Sources
Security Week
- Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day 27 min 45 sec old
- Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities 1 hour 8 min old
- Unpatched Cursor Vulnerability Exposes Users to Code Execution 16 hours 39 min old
- CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities 17 hours 8 min old
- Windows Bind Link Attacks Can Hide Malware From EDR Tools 18 hours 16 min old
- Virtual Event Today: Cloud & Data Security Summit 18 hours 24 min old
- US Charges Russian Individuals and Firms for Running Cybercrime Services 19 hours 18 min old
- Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow 20 hours 13 min old
- White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative 20 hours 58 min old
- Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption 21 hours 27 min old
Hacker News
- What is the real point of Codex Micro? [video] 34 min 4 sec old
- Notes on Structured Programming [pdf] 40 min 25 sec old
- 20-20-20 Rule: Are These Numbers Justified? 43 min 35 sec old
- From Microservice to Subprocess 48 min old
- Notes on structured concurrency, or: Go statement considered harmful 49 min 6 sec old
- What Psychology Says About HITL 51 min 42 sec old
- Linus Torvalds tells AI haters to fork off 52 min 33 sec old
- Are U.S. Consumers Ready to Use Pay-by-Bank at the Point of Sale? 58 min 48 sec old
- Prominent Haskell defector pilloried by anti-AI purists 1 hour 55 sec old
- Celebrity influencers paid up to £1M to advertise deodorant on Instagram 1 hour 4 min old
Guardian Security
SlashDot
- US Suffered a Major Power Outage Every Month of 2026 3 hours 21 min old
- Book Publishers Sue Google For Copyright Infringement Over Gemini AI Training 6 hours 22 min old
- Hack Reveals Suno AI Music Generator Scraped YouTube, Deezer, and Genius 8 hours 23 min old
- Spotify Is Now an AI Chatbot, Too 8 hours 23 min old
- FCC Plans To Repeal 39% TV Ownership Cap 10 hours 25 min old
- Google and Epic Cancel Settlement; Third-Party App Stores Coming To Google Play 11 hours 25 min old
- FreeBSD 16 Retires the Last of Its GPL Code 12 hours 26 min old
- OpenAI Launches a Keypad for AI Agents 13 hours 26 min old
- Stripe, Advent Offer to Buy PayPal For More Than $53 Billion 14 hours 26 min old
- Microsoft Patches a Record 570 Security Flaws 15 hours 26 min old
Cisco Security Advisories
- Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability 5 hours 6 min old
- Cisco Identity Services Engine Path Traversal Vulnerability 11 hours 16 min old
- Cisco RoomOS Security Hardening Release: July 2026 11 hours 16 min old
- Cisco Advance Notification for Publication of July 15, 2026, Security Advisories 1 week 11 hours old
- Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities 1 week 2 days old
- Cisco Catalyst Center Arbitrary File Read Vulnerability 2 weeks 11 hours old
- ClamAV Vulnerabilities Affecting Cisco Products: July 2026 2 weeks 11 hours old
- Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability 2 weeks 12 hours old
- Cisco Finesse Remote File Inclusion Vulnerability 2 weeks 6 days old
- Cisco Advance Notification for Publication of July 1, 2026, Security Advisories 3 weeks 11 hours old
Microsoft Malware Protection Center
- Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery 5 hours 40 min old
- Turning threat intelligence into decisive action with Defender Experts 15 hours 15 min old
- Defending SaaS-based applications against ShinyHunters OAuth abuse 2 days 9 hours old
- Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID 2 days 14 hours old
- Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative 5 days 15 hours old
- GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware 6 days 16 hours old
- Protecting Microsoft at AI speed: How SFI proactively hardens our cloud 1 week 14 hours old
- 5 insights from Frost & Sullivan’s 2025 Frost Radar™ for Cloud Security Posture Management 1 week 2 days old
- Improving security posture across the Microsoft partner ecosystem 1 week 6 days old
- Microsoft named a leader in the Frost Radar for cloud and application runtime security 2 weeks 15 hours old
CNET Feed
- Google Play Opens the Door to Third-Party App Stores, Starting Next Week 5 hours 59 min old
- Rumored Galaxy Watch Ultra 2 Might Fix Samsung's Biggest Smartwatch Problem 7 hours 11 min old
- The Open 2026: TV Schedule, How to Watch All the Golf Action From Anywhere 7 hours 15 min old
- OpenAI's First Hardware Release Turns Out to Be Keypad for Codex 7 hours 23 min old
- Apple Closes Loophole Letting Buyers Pick Unlocked iPhones Using Carrier Payment Plans 8 hours 31 min old
- T-Mobile Is Finally Retiring Its 2G Network and Urging the Last Stragglers to Upgrade 8 hours 50 min old
- How You Distill 80 Years of Marvel Comics Into Magic: The Gathering Cards 9 hours 34 min old
- Some Starlink Customers Report Getting Hit With Massive Demand Surcharge 9 hours 38 min old
- Today's NYT Strands Hints, Answers and Help for July 16 #865 11 hours 15 min old
- Today's NYT Connections Hints, Answers and Help for July 16, #1131 11 hours 15 min old
Security Wire Daily News
- IoT devices have significant business benefits but also open enterprises to escalating security risks. Discover why zero trust is the most practical way to secure IoT. 8 hours 23 min old
- AI attacks and breaches hit differently than traditional attacks, and therefore require more than traditional controls. The best defense requires planning for cyber-resilience. 1 day 18 hours old
- As employees become more accustomed to using AI, they might be getting a little too comfortable. Learn how strong AI governance helps manage this new human risk. 2 days 19 hours old
- Now more than ever, defenders must look for suspicious behavior, not specific malware. Learn how to defend against two trending initial access methods. 5 days 8 hours old
- Edtech gets schooled by third-party cyberthreats 5 days 18 hours old
- Attackers have adapted their techniques to circumvent an organization's MFA controls. When they succeed, it's usually because MFA wasn't properly set up or managed. 6 days 9 hours old
- AI tools streamline threat modeling by automating repetitive tasks and helping security teams prioritize risks more effectively. But human oversight is still critical. 6 days 16 hours old
- The cybersecurity talent gap won't be solved by head count alone. CISOs need to fundamentally rethink how they recruit, how they retain talent and what skills they really need. 1 week 13 hours old
- An AI model's autonomous execution of a complete ransomware operation marks a new era. Learn why experts say rapid detection and response, not revolutionary defenses, are key. 1 week 17 hours old
- Malicious actors have long targeted and exploited browser vulnerabilities. The widespread adoption of AI increases the risk, forcing CISOs to reevaluate browser security options. 1 week 1 day old
Wired Security
- Here’s the Truth About Whether Meta’s NameTag Face Recognition Tech ‘Exists’ 10 hours 18 min old
- A Leak of San Francisco Police Drone Footage Exposes the New Reality of Urban Surveillance 2 days 21 hours old
- AI Found a Root Bug in Linux That Everyone Missed for 15 Years 4 days 20 hours old
- A Majority of European Lawmakers Voted Against Letting Big Tech Read Our Messages. They’re Going to Anyway. 6 days 17 hours old
- Madison Square Garden Kept a List of Gay Celebrities 6 days 21 hours old
- OnlyFans Models Are Accidentally Making Hacked Government Websites Disappear 1 week 20 hours old
- What Happens if China Hacks the US Water Supply? I Went to a Secret War Game to Find Out 1 week 21 hours old
- ICE’s Internal Watchdog Is Now Investigating Online Critics 1 week 2 days old
- Security Roundup: Apple’s Hide My Email Service Fails to Hide Your Email 1 week 4 days old
- EU Politicians Investigated Pegasus Spyware. Then It Ended Up on One of Their Phones 1 week 6 days old
Computer Weekly Feed
- Another mammoth Patch Tuesday update, likely topping 600 flaws in total, sends defenders into the weeds. 13 hours 26 min old
- Soon-to-be-appointed prime minister adds weight to government’s existing plan to ‘end era of outsourcing’ 15 hours 26 min old
- The UK government has ambitions to build out its own AI capabilities, but its plans are stumped by high datacentre power costs 16 hours 26 min old
- PoliceAI will be used to pilot artificial intelligence tools that are capable of automatically generating summaries of digital material, saving ‘countless’ admin hours 16 hours 26 min old
- AI is affecting the day-to-day careers of cyber security pros in regard to stress levels, but respondents to an ISC2 data-gathering exercise are split over whether or not their stress levels are going up or down 21 hours 44 min old
- India is rolling out facial-recognition technology to monitor millions of its citizens, with much of the software coming from a Spanish company – but critics argue the government promise of public safety is not the main aim 21 hours 44 min old
- Staff of the UK’s data protection watchdog say it was ‘less effective’ due to a toxic workplace culture upheld by senior leadership team 21 hours 44 min old
- Billions of pounds are being lost - and hundreds of thousands of people excluded from the economy - because so much of our technology and working lives are not inclusive by design 22 hours 44 min old
- Cyber security expert Rik Ferguson charts an unlikely career from The Hobbit through childhood thespianism to the cutting edge of cyber defence 23 hours 45 min old
- From Delhi to Jaipur, India is rolling out facial-recognition technology to monitor millions of its citizens. Investigate Europe has found that behind much of the software is Spanish company Herta Security – but critics argue that the government... 1 day 1 hour old
Malware Bytes Security
- Claude for Chrome flaw could let rogue extensions access your Gmail 16 hours 50 min old
- July 2026 Patch Tuesday fixes 622 Microsoft CVEs, including three zero-days 18 hours 55 min old
- This fake Apple app can unlock your Mac’s password vault 22 hours 34 min old
- Warning: Scammers are using FaceTime to empty bank accounts 1 day 20 hours old
- The inside job that cost ransomware victims millions 1 day 21 hours old
- Trusting your kids online isn’t enough (Lock and Code S07E14) 2 days 16 hours old
- Ghostcommit attack hides malicious AI instructions in images 2 days 17 hours old
- Fake crypto gift card sites are getting harder to spot 2 days 20 hours old
- A week in security (July 6 – July 12) 3 days 15 min old
- This new Windows malware can take over your PC and wipe it clean 5 days 17 hours old
Security Now
- SN 1087: HalluSquatting, GhostApproval & GitLost - Patch Tuesday Breaks Records 1 day 5 hours old
- SN 1086: The Apex Agentic Adversary - Visual Prompt Injection Strikes 1 week 1 day old
- SN 1085: A SOTA State-Sponsored Campaign - AI's New Superpower: Loop Engineering 2 weeks 1 day old
- SN 1084: The Residential Proxy Threat - Malicious Proxies in Your Living Room 3 weeks 1 day old
KrebsOnSecurity
- Microsoft Patches a Record 570 Security Flaws 1 day 11 hours old
- Lessons Learned from CISA’s Recent GitHub Leak 2 days 16 hours old
- Felons, Fraudsters Flog Offensive Cybersecurity Startup 1 week 18 hours old
- FBI Seizes NetNut Proxy Platform, Popa Botnet 1 week 6 days old
- Scattered Spider Hackers Plead Guilty on Day 1 of Trial 3 weeks 1 day old
- ‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm 3 weeks 6 days old
Security Wire Weekly
- Mobile compliance now requires governance over how sensitive data is accessed across managed and personal devices. Here are practical steps for sustainable enterprise compliance. 1 day 22 hours old
- A penetration test, also called a 'pen test,' is a simulated cyberattack on a computer system, network or application to identify and highlight vulnerabilities in an organization's security posture. 6 days 12 hours old
- CISO as a service, or CISOaaS, is the outsourcing of CISO (chief information security officer) and information security leadership responsibilities to a third-party provider. 6 days 13 hours old
- Admins will want to focus on issuing corrections for the large number of flaws, some of which require no user interaction, in Windows RRAS and Microsoft Office. 6 days 16 hours old
- When assessing cybersecurity risk, be sure to consider the scope of the project, your organization's specific assets and leadership's tolerance for risk. 6 days 16 hours old
- Identity is long past the days of logging into systems. Security teams must now manage SaaS apps, AI agents and machine-to-machine interactions across distributed environments. 1 week 1 day old
- Create a security compliance plan for the data center that includes various standards, audit schedules, and 2026 AI governance and sustainability reporting requirements. 2 weeks 16 hours old
- A time-based one-time password (TOTP) is a temporary passcode generated by an algorithm that uses the current time of day as one of its authentication factors. 2 weeks 1 day old
- Red teams can harness the power of LLMs for penetration testing. From session analysis to payload crafting, discover five ways AI transforms security testing. 2 weeks 1 day old
- Security for information technology (IT) refers to the methods, tools and personnel used to defend an organization's digital assets. 2 weeks 4 days old
Graham Cluely Security Blog
- The ransomware negotiator who was working for the other side 1 day 23 hours old
- Invited to a “job interview” with Netflix or OpenAI? Beware! Your Google password could be at risk 6 days 17 hours old
- Smashing Security podcast #475: JadePuffer – the AI that ran a ransomware attack all by itself 1 week 7 hours old
- Two arrested over credit card phishing – as the Netherlands is named Europe’s worst for payment fraud 1 week 1 day old
- The Gentlemen ransomware: what you need to know 1 week 6 days old
- Smashing Security podcast #474: Polymarket can predict the future. So how did it miss this hack? 2 weeks 8 hours old
- Scammers race to cash in on Venezuelan earthquake disaster 2 weeks 1 day old
- USB drives carrying China-linked malware infected Japanese military networks for nearly a year 2 weeks 1 day old
- Smashing Security podcast #473: How a hacker could have Rickrolled the entire World Cup 3 weeks 8 hours old
- Hacker hijacks Brazil’s national alert system, sending “misanthropy” to millions of phones 3 weeks 1 day old
Tao Security
- I Wrote a New Book for Corelight 6 days 16 hours old
Cloud Security Briefing: News and Advice
- Frameworks provide the structure for an effective incident response program. Here's where to turn for guidance on what to include. 1 week 6 days old
- Threats from cyberattacks continue to grow in frequency and severity. Considering the potential disruptions from such events, an organization needs an incident response plan. 2 weeks 1 day old
- Containers are an integral part of a growing number of production environments. But they can become security risks if not managed correctly. 2 weeks 4 days old
- While prevention is key, it's not enough to protect a company's systems from ransomware. Learn how early detection with these four methods helps reduce damage from attacks. 2 weeks 5 days old
- Know thine enemy -- and the common security threats that can bring an unprepared organization to its knees. Learn what these threats are and how to prevent them. 2 weeks 6 days old
- The Cloud Security Alliance (CSA) is a nonprofit organization that promotes research into best practices for securing cloud computing and the use of cloud technologies to secure other forms of computing. 2 weeks 6 days old
- What are the necessary components of a cloud security policy, and why should an organization go to the trouble to create one? Download a template to get the process started. 2 weeks 6 days old
- This cloud security guide explains challenges enterprises face today; best practices for securing and managing SaaS, IaaS and PaaS; and comparisons of cloud-native security tools. 2 weeks 6 days old
- Automating security in the cloud can be invaluable for threat detection and mitigation. Explore key areas where security professionals should implement automation. 2 weeks 6 days old
- With so many apps and data residing in cloud, employing a security framework to help protect cloud infrastructure is an essential move for an organization. 2 weeks 6 days old
EFF
- The UK’s New Under-16 Social Media Ban Will Cause More Harm Than It Prevents 3 weeks 5 days old
- EFF Joins 60+ Groups Urging the UK to Halt Face Estimation at the Border 3 weeks 5 days old
- Canada Is Forging Ahead with Its Dangerous Surveillance Bill 3 weeks 6 days old
- EFF Thanks SerpApi For Helping Us Protect Free Speech Online 3 weeks 6 days old
- Call for Submissions: Digital Pride 3 weeks 6 days old
- A New Bill Takes Aim at Government Pressure to Silence Lawful Online Speech 3 weeks 6 days old
- Court Records Should Be Free 3 weeks 6 days old
- Field Notes from a Year of OPSEC Training 3 weeks 6 days old
- AI Regulation Should Be Rational, Not Retaliatory 3 weeks 6 days old
Google Security Blog
- Security for the Quantum Era: Implementing Post-Quantum Cryptography in Android 3 months 3 weeks old
- Cultivating a robust and efficient quantum-safe HTTPS 4 months 2 weeks old
- Staying One Step Ahead: Strengthening Android’s Lead in Scam Protection 4 months 2 weeks old
- Keeping Google Play & Android app ecosystems safe in 2025 4 months 3 weeks old
- New Android Theft Protection Feature Updates: Smarter, Stronger 5 months 2 weeks old
- HTTPS certificate industry phasing out less secure domain validation methods 7 months 1 week old
- Further Hardening Android GPUs 7 months 1 week old
- Architecting Security for Agentic Capabilities in Chrome 7 months 1 week old
- Android expands pilot for in-call scam protection for financial apps 7 months 2 weeks old
- Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing 7 months 3 weeks old
Cisco Threat Outbreak
Corero Security
CSOOnline - Salted Hash - Top Security News
Dark Reading Attacks and Breaches
Dark Reading Cloud
Dark Reading Security Monitoring
Dark Reading Threat Intelligence
Dark Readuing Vulnerability and Threats
InfoSec Island
InfoWorld
Naked Security
Network World
NoticeBored
Paul's Security Weekly
PC Magazine Security
Schneier on Security
Security News White Papers
Tech Crunch Security
Techworld Security
The Security Ledger
Threat Post
US-Cert Alerts
US-Cert Current Activity
ZDNet Security
