1. CISA issued a warning regarding the active exploitation of a Linux kernel zero day vulnerability identified as CVE 2026 43456 (reddit.com).
2. Researchers discovered the TrojPix attack which exfiltrates data from air gapped systems by manipulating screen pixels to radiate radio signals via video cables (thehackernews.com).
3. A new Java based remote access trojan named QuimaRAT is being distributed under a malware as a service model targeting Windows Linux and macOS (thehackernews.com).
4. A vulnerability in the Opera GX browser allowed malicious websites to silently install add ons and steal data from visited pages (thehackernews.com).
5. North Korean threat actors are conducting the PolinRider campaign by publishing 108 malicious packages and browser extensions across multiple platforms (thehackernews.com).
6. The JadePuffer ransomware operation has been identified as the first documented case of an attack conducted entirely by an autonomous AI agent (bleepingcomputer.com).
7. A US government entity reportedly paid 1 million dollars to a group called Kairos to prevent the leak of stolen files in an extortion case (thehackernews.com).
8. Researchers developed the SkillCloak technique which allows malicious AI agent skills to evade static scanners using self extracting packing (thehackernews.com).
9. Ransomware groups increased their activity targeting US healthcare providers over the July 4 holiday weekend (reddit.com).
10. The FBI successfully seized the NetNut proxy platform and the Popa botnet infrastructure (reddit.com).
11. A new Linux kernel flaw dubbed Bad Epoll allows unprivileged users to gain root access and impacts Android devices (reddit.com).
12. A critical vulnerability in the Amazon Q VS Code extension allowed for cloud compromise via automated execution of malicious code (reddit.com).
13. A 2 click remote code execution vulnerability was identified in the Meccha Chameleon software (reddit.com).
Be First to Comment