Docs point to China’s Unitree as prime example of the foreign clanker threat
AI agent hacks national finance ministry, Botnet uses blockchain, Healthcare chain reopens
Hospital ransomware fallout, blockchain botnet C2, and AI agent loose in Thailand’s Finance Ministry. South Carolina’s AnMed reopened some physician…
ISC Stormcast For Wednesday, July 29th, 2026 https://isc.sans.edu/podcastdetail/10028, (Wed, Jul 29th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Wednesday, July 29th, 2026 https://isc.sans.edu/podcastdetail/10028,…
Measuring LLMs’ Ability to Perform Cryptanalysis
There’s new benchmark measuring AI’s ability to perform mathematical cryptanalysis. Anthropic’s frontier model actually found new attacks. The benchmark:…
CareCloud begins to notify hundreds of thousands after hackers stole medical records
The health tech data giant, which handles vast amounts of patients’ medical data, said hackers struck one of its protected health data stores.
OpenAI’s Rogue AI Agent Hacked More Than Just Hugging Face
In a new disclosure, OpenAI says its agent used exposed logins to gain access to at least four “publicly available services” in its unhinged quest to…
Cyera agrees to acquire Oasis Security for $1B to safeguard proliferating AI agents
The deal is Cyera’s third acquisition this year.
A Typo Landed an Innocent Gamer in Prison for 18 Months
How much could a single underscore in a username really matter? Just ask Brandon Klayme, who served 18 months in prison before realizing how authorities…
Meta Faces Scrutiny After Report Finds Thousands of AI Nudify Ads on Facebook, Instagram
Meta is under renewed scrutiny after researchers found thousands of AI “nudify” ads on Facebook and Instagram, raising questions about the company’s…
FastJson RCE Zero-Day Actively Targets Organizations
Threat actors are actively exploiting the FastJson CVE-2026-16723 zero-day, with no patch available for affected FastJson 1.x versions.
ChatGPT Joins Most Faked Brands Ranking in Phishing, Check Point Says
ChatGPT entered Check Point’s top 10 phishing brand ranking as fake ChatGPT Plus payment failure emails targeted users’ credit card details.
Okta buys AI security startup Permiso — source says for about $200M
The deal gives Okta identity threat detection capabilities as enterprises seek to secure AI agents and other non-human identities across cloud…
Critical TeamCity Flaw Could Let Unauthenticated Attackers Execute Server Commands
JetBrains has patched CVE-2026-63077, a critical TeamCity flaw that could let unauthenticated attackers execute server commands and compromise connected…
MCP gets an enterprise makeover
Now happier running in a conventional K8s environment, with `an easier-to-live-with lifecycle
Google Plans Global Rollout of Privacy-Focused Age Signals API
Google plans to expand its Play Age Signals API globally, helping Android developers tailor app experiences without collecting exact birth dates.
Authorities investigating a coordinated cyberattack against Minnesota water systems
The two-day attack comes days after federal officials warned of state-linked threat groups targeting a wider set of industrial devices.
More Than 45,000 Software Flaws Reported as AI Reshapes Cybersecurity
AI security tools are helping uncover more software flaws, creating new patching demands and potential offensive risks for enterprise IT teams.
Microsoft and Wiz mind-meld agents catch more than 90% of bugs
Secret to their success: Using the right model for the right security job
DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake web…
CVE-2026-66066: Defending Against the “KindaRails2Shell” Pre-Auth RCE
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CVE-2026-66066: Defending Against the “KindaRails2Shell” Pre-Auth RCE
Okta to Acquire Identity Threat Detection Firm Permiso
The deal extends Okta’s reach beyond identity management and into the realm of security operations, positioning the company to compete more directly on…
Coca-Cola Confirms Data Theft as Fairlife Ransomware Attack Escalates
Coca-Cola has confirmed data was stolen in the ransomware attack on Fairlife after the Anubis gang published allegedly stolen files, escalating the…
AI Agent Security Just Had Its Catalyst Moment
Update: Hugging Face has since published a detailed technical timeline of the incident. The additional technical details reinforce the core takeaway…
Cursor Quietly Patches High-Severity Git Vulnerability After Seven-Month Delay
Cursor has patched a high-severity Windows vulnerability that allowed malicious Git repositories to execute code, highlighting security risks in AI coding…