Targeted
Threat Intelligence

OpenAI agent used exposed credentials at 4 services in Hugging Face breach

In a new update, OpenAI says its AI models also used publicly exposed credentials to compromise accounts on four third-party services during the recent attack o...

NVIDIA BlueField Vulnerability Enables Code Execution Attacks

NVIDIA has disclosed a serious vulnerability affecting its BlueField DPUs and ConnectX networking platforms that could allow attackers to execute code on affect...

Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, ...

macOS ClickFix Attack Deploys Atomic Stealer to Steal Passwords and Crypto Wallets

Mac users are being targeted by a ClickFix campaign that turns a fake verification prompt into a path for malware installation. Victims are persuaded to copy a ...

Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

Broadcom has released security updates to address multiple security flaws impacting VMware ESX, vCenter, Workstation, and Fusion, three of which have been desig...

Critical Ruflo MCP Bridge Flaw Lets Attackers Execute Commands and Hijack AI Agents

A critical security flaw in the open-source AI orchestration platform Ruflo has been disclosed, allowing unauthenticated attackers to execute arbitrary commands...

Russian Intelligence Hackers Phish Signal Backup Keys to Hijack Accounts and Messages

Russian intelligence-linked hackers are trying to seize Signal accounts by posing as support staff and asking targets for backup recovery keys. The campaign tar...

Hackers disrupt over 30 Minnesota water utilities in coordinated OT attack

The Minnesota IT Services (MNIT) agency activated its cybersecurity incident response capabilities across the entire state after hackers targeted more than 30 c...

Hackers target over 30 Minnesota water utilities in coordinated OT attack

The Minnesota IT Services (MNIT) agency activated its cybersecurity incident response capabilities across the entire state after hackers targeted more than 30 c...

Hijacked Joyfill npm Packages Deploy Worm-Like RAT and Steal Developer Credentials

A fresh supply chain scare hit software teams after attackers slipped malware into trusted open source libraries. On July 28, 2026, malicious beta builds of two...

Patch-Resistant 'RufRoot' Flaw Can Unleash Malicious AI Agent Swarms

The vulnerability in the AI hosting platform Ruflo allows an unauthenticated attacker to take over the system and corrupt memory, so bad behavior can persist af...

Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities

Las Vegas, USA, July 29th, 2026, CyberNewswire Catches rogue AI agents – and stops them in live production before they cause damage Sweet Security, the pr...

Your AI Agents Are Guessing at Scale: Permissions Decide the Damage

AI agents are designed to improvise as they complete tasks, making broad permissions a growing security risk. Token Security explains why identity, intent-based...

Windows 11 KB5101684 update released with 42 changes and fixes

​​Microsoft has released the KB5101684 preview cumulative update for Windows 11 24H2 and 25H2, which 42 bug fixes and additional feature improvements for the op...

Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline

A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27, triggering a statewide cybersecur...

Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments

Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves creating lookalike websites of major Russian companies with an ai...

Hackers Can Hijack Tor Browser Users Through a Single Malicious Web Page

A single malicious webpage is enough to compromise Tor Browser users running an unpatched build, following newly disclosed research into CVE-2026-10702. The fla...

Russia charges Telegram founder Pavel Durov with facilitating terrorism

Russia's Federal Security Service (FSB) claims that Ukrainian intelligence services used the popular Telegram dating chatbot “Daivinchik/Leo” to rec...

US Bans Foreign-Made Humanoid Robots, Targeting China Over National Security

The agency said imports of advanced robots pose cybersecurity and other national security risks. The post US Bans Foreign-Made Humanoid Robots, Targeting China ...

Revolut Alleged Data Breach – Hackers Claiming to Access Over 75 Million Users’ Records

Revolut is currently under scrutiny after hackers claimed to be selling a database containing records of more than 75 million users. However, the company assert...