Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities
Google’s DeepMind on Tuesday announced the release of Gemini 3.5 Flash Cyber, a specialized artificial intelligence (AI) model built atop 3.5 Flash that’s designed to discover, validate, and patch vulnerabilities quickly and efficiently. According to the tech giant, the model…
AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code
Hidden text on a web page was enough to make Kiro, AWS’s agentic coding IDE, rewrite its own configuration file and run an attacker’s code on a developer’s machine, with no approval step able to stop it. Intezer, in research…
A Sneaky Hacking Tool Targeting AI Infrastructure Is Lurking in Victims’ Blind Spots
A new type of malware can worm deep into AI coding systems to steal data and logins—and can flip a “death switch” to destroy files and keep out real users. This article has been indexed from Security Latest Read the…
Qilin Ransomware Affiliates Abuse CVE-2026-0257 to Gain Unauthorized VPN Access
Qilin ransomware exploits the PAN-OS GlobalProtect flaw CVE-2026-0257 to gain unauthorized VPN access to unpatched networks. Arctic Wolf researchers warn that the Qilin ransomware gang is exploiting the critical PAN-OS GlobalProtect vulnerability CVE-2026-0257 to compromise corporate networks. CVE-2026-0257 is a…
Kratos phishing-as-a-service kit loses its battle with international law enforcement
Alleged developer arrested in Indonesia after more than 200 servers slain This article has been indexed from www.theregister.com – Articles Read the original article: Kratos phishing-as-a-service kit loses its battle with international law enforcement
IT Security News Hourly Summary 2026-07-21 18h : 9 posts
9 posts were published in the last hour 16:4 : Craneware Confirms Data Theft After Cyberattack, Investigations Underway 16:4 : UK Biobank Data Breach Rekindles Debate Over Research Data Security 15:34 : Don’t Trust the Lock: Chrome Browser Vulnerability That…
Craneware Confirms Data Theft After Cyberattack, Investigations Underway
Healthcare software vendor Craneware confirmed attackers stole data during a cyberattack, underscoring growing cybersecurity risks facing healthcare suppliers. The post Craneware Confirms Data Theft After Cyberattack, Investigations Underway appeared first on TechRepublic. This article has been indexed from Security Archives…
UK Biobank Data Breach Rekindles Debate Over Research Data Security
A recent case concerning the UK Biobank has once again brought up the topic of securing medical research databases, as well as the importance of keeping research data both accessible and private. Professor of Cancer Medicine at the University…
Don’t Trust the Lock: Chrome Browser Vulnerability That Spoofs Trusted URLs
In web security, the browser’s address bar (also called the Omnibox) is the main way users check if… The post Don’t Trust the Lock: Chrome Browser Vulnerability That Spoofs Trusted URLs appeared first on Hackers Online Club. This article has…
Top 10 Malware Used by Hackers Last Week to Launch Cyberattacks
Cybercriminals continued to lean on a familiar arsenal of malware last week, with information stealers and remote access trojans (RATs) dominating the threat landscape as the primary tools for initial access, credential theft, and long-term system control. Topping the list…