Collaborate Disseminate
The professional services giant says it contained the incident, remediated its source, and experienced no operational or service delivery impact.
The post Accenture Confirms Data Breach After Hacker Claims Source Code Theft appeared first on SecurityWe… Continue reading Accenture Confirms Data Breach After Hacker Claims Source Code Theft
Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.
The post China-Linked APT Expands Arsenal With New ‘Leash’ Backdoors appeared first on Se… Continue reading China-Linked APT Expands Arsenal With New ‘Leash’ Backdoors
The “Rogue Agent” vulnerability could have enabled attackers to silently manipulate AI conversations, exfiltrate data, and compromise every Dialogflow CX agent within the same Google Cloud project.
The post Google Dialogflow CX Bug Allowed Attackers to… Continue reading Google Dialogflow CX Bug Allowed Attackers to Hijack AI Conversations
Two newly disclosed critical vulnerabilities in Adobe ColdFusion and Langflow join two Joomla extension flaws in CISA’s Known Exploited Vulnerabilities catalog, with federal agencies given until July 10 to patch.
The post CISA Urges Immediate Patching … Continue reading CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws
Researchers show how attackers can use a crafted public GitHub Issue to trick AI-powered workflows into exposing data from private repositories without authentication.
The post Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection… Continue reading Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection
The alleged victim, believed to be a small Ohio county, reportedly paid the extortion group to prevent the public release of sensitive stolen data.
The post County Government Reportedly Paid $1 Million to Cyber Extortion Group appeared first on Securit… Continue reading County Government Reportedly Paid $1 Million to Cyber Extortion Group
Attackers are exploiting the critical Gitea vulnerability CVE-2026-20896 to bypass authentication with a single HTTP header and access vulnerable repositories and secrets.
The post Critical Gitea Flaw Under Active Exploitation, Researchers Warn appeare… Continue reading Critical Gitea Flaw Under Active Exploitation, Researchers Warn
Hackers are exploiting a recently patched critical vulnerability (CVE-2026-48282) in Adobe ColdFusion that carries a CVSS score of 10/10.
The post Critical Adobe ColdFusion Vulnerability Exploited in Attacks appeared first on SecurityWeek.
Continue reading Critical Adobe ColdFusion Vulnerability Exploited in Attacks
Researchers say the Iran-linked threat actor used an adaptable modular malware framework and compromised IT service providers to reach high-value targets in Israel.
The post Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks appeared f… Continue reading Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks
The 16-year-old Januscape flaw affects Linux’s KVM hypervisor, allowing attackers to escape virtual machines and potentially execute code on the underlying host.
The post Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems appeared fir… Continue reading Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems