Siber Güvenlik Haberleri

Podatności w oprogramowaniu GNU coreutils

W oprogramowaniu GNU coreutils wykryto 2 podatności różnego typu (CVE-2026-56391 i CVE-2026-56392)

İlişkili Şirketler

G

gnu

R

redhat

U

uutils

Don’t swing at everything

Thorsten explores Q2 2026 stats, the artificial buffer zone of 2026, and why smart, prioritized patching is more critical than ever.

İlişkili Şirketler

W

wordpress

New warnings that Russian operatives are targeting the emails of US nuclear scientists and defense contractors

Email threat landscape: Q2 2026 trends and insights

In the second quarter of 2026, the continuing effects of Microsoft’s disruption of the Tycoon2FA phishing platform contributed to sustained declines in several major phishing techniques, while threat actors expanded into Teams-based social engineering and employed increasingly automated and multi-stage attack chains. The post Email threat landscape: Q2 2026 trends and insights appeared first on Microsoft Security Blog.

Russian Global Webmail Espionage

Unit 42 details a Russian cyberespionage campaign targeting Zimbra webmail servers using JavaScript injection to steal credentials. The post Russian Global Webmail Espionage appeared first on Unit 42.

İlişkili Şirketler

SY

shigio yamaguchi

B

bulwarkmail

R

roundcube

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

İlişkili Şirketler

M

mikel

R

rubygems

S

stealjs

Z

Zimbra

US and allies say Russian hackers stole emails without social engineering

What Happened Between OpenAI and Hugging Face?

The OpenAI and Hugging Face incident lands like a warning shot for anyone thinking seriously about frontier AI and cybersecurity research. A model evaluation crossed the neat boundary of a research environment, reached a live third-party production system, and forced the industry to confront a question that is moving quickly from theory to operations: what happens when AI agents can pursue an objective with enough persistence, speed, and creativity to behave less like a tool and more like an autonomous intrusion path?According to OpenAI’s disclosure, the incident began during an internal evalu

İlişkili Şirketler

HF

Hugging Face

O

OpenAI

CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild

OverviewOn July 22, 2026, Check Point published a security advisory for multiple vulnerabilities affecting Security Management, Multi-Domain Management, and firewall products. The most urgent of these is CVE-2026-16232, an authentication bypass in the SmartConsole login process classified as improper authentication (CWE-287). CVE-2026-16232 has been assigned a critical CVSS score of 9.1. The vulnerability allows an unauthenticated remote attacker to obtain an application login token and authenticate to the management server with full administrative privileges, enabling modification of security

İlişkili Şirketler

C

checkpoint

C

cakephp

Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel

The Chaos ransomware group uses new malware "msaRAT" that hijacks browsers. The malware doesn't communicate directly with C2 but connects through the browser. It enables arbitrary command execution while hiding the attacker's IP from victims via WebRTC over TURN.