Category: Cyber Security News

MCP is moving from a single-user integration protocol to an enterprise-ready, cloud-native platform, with the new MCP 2026-07-28 specification set to replace legacy versions after a 12-month deprecation window. While the update removes several protocol-level risks, Akamai warns that security now depends much more on implementation quality, expanding exposure to issues…

Ukrposhta said its mobile app is facing temporary disruptions after an overnight attack on the company’s IT systems, with specialists working to restore service. The pro-Russian group IT Army of Russia claimed responsibility and said it had accessed a server and exfiltrated user and internal data, though the claim has not…

A cyberattack disrupted logistics and accounting at Ufagormolzavod, a dairy producer in Bashkortostan, forcing staff to handle shipments and paperwork manually while production continued. The incident adds to a string of attacks on Russia’s dairy sector, including the compromise of Molochnaya Kukhnya and earlier disruptions tied to the electronic veterinary certification…

CISA has been operating without a Senate-confirmed director since January 2025, and Homeland Security Secretary Markwayne Mullin said the agency is ready to rebuild once the new nominee is confirmed. He said CISA needs new hiring, stronger partnerships, and updated technology to better confront threats from China and improve its ability…

The FCC approved new rules to strengthen the cybersecurity of the Emergency Alert System, Wireless Emergency Alerts, and U.S. undersea cable infrastructure. The changes add stronger authentication, password, patching, and monitoring requirements while updating licensing and oversight for submarine cable operations. #EmergencyAlertSystem #WirelessEmergencyAlerts #TeamTelecom #FCC

Threat actors are abusing the Shop app by planting fake purchase receipts in order histories to trick users into calling scam support numbers and revealing sensitive information. Gen Digital says the fraud is used to steal credentials, payment details, OTPs, and sometimes to push remote access software, while impersonating brands like Norton, McAfee, Apple, and PayPal. #Shop #Shopify #GenDigital #Norton #McAfee #Apple #PayPal

Polish authorities arrested four members of an organized cybercrime group accused of breaching telecommunications partners, hijacking email accounts, and carrying out SIM-swapping attacks to take over cryptocurrency exchange accounts. The operation, supported by the FBI and HSI, allegedly enabled millions of U.S. dollars in theft and laundering, with one suspect identified by investigators as Wojtek Kulisz, aka “Merry.” #CBZC #FBI #HSI #WojtekKulisz #Merry

A federal judge in Massachusetts blocked major parts of a Trump administration executive order that sought to reshape state election administration, including mail-in ballot restrictions and federally compiled voter lists. Judge Indira Talwani said the Constitution does not give the president specific power over elections and found the cited federal laws did not authorize the government to create state voter databases. #IndiraTalwani #Trump #HAVA #SAVEAmericaAct

Bluekit phishing-as-a-service has expanded with nearly 70 new hostnames and a browser-in-the-middle approach that uses rrweb to relay legitimate login pages while stealing session tokens. The platform also includes AI-assisted phishing email drafting, advanced victim filtering, and anti-analysis checks to evade researchers and security tools. #Bluekit #rrweb #Varonis #Netcraft

A major sports piracy network tied to PirloTV has been disrupted through the takedown of 44 domains that helped drive illegal live-stream traffic worldwide. The operation was carried out by ACE, UEFA, UC3, and Mexican authorities ahead of the UEFA Champions League final, with a major focus on audiences in Latin America, especially Mexico and Colombia. #PirloTV #ACE #UEFA #UC3 #IMPI

A newly discovered macOS malware called Gaslight uses fake logs, crash reports, and prompt injection strings to confuse AI-assisted malware analysis tools during triage. SentinelOne attributes the Rust-based backdoor and infostealer with high confidence to a North Korean-linked threat actor and says it is designed to make LLM agents abort or distrust their own analysis. #Gaslight #SentinelOne #NorthKorea

Microsoft has quietly extended the free Windows 10 Extended Security Updates program for personal devices through October 12, 2027, giving users more time to move to Windows 11. The extension appeared in updated documentation and a blog note rather than through a formal announcement, and enrolled devices will continue receiving critical security updates automatically. #Windows10 #Windows11 #Microsoft

This article explains why security teams need network detection and response to move beyond alerts and validate incidents with defensible evidence. It highlights network interdiction, hypothesis-driven threat hunting, and AI-assisted investigations as key methods for stopping attacks before they become breaches. #Corelight #NDREssentials #RichardBejtlich…

Attackers are still winning with low-effort tactics like stale credentials, fake updates, trusted app abuse, and phishing hidden inside routine workflows. This roundup also covers new flaws in curl and Hoppscotch, proxyware found in LG and Samsung smart TV apps, and campaigns using Microsoft Teams, ClickFix, BitB, and Browser-in-the-Browser to deliver…