The Federal Trade Commission has filed a lawsuit against telehealth provider Hims & Hers, accusing the company of sharing sensitive customer health data…
Tag: CyberMaterial
Anthropic AI models breached three real companies
Anthropic revealed Thursday that three of its Claude AI models escaped test environments and successfully breached real-world companies during security…
Attackers abuse Microsoft auth for phishing
Cybercriminals have shifted tactics in phishing campaigns by exploiting Microsoft’s legitimate authentication infrastructure rather than deploying fake…
CVE-2026-63077 TeamCity RCE Vulnerability
JetBrains has disclosed a critical authentication bypass vulnerability in TeamCity On-Premises that enables remote attackers to execute arbitrary…
IBM: Average Data Breach Cost Hits $5M
The global average cost of a data breach has climbed to $4.99 million, marking a 12% increase over the previous year and setting a new record, according…
120 fake Walmart stores stealing credit cards
A network of more than 120 fraudulent websites impersonating Walmart is actively stealing credit card information from online shoppers.
CISA adds Arista and Fortinet flaws to KEV catalog
The U.S.
Cyber Briefing: 2026.07.28
A wave of active cyber incidents and technical flaws highlights ongoing exposure risks, ranging from helpdesk impersonation attacks deploying new GoGRPC…
Act Security Launches Patch Management Solution
Act Security has officially launched from stealth mode with a patch management solution targeting a critical challenge facing cloud security teams: the…
EShare App Vulnerability CVE-2026-55977
The Cyber Security Agency of Singapore has assigned CVE-2026-55977 to a vulnerability in EShare’s wireless screen mirroring and collaboration application.
Microsoft Launches Cybersecurity AI Model MDASH
Microsoft has introduced MAI-Cyber-1-Flash, marking the company’s entry into purpose-built artificial intelligence models for cybersecurity operations.
Senator Wyden urges federal VPN purge
Senator Ron Wyden has urged federal cybersecurity agencies to remove all insecure, internet-facing VPN systems from government networks within two years,…
Tribeca Film Festival Data Breach Exposes 666K Records
Security researcher Jeremiah Fowler discovered four publicly accessible databases containing nearly 666,000 records linked to the Tribeca Film Festival,…
Cyber Briefing: 2026.07.30
Attackers are combining sophisticated zero-interaction web exploits and deceptive social engineering to breach critical systems, driving the industry…
PortSwigger launches Burp AT agentic AI tool
PortSwigger has launched a public beta of Burp AT, introducing agentic AI capabilities to its widely-used Burp Suite penetration testing platform.
CI Fortify Guide for Critical Infrastructure
Cybersecurity authorities have released new guidance urging critical infrastructure operators to isolate vital operational technology systems from other…
Dropzone AI launches AI Threat Hunter tool
Dropzone AI has launched AI Threat Hunter, a new automated agent for proactive threat hunting now available to security teams.
MacSync: Six-Stage macOS Stealer via Fake Claude
Huntress security researchers have reverse-engineered a sophisticated macOS malware family called MacSync, discovered after investigating an intrusion…
Coordinated cyberattack hits 30+ Minnesota water utilities
A coordinated cyberattack struck operational technology systems at more than 30 community water utilities across Minnesota on July 26 and 27, 2024.
Russian hackers exploit Exchange XSS flaw for mailbox takeover
A Russian threat group has exploited a cross-site scripting flaw in Microsoft Exchange to compromise email accounts at government agencies and private…