SecurityWeek

Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached via phishing.

Initially calling itself BlackFile, the group has expanded operations to the Redact, Pink, Helix, and Falcon brands.

NMFTA research shows a Bendix EC80 brake controller safety recall also patched remote code execution and DoS vulnerabilities.

Companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas.

Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authentication bypass.

Hackers stole personal, medical, and health insurance information from a company’s data center.

The browser refresh eliminates over two dozen memory safety bugs, including critical use-after-free flaws.

Connor Riley Moucka was extradited to the United States in July 2025 after he was arrested in Canada. 

Zenity researchers reported the findings to Anthropic and OpenAI in late 2025 and early 2026, but they remain unpatched.

(Video) In this podcast, we share insights from Edna Conway, a recognized leader in cybersecurity and supply chain resilience with over 40 years of experience in the field.

An attacker could self-register, sign in for board-level API access, and import a new company for code execution.

The incident involved a testing environment set up by Irregular, similar to what Anthropic reported last week.

Maksim Silnikau was the creator and administrator of the ransomware group and involved in Angler EK’s distribution.

Patches were rolled out for two dozen vulnerabilities, including one with public proof-of-concept (PoC) code.

Tracked as CVE-2026-63077, the critical bug can be exploited without authentication for remote code execution.