General cybersecurity news and analysis
The US has taken a bold step in cyberspace, launching a program that empowers select private companies to launch targeted counterattacks against ransomware gangs and other cybercrime syndicates. This innovative approach aims to disrupt and dismantle these threats, with the government maintaining control and ensuring accountability every step of the way.
Microsoft's Exchange team is working on Cumulative Update 1 (CU1) for Exchange Server Subscription Edition, but has delayed its release due to an unexpected bug discovery driven by AI, leaving customers waiting a bit longer for the update that packs recent bug fixes, new features, and code refinements. The team promises it's on the way, but a new timeline isn't available just yet.
Imagine receiving a notification while walking your dog that a live attack is underway - and being able to instantly approve a block, stopping the threat in its tracks in under 10 minutes. Corma's AI agents make it possible, proactively defending networks and giving customers peace of mind.
Ever wondered who's really behind the ads you see online? A single search on DecryptAds for a popular site like espn.com uncovers a staggering 143 ad partners and 19 data broker domains, revealing the surprisingly complex adtech ecosystem.
The traditional attack chain is getting a makeover: instead of starting with a malicious email, attackers now use OAuth apps to breach Google Workspace, exploiting new vulnerabilities in an AI-driven threat landscape. It's time to shift from an inbox-centric to an OAuth-first security approach to stay ahead.
OpenAI's new Computer History feature for ChatGPT users raises some red flags, capturing a detailed stream of interactions like clicks, typing, and keyboard shortcuts from allowed apps and websites, and storing them as local memory files that could potentially be accessed by other programs on your macOS.
The tide is turning in the world of AI: smaller, more affordable models are suddenly delivering impressive results in hacking and exploitation benchmarks, providing net value at a cheaper price and giving them a competitive edge. This emerging middle class of AI models, including GLM-5.2, Grok 4.5, and Opus 4.7, is crossing a crucial threshold, making them strategic players in the industry.
The AI watermark remover scene is exploding, with a GitHub project racking up over 4,500 stars and claims of imperceptible mark removal flying fast and furious. Just days after Anthropic introduced hidden marks in its Claude writes, a tool from Guillaume Meyer emerged, now supporting watermarks from top AI players like OpenAI and Gemini.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Microsoft just patched a nasty zero-day vulnerability, known as LegacyHive, that could let hackers gain administrator privileges on your Windows PC - but thankfully, it's now fixed in the August Patch Tuesday updates.
The US government has just given private cybersecurity firms the green light to hack back against foreign cybercrime groups that threaten American interests, marking a major shift in the country's cyber warfare strategy. This bold move targets transnational crime groups, not nation-states, and paves the way for covert surveillance and cyber operations.
Most organizations are flying blind to the sprawling presence of AI tools, with 74% discovering more AI tools than they expected, and 30% of those finding 16 or more running in their environments. This unexpected AI use poses a governance problem, as these tools can access sensitive data, run code, and connect to other services.
Google Cloud is proactively bolstering its defenses against future quantum computer threats, aiming to complete a major milestone in its post-quantum security migration by 2027. The tech giant has mapped out a multi-year plan to adopt quantum-resistant cryptography, tackling key risks in data security and digital signatures.
Many organizations mistakenly assume Microsoft handles data restoration, but the reality is their Shared Responsibility Model leaves SaaS backup gaps that can expose customers to data loss and ransomware attacks. Native recovery tools only address short-term data issues, not long-term cyber resilience.
Meet Scam Alert, WhatsApp's new on-device AI feature that helps you spot potential scam messages - and take action to protect yourself. This optional feature flags suspicious messages from unknown senders, giving you the power to block, report, or ignore them.
State governments are racing to deliver digital services to citizens, but their modernization efforts are at risk of stalling without a corresponding upgrade to their network infrastructure. Without an agile network in place, innovative projects will be delayed or fail to deliver on their promise.
Researchers have discovered a clever way to shut down AI hacking agents by inserting specially crafted prompts alongside sensitive data on Amazon Web Services, effectively triggering the model's internal safety rules and halting attacks. This innovative technique, dubbed "context bombing," has proven to be a simple yet effective defense against AI-powered hacking.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Researchers at Germany's Helmholtz Center for Information Security have uncovered a vulnerability in Loongson processors that allows data to leak from the L1 data cache, putting sensitive information at risk. This surprising discovery was made by fuzzing Loongson processors and tracing an "uncertain" state in a specific instruction back to its source.
Researchers have made a groundbreaking discovery, proving that commercially available RISC-V chips are vulnerable to devastating Spectre attacks, including Spectre-PHT, Spectre-BTB, Spectre-RSB, and Spectre-STL. They successfully demonstrated attacks with alarming accuracy, achieving up to 100% recall and over 97% precision.
Beware of Chrome VPN extensions that may be putting your online security at risk: over 737 extensions impersonated popular VPN and proxy services, secretly routing users' traffic through unsecured SOCKS5 proxies. This exposed users to potential data breaches and surveillance, as their browsing activity was intercepted by a single, unknown provider.
Imagine a scenario where hackers can gain SYSTEM access to a Windows computer without needing a single click or logged-in user - and even exploit it remotely over RDP with no hardware involved. Researchers have just revealed a chilling new class of attacks, dubbed "Plug and Pwn", that takes advantage of Windows' Plug and Play feature to execute malicious software with alarming ease.
While defenses at the network perimeter are getting stronger, with a 69% prevention rate, the harsh reality is that attackers who breach this outer layer can still wreak havoc inside, with a surprisingly low 37% prevention rate. The latest Blue Report 2026 reveals a concerning gap in enterprise security, highlighting the need for stronger internal defenses.
The US government's quest to modernize the National Vulnerability Database is underway, and it's seeking your input - with an October 13 deadline to share innovative ideas on how to bring this critical cybersecurity resource into the automation age. NIST wants to hear your forward-looking perspectives on how to scale the NVD and supercharge its support for automated security workflows.
Adobe has patched critical vulnerabilities in ColdFusion, Commerce, and Campaign Classic, including a zero-day flaw with a perfect 10.0 CVSS score that could allow hackers to execute arbitrary code or escalate privileges. These high-severity flaws, including operating system command injection and eval injection, require immediate attention to prevent exploitation.
Say goodbye to the hassle of manually verifying safety numbers - Signal's new Automatic Key Verification feature adds an extra layer of protection to ensure your encrypted chats remain private and secure. This innovative update lets you confirm your chats haven't been intercepted, without needing to meet in person or use another channel.