‘GodDamn’ ransomware deploys PoisonX driver to kill EDRLaura FrenchJuly 10, 2026GodDamn, a rebrand of Beast and Monster ransomware, leverages AnyDesk for remote access.
Here’s what our industry learned the past 90 days since the Mythos announcementDanny JenkinsJuly 8, 2026
TrainingTwo-year online college ‘Campus’ now offers cybersecurity trackSteve ZurierJuly 9, 2026Online program aims to build a pipeline of qualified candidates to fill positions that require much-needed AI skills.
AI/ML‘GhostApproval’ technique leads AI coding tools to alter files outside of sandboxLaura FrenchJuly 9, 2026The technique abuses symlinks to escape the intended workspace and weaken human-in-the-loop protections.
Vulnerability ManagementCISA adds ColdFusion, Langflow, and Joomla bugs to known exploited vulnerabilities listSteve ZurierJuly 8, 2026Three of the four flaws added to CISA's KEV list were critical.
Critical Infrastructure SecurityRep. Josh Harder: US must build more housing, infrastructureSC StaffJuly 8, 2026At ICIT event, California congressman urges faster housing, infrastructure to cut costs.
AI/ML‘GitLost’ prompt injection leaks private repos via GitHub Agentic WorkflowsLaura FrenchJuly 8, 2026An issue opened on a public repository can lead the agent to disclose private details.
Cloud SecurityLinux bug dormant for 16 years can cause a VM escapeSteve ZurierJuly 7, 2026A single compromised hypervisor can grant root privileges over the server.
AI/MLMalicious websites trick AI agents into crypto payments, context poisoningLaura FrenchJuly 7, 2026Indirect prompt injections hidden in HTML were discovered on sites targeting developers and cryptocurrency owners.
Supply chainNorth Korean PolinRider supply chain attack targets 108 unique reposSteve ZurierJuly 6, 2026Socket says the campaign remains active and more attacks are likely.