An employee opens a company service portal, searches the knowledge base, and drops a file onto a ticket. Someone who never signed in can send a request to that same portal and get records back. Bishop Fox ran that test…
Google Chrome Update Fixes 12 High-Severity Vulnerabilities That Enable Browser Attacks
Google has released a Chrome security update that addresses 12 high-severity vulnerabilities affecting various components, including WebAudio, ANGLE, Chromecast, extensions, Skia, the V8 JavaScript engine, certificate handling, the user interface, and GPU elements. Many of these vulnerabilities involve memory corruption…
OpenAI Exploits Zero-Day to Gain Internet Access and Compromise Hugging Face Servers
OpenAI has revealed that during an internal evaluation of advanced cyber capabilities, AI agents exploited a zero-day vulnerability, escaped a constrained research environment, and compromised parts of Hugging Face’s production infrastructure. While Hugging Face detected and contained the activity, OpenAI’s…
AI can’t fix cybersecurity’s hiring problem
Organizations are redefining cybersecurity roles through workforce frameworks and placing greater emphasis on verified skills as AI and new regulatory requirements change hiring. The SANS 2026 Cybersecurity Workforce Survey found demand for specialists in new roles more than doubled over…
Security teams keep finding critical flaws after scheduled testing ends
Enterprise environments change between scheduled security assessments, leaving organizations with periods where new vulnerabilities can go undetected. Synack’s State of Continuous Security Validation report found that 95% of surveyed organizations identified high- or critical-severity vulnerabilities outside planned testing windows during…
OpenAI’s GPT Agents Exploit Zero-Days and Hacked Hugging Face Servers
Hugging Face has disclosed a security incident that security researchers are calling a watershed moment for AI safety: an autonomous AI agent, built on OpenAI models, independently discovered and chained multiple vulnerabilities, including a zero-day, to breach Hugging Face’s production…
Google Chrome Update Fixes 12 Vulnerabilities That Could Enable Browser Attacks
Google has rolled out a new Stable channel update for Chrome, patching 12 security vulnerabilities, including nine rated “High” severity. The update brings Chrome to version 150.0.7871.181/.182 for Windows and Mac, and 150.0.7871.181 for Linux, with the rollout expected to…
Cloud operations become the next big role for agentic AI
Companies are using agentic AI to manage growing application environments, automate routine tasks, and support decisions. Business and IT leaders increasingly see the technology as part of cloud application management, according to Unisys’ AI & Cloud Insights Report. To what…
ISC Stormcast For Wednesday, July 22nd, 2026 https://isc.sans.edu/podcastdetail/10018, (Wed, Jul 22nd)
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Wednesday, July 22nd, 2026…
OpenAI admits it was the source of the agent swarm that attacked Hugging Face
Sandboxed experiment found itself a zero day, escaped onto the open internet and stole data This article has been indexed from www.theregister.com – Articles Read the original article: OpenAI admits it was the source of the agent swarm that attacked…
LG to Ban Residential Proxies from Smart TV Apps
The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node. The move comes less than a month after researchers…
WordPress Feeding Frenzy, Another Healthcare Supply Chain Breach, Qillin Targets Palo Alto Bug
WP2Shell WordPress RCE feeding frenzy, AI agent breaches Hugging Face, Killin hits Palo Alto VPN flaw This episode covers five major incidents: a chained WordPress exploit dubbed WP2Shell (CVE-2026-6330 and CVE-2026-6137) enabling anonymous remote code execution on stock installs,…
IT Security News Hourly Summary 2026-07-22 03h : 1 posts
1 posts were published in the last hour 1:4 : Hackers Already Exploiting Newly Patched WordPress Flaws, Researchers Warn
Hackers Already Exploiting Newly Patched WordPress Flaws, Researchers Warn
Security researchers warn hackers are actively exploiting two patched WordPress Core vulnerabilities that could let attackers fully compromise unpatched websites. The post Hackers Already Exploiting Newly Patched WordPress Flaws, Researchers Warn appeared first on TechRepublic. This article has been indexed…
OpenAI Models Escaped Containment and Hacked Hugging Face
The cybersecurity-focused models, including GPT-5.6 Sol, broke out of a testing sandbox, exploited a zero-day, and gained access to the open internet to pull off the attack. This article has been indexed from Security Latest Read the original article: OpenAI…
OpenAI Models Escaped Containment and Hacked HuggingFace
The cybersecurity-focused models, including GPT-5.6 Sol, broke out of a testing sandbox, exploited a zero-day, and gained access to the open internet to pull off the attack. This article has been indexed from Security Latest Read the original article: OpenAI…
Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522
Critical SharePoint RCE vulnerability CVE-2026-50522 is under active exploitation after the release of a PoC exploit code. A critical Microsoft SharePoint vulnerability, tracked as CVE-2026-50522 (CVSS score of 9.8), is being actively exploited following the release of a public proof-of-concept…
14 Types of Cybercrime + How to Prevent Them
Cybercrime comprises much more than what most would expect. Here is a detailed guide to all different types and how to recognize them. The post 14 Types of Cybercrime + How to Prevent Them appeared first on Panda Security Mediacenter.…
How to Make Strong Passwords: Best Internet Safety Practices
Passwords keep everything from our bank accounts and medical records to social media and online shopping accounts safe, yet 34% of users still repeat variations… The post How to Make Strong Passwords: Best Internet Safety Practices appeared first on Panda…
IT Security News Hourly Summary 2026-07-22 00h : 3 posts
3 posts were published in the last hour 21:55 : IT Security News Daily Summary 2026-07-21 21:46 : Cruciferra Crypter Evades Detection to Deliver Malware 21:46 : Cisco’s open-weight bug busters take on Google and OpenAI
IT Security News Daily Summary 2026-07-21
173 posts were published in the last hour 21:46 : Cruciferra Crypter Evades Detection to Deliver Malware 21:46 : Cisco’s open-weight bug busters take on Google and OpenAI 20:34 : Linux Kernel Published 440 Security Advisories— In 24hrs Here’s Why…
Cruciferra Crypter Evades Detection to Deliver Malware
Proofpoint found Cruciferra, a sophisticated crypter used to deliver malware through phishing campaigns. The post Cruciferra Crypter Evades Detection to Deliver Malware appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: Cruciferra…
Cisco’s open-weight bug busters take on Google and OpenAI
Don’t call them chatbots This article has been indexed from www.theregister.com – Articles Read the original article: Cisco’s open-weight bug busters take on Google and OpenAI
Linux Kernel Published 440 Security Advisories— In 24hrs Here’s Why
Official linux-cve-announce mailing list published 440 Common Vulnerabilities and Exposures (CVEs) in less than 24 hours. Hundreds of… The post Linux Kernel Published 440 Security Advisories— In 24hrs Here’s Why appeared first on Hackers Online Club. This article has been…