⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Microsoft released security patches for a Windows zero-day vulnerability named LegacyHive, which was disclosed after the July 2026 Patch Tuesday cycle. The flaw was actively exploited in the wild, prompting an urgent out-of-band update to protect affected systems.
Following Anthropic's introduction of text watermarking for Claude, numerous unverified 'watermark remover' tools have appeared online, including a popular open source project. None of these tools can prove their claims because Anthropic has not yet released a detection mechanism.
Flock Safety is tightening privacy controls by requiring all customers to use its Audit Assistance feature and reducing license plate data retention to seven days. These changes come in response to multiple scandals involving officer misuse of the company's surveillance technology.
A critical remote code execution vulnerability in VMware vCenter Syslog Server, tracked as CVE-2026-59310, is being actively exploited in a campaign that installs a reverse SSH tool for persistent remote access. Although the vulnerability has been patched, attackers are using it to gain RCE and maintain long-term access to compromised vCenter instances, emphasizing the need for urgent patching and threat hunting.
A new variant of the Mirai botnet introduces encrypted command-and-control communications and a sniffer for default access credentials. These additions significantly improve the malware's stealth and ability to compromise vulnerable IoT devices.
Hardware wallet maker Trezor disclosed a data breach impacting nearly 14,000 customers after its shipping and logistics provider, ShipMonk, was hacked. The incident underscores the growing threat of supply chain attacks targeting cryptocurrency-related services.