Eduard Kovacs

The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and SharePoint data.

NMFTA research shows a Bendix EC80 brake controller safety recall also patched remote code execution and DoS vulnerabilities.

Connor Riley Moucka was extradited to the United States in July 2025 after he was arrested in Canada. 

Zenity researchers reported the findings to Anthropic and OpenAI in late 2025 and early 2026, but they remain unpatched.

The incident involved a testing environment set up by Irregular, similar to what Anthropic reported last week.

The chain involved the exploitation of several vulnerabilities in the Samsung Members and Samsung Account applications.

Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation.

The guidelines are the work of the recently launched Open Secure AI Alliance, which now includes 120 organizations.

Georgia has been confirmed as one of the attacked states after Clayton County reported a pump station disruption.

Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.

The biggest single reward paid out by Microsoft between July 1, 2025, and June 30, 2026, was $200,000.

The N‑central vulnerability CVE-2026-18577 has been exploited in the wild after threat actors found a patch bypass.

Michigan, South Dakota, and Georgia are reportedly on the list of states whose water systems have been targeted by Iran-linked hackers.

A security company’s systems were hacked after it installed a malicious Python package deployed by Claude. 

Hackers were detected on Analog Devices systems in June, and an investigation found that they stole files.

Claroty has analyzed 750,000 cyber-physical systems across some of the world’s largest data center facilities.

The vulnerability tracked as CVE-2026-20316 can be exploited by a remote, unauthenticated attacker to log into affected devices. 

The company was previously valued at $1.6 billion, and the latest raise has significantly increased that valuation.

A total of five vulnerabilities have been patched in VMware ESXi, vCenter, Workstation, and Fusion.

Hugging Face has published an anatomy of the attack and OpenAI has shared additional information from its investigation.