Latest IntelligencePage 168
Search by keyword →
False Positive or First Sign of a Breach? How Tier 1 SOC Analysts Can Tell the Difference Faster
Imagine a Tier 1 analyst receiving an alert: an employee’s laptop has connected to an unfamiliar domain.  The detection is not dramatic. No ...
New BioShocking Attack Allows Attackers to Trick AI Browser and Leak Credentials
A newly disclosed attack technique dubbed “BioShocking” is raising concerns across the cybersecurity community after researchers demonstrated that AI-powered br...
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner. The activ...
Fake Perplexity extension on Chrome Web Store tracked searches
A malicious extension in the Chrome Web Store is masquerading as the Perplexity AI answer engine, intercepting search traffic and collecting browsing informatio...
Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses
Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily replacing wallet addresses wh...
Multiple AirDrop and Quick Share Vulnerabilities Allow Attackers to Crash Devices
Multiple newly disclosed vulnerabilities in Apple’s AirDrop and Google/Samsung Quick Share proximity-sharing protocols allow attackers within wireless range to ...
GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks
The safety check that is supposed to stop an AI coding agent from running a dangerous command can be walked straight past using a shell trick that has been publ...
Lessons from the Underground: How to Combat Business Email Compromise
Business Email Compromise is more than an email scam. It's a coordinated operation involving compromised accounts, financial research, and cash-out networks. Fl...
AppViewX Launches Global Partner Program Amid Rising Demand for Machine and Agent Identity Security
New York, United States, June 30th, 2026, CyberNewswire Building on the momentum of its Agent Identity Security launch, AppViewX invests in partner success thro...
BlueHammer Vulnerability Exploited in Ransomware Attacks
The Microsoft Defender vulnerability CVE-2026-33825 was exploited in the wild as a zero-day before patches were released. The post BlueHammer Vulnerability Expl...
282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study
Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access through their network traffic. In many ...
.webp)
Critical Progress Kemp LoadMaster Vulnerability Enables Pre-Auth Remote Code Execution
A critical security vulnerability in Progress Kemp LoadMaster has put enterprise networks across the globe at serious risk. Tracked as CVE-2026-8037, the flaw a...
AI-Generated Workflows Are a Silent Security Disaster
Teams are dealing with a truly dangerous problem — automation that works, but that no one understands....
Mozilla tightens rules for certificate authorities to improve web security
Mozilla has released version 3.1 of its Mozilla Root Store Policy (MRSP), introducing new requirements aimed at improving transparency and oversight across the ...
Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks
Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, potentially turning malicious repositories into supply chain attack ve...
.webp)
Bing Search for ‘ManageEngine OpManager’ Delivers Akira Ransomware
A simple Bing search for a popular IT tool turned into a full-scale ransomware attack. Threat actors abused search engine optimization (SEO) poisoning to push a...
Aflac Japan Data Breach Impacts 4.38 Million
Hackers accessed the insurance giant’s policyholder portal multiple times between June 15 and June 25. The post Aflac Japan Data Breach Impacts 4.38 Million app...
Hackers Use SystemBC Malware to Hide C2 Traffic and Maintain Persistent Access
A cyberattack tool that quietly turns victim computers into tunnels for criminal traffic has been gaining ground across enterprise networks. Security researcher...
Hackers Hijack WhatsApp Web Sessions to Launch CEO Fraud Through DLL Sideloading
A new breed of executive impersonation attack is making rounds across Indian enterprises, and it is far more technical than the typical CEO fraud most organizat...
Hacker Conversations: Chris Thompson, Former Head of IBM X-Force Red, Co-Founder of RemoteThreat
Chris Thompson's journey took him from hacking game controls as a teenager to founding IBM’s X-Force Red team. The post Hacker Conversations: Chris Thompson, Fo...