Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Statistics on Malware Distributed to the Financial Sector In Attack Stage 1, phishing (a technique that tricks users into opening malicious links or attachments) had the highest rate at 1.7, Down from 2.3 The previous month.
AhnLab ASEC discovered a phishing campaign where emails disguised as transaction receipts impersonate US company employees, tricking recipients into opening malicious attachments by asking them to confirm fund deposits.
The July 2026 report on security issues in the Korean and global financial sector provides statistics on malware distribution targeting financial institutions. In Attack Stage 1, phishing remained the most prevalent technique with a rate of 1.7, down from 2.3 the previous month.
The article describes how the Head Mare hacktivist group breaches TrueConf video conferencing servers by exploiting unpatched vulnerabilities. They replace client installers with malicious versions that deliver backdoors to users.
Two independent security firms discovered that Atlassian's Rovo assistant can be tricked via prompt injection to send Jira or Confluence data to attackers. PromptArmor hid instructions in an uploaded file, while Varonis used a URL parameter; only Varonis's flaw has been fixed.
New research presented at Black Hat USA 2026 demonstrates CSS attacks that allow email content to break out of its message boundary and compromise webmail interfaces. These attacks can capture passwords, steal tokens, and manipulate AI tools across providers like Outlook and Gmail.