Cybersecurity, AI, etc.
Sysdig’s Threat Research Team has documented JADEPUFFER — the first fully autonomous, end-to-end AI-agent ransomware operation ever recorded. Unlike traditional ransomware that requires a human operator calling the shots, JADEPUFFER…
Microsoft patched “RoguePlanet” (CVE-2026-50656), a zero-day privilege escalation vulnerability in Microsoft Defender, on July 9, 2026. The flaw exploits a race condition in Defender’s threat remediation engine to grant attackers…
GuidePoint Security’s Q2 2026 Ransomware and Cyber Threat Insights Report reveals the ransomware ecosystem reached record activity levels in the second quarter, with threat actors claiming 2,279 victims — a…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-55255, an authorization bypass vulnerability in Langflow, to its Known Exploited Vulnerabilities (KEV) Catalog in early July 2026, alongside path traversal…
Ubiquiti disclosed seven critical vulnerabilities across its UniFi product line in early July 2026, including a maximum-severity flaw (CVSS 10.0) that allows unauthenticated network attackers to execute arbitrary operating system…
Security researchers at SOCRadar exposed a sophisticated, China-linked web application backdoor operation dubbed WP-SHELLSTORM in early July 2026. The operation, attributed to a financially motivated Webshell Access Brokerage Operation (WABO),…
Meta Superintelligence Labs launched Muse Spark 1.1 on July 9, 2026 — its first commercially priced AI model and a direct shot at OpenAI and Anthropic’s enterprise products. The multimodal…
A monthslong exploitation campaign targeting Cisco Catalyst SD-WAN infrastructure has compromised government agencies and critical infrastructure operators worldwide, according to reporting from Cisco Talos, Mandiant, and multiple national cybersecurity authorities.…
Security researchers have confirmed active exploitation of CVE-2026-20896, a critical authentication bypass vulnerability (CVSS: 9.8) affecting Gitea official Docker images through version 1.26.2. The flaw allows an attacker to impersonate…
BeyondTrust has disclosed a critical pre-authentication vulnerability — CVE-2026-40138 (CVSS v4: 9.2) — affecting its Remote Support (RS) and Privileged Remote Access (PRA) appliances. The flaw stems from improper validation…