1+ hour, 22+ min ago  (676+ words) Wiz has disclosed the details of a new AI coding assistant attack method it has dubbed Ghost Approval. Several popular AI coding assistants were tricked into facilitating developer machine hacking via an attack technique that has been known for decades,…...

2+ hour, 47+ min ago  (475+ words) The security refresh resolves 13 use-after-free bugs, including two critical-severity flaws found by Google. Google on Wednesday announced a Chrome 150 security update that resolves 27 vulnerabilities, including two critical-severity flaws. The two critical bugs are use-after-free issues in Chrome's Ozone and Views…...

3+ hour, 9+ min ago  (517+ words) The Spanish startup has closed an extended pre-seed funding round two months after launching its digital identity protection platform. Spanish security startup 8 Layers has announced closing a $1. 1 million pre-seed extension round that brings the total raised by the company in…...

5+ hour, 23+ min ago  (591+ words) A security researcher has discovered an undocumented backdoor in multiple Tenda firmware versions that provides attackers with administrative access to a device's web management interface. The security hole appears to affect Tenda routers, switches, and other types of networking devices....

18+ hour, 15+ min ago  (620+ words) The professional services giant says it contained the incident, remediated its source, and experienced no operational or service delivery impact. Professional services giant Accenture confirmed a data breach after a hacker claimed the theft of internal source code from the…...

18+ hour, 23+ min ago  (764+ words) Cisco says the threat actor behind the Lap Dogs campaign has expanded its SOHO router malware toolkit with Long Leash, Dog Leash, and Jar Leash backdoors. As part of a prolonged espionage infrastructure campaign tracked as Lap Dogs, the APT…...

20+ hour, 6+ min ago  (397+ words) Join the webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem. Live Webinar: Wednesday, July 8, 2026 " Register to Attend You can block every phishing email in the inbox. The campaign still runs. The…...

21+ hour, 45+ min ago  (644+ words) The "Rogue Agent" vulnerability could have enabled attackers to silently manipulate AI conversations, exfiltrate data, and compromise every Dialogflow CX agent within the same Google Cloud project. For user conversation workflows, Dialogflow CX relies on Playbooks, which offer Code Blocks,…...

23+ hour, 6+ min ago  (673+ words) Two newly disclosed critical vulnerabilities in Adobe Cold Fusion and Langflow join two Joomla extension flaws in CISA's Known Exploited Vulnerabilities catalog, with federal agencies given until July 10 to patch. The US cybersecurity agency CISA on Tuesday warned that vulnerabilities…...

23+ hour, 6+ min ago  (620+ words) Researchers show how attackers can use a crafted public Git Hub Issue to trick AI-powered workflows into exposing data from private repositories without authentication. A critical prompt injection vulnerability in Git Hub Agentic Workflows could allow unauthenticated attackers to leak…...