Collaborate Disseminate
The INC Ransomware operation has emerged as the “dominant threat actor” exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances.
In a report published over the weekend, Resecurity said it obs… Continue reading INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws
This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an intruder around. Public systems, package feeds, hotel networks, and login flows all gave away more than intended.
Some of it was cle… Continue reading ⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks
AI is moving incredibly fast, and every security leader is feeling the pressure to keep up.
AI platforms like Claude, Codex and Cursor are already helping security teams write detections, investigate alerts, summarize incidents, and automate repetitiv… Continue reading FOMO in the SOC: Where AI Platforms like Claude Actually Fit
An unknown Chinese-threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit.
Attack surface management platform Censys said it identified the threat actor runnin… Continue reading Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS
The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised and published on the dark web.
The data included names, organisations and work email addresses belonging to police officer… Continue reading PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web
Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification software that could allow data files to be altered before analysis software loads them.
The vendor’s July 31 security bulletin says nearly undetectable chang… Continue reading Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable
N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers.
Its first fix was incomplete. CVE-2026-18577 affects N-central builds prior to 202… Continue reading N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete
Three high-severity security flaws have been disclosed in Hugging Face’s Diffusers library that could allow crafted model repositories to stealthily execute arbitrary code on machines that load it, opening the artificial intelligence (AI) supply chain … Continue reading Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code
An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canad… Continue reading Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses.
Adform detected the incident on July 27, 2026, removed the malicious code, notifie… Continue reading Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites