Category: Cyber Security News

WordPress has released fixes for CVE-2026-65640, a high-severity flaw that could let authenticated attackers execute arbitrary code through malicious PostScript file uploads. The issue affects installations using Imagick and Ghostscript, and WordPress 7.0.4 plus backports to older branches now block the vulnerable file handling path. #WordPress #CVE-2026-65640 #Imagick #Ghostscript…

Hackers began exploiting a critical Adobe Commerce flaw, CVE-2026-71362, almost immediately after Adobe publicly disclosed the issue and issued a patch. Sansec says the vulnerability lets unauthenticated attackers hijack customer sessions and access private account data, affecting Adobe Commerce, Commerce B2B, and Magento Open Source. #CVE-2026-71362 #AdobeCommerce #MagentoOpenSource…

Twenty-one cybersecurity-related merger and acquisition deals were announced in July 2026, led by major moves from Bank of America, Barracuda, Cribl, CrowdStrike, Cyera, Okta, Palo Alto Networks, and Qualcomm. Many of the transactions focused on identity security, exposure management, observability, and AI-driven defense capabilities, with several acquisitions targeting Israeli startups. #MDSec…

A new White House memorandum directs the National Coordination Center to create a program allowing vetted private security firms to seek approval for limited U.S.-authorized cyber operations against foreign cybercrime groups. The initiative is meant to disrupt organizations behind ransomware, phishing, fraud, sextortion, and impersonation scams, while requiring strict legal compliance and financial safeguards. #NationalCoordinationCenter #DonaldTrump #NCC

AI coding assistants are accelerating development, but they are also introducing unvetted or hallucinated dependencies that can lead to slopsquatting and supply-chain compromise. The article argues that enterprises must govern package selection before code reaches the build stage, with ActiveState positioning its curated catalog as a way to block risky dependencies at intake. #ActiveState #PyPI #npm #react-codeshift

Trezor disclosed that nearly 14,000 customers had their personal data exposed after its shipping partner ShipMonk suffered a breach. The stolen information may be used in targeted phishing campaigns impersonating Trezor, banks, or crypto exchanges. #Trezor #ShipMonk

President Donald Trump signed a national security memorandum that would let vetted private sector companies support U.S. law enforcement in offensive cyber operations against foreign cyber-enabled transnational criminal organizations. The plan creates a federally overseen program tied to the Department of Justice and Department of Homeland Security, while still requiring compliance with existing laws like the Computer Fraud and Abuse Act. #DonaldTrump #DepartmentOfJustice #DepartmentOfHomelandSecurity #ComputerFraudAndAbuseAct

Fortinet released patches for eight vulnerabilities across FortiWeb, FortiManager, FortiClient for Windows, FortiOS, and FortiSIEM, including high-severity authentication flaws. The company also published guidance on CVE-2026-49975, the HTTP/2 Bomb attack affecting Apache HTTP Server, and noted no signs of active exploitation. #FortiWeb #FortiManager #FortiClient #FortiOS #FortiSIEM #ApacheHTTPServer #CVE-2026-26035 #CVE-2026-70468 #CVE-2026-70465 #CVE-2026-49975…

Team8 announced it has raised $365 million in new capital, including $265 million for its third Team8 Capital fund and $100 million for follow-on investments in top portfolio startups. The firm, known for backing enterprise technology and cybersecurity companies such as Talon, Dig, and Koi, says its latest focus is on…

WhatsApp has started rolling out an optional Scam Alert feature that uses an on-device machine learning model to warn users about likely scam messages without sending message content off the device. The feature is being tested in a limited beta and is part of WhatsApp’s broader effort to protect users from fraud, device-linking scams, and spyware threats. #WhatsApp #ScamAlert #Pegasus #NSOGroup

Microsoft released fixes for 419 vulnerabilities in a record-setting Patch Tuesday, highlighting how AI-assisted flaw discovery is sharply accelerating the pace of software security issues. The update includes three zero-days, one actively exploited in the wild and linked to Lazarus Group, while the new clustered advisory format may make prioritizing patches…

Threat actors are actively exploiting CVE-2026-55040, a critical Microsoft SharePoint authentication bypass, after Rapid7 released proof-of-concept code. The attacks use forged JWT tokens to impersonate users and administrators, with telemetry showing 12 exploitation attempts across multiple countries and regions. #CVE-2026-55040 #MicrosoftSharePoint #Rapid7…

Britain’s ACRO Criminal Records Office was reprimanded by the ICO after repeated breaches over nearly two years exposed sensitive personal data, including information linked to domestic violence victims. The incidents involved unpatched Kentico flaws, ignored Trend Micro alerts, and an attempted Mimikatz deployment, with the Medusa ransomware group later claiming responsibility….

Reco has uncovered the City-Forum campaign, an ongoing data-theft operation that uses custom tools to steal records exposed to anonymous users in Salesforce Experience Cloud and ServiceNow portals. The activity is tied to the IP address 158.220.87.79 and has been linked to broad targeting of organizations worldwide, including attacks against Salesforce Aura and LWR sites as well as ServiceNow Service Portals. #CityForum #Salesforce #ServiceNow #Contabo #AuraInspector #ShinyHunters