RansomwareINC Ransomware chains two SonicWall SMA 1000 zero-days in attacksSteve ZurierAugust 3, 2026INC ransomware exploits SonicWall zero-days, prompting compromise fears.
AI/MLAnthropic Claude models compromised 3 companies during testingLaura FrenchJuly 31, 2026OpenAI’s Hugging Face incident disclosure prompted Anthropic to review its own evaluations.
Critical Infrastructure SecurityUnspecified threat actors targeting US water systems, CISA warnsSteve ZurierJuly 31, 2026CISA reports surge in cyberattacks targeting water utility PLCs.
Threat ManagementAmazon attributes axios, debug, chalk NPM attacks to DPRK’s Sapphire SleetLaura FrenchJuly 31, 2026Amazon linked the campaigns through overlapping C2 indicators, TTPs and code.
Cloud SecurityCritical Azure Cosmos DB flaw risked cross-tenant compromiseSteve ZurierJuly 30, 2026Patched Azure Cosmos DB bug threatened Microsoft and customer databases.
AI/MLOpenAI agent exploited JFrog Artifactory flaw, abused Modal customer sandboxLaura FrenchJuly 30, 2026Hugging Face and OpenAI revealed further details on the agent’s 4.5-day attack campaign.
Incident ResponseEffective incident response plans elusive for most cybersecurity teamsSteve ZurierJuly 29, 2026Experts say untested incident response plans leave firms unprepared.
Vulnerability ManagementIPMI bug in BMCs found after 22 years, exposes 24,000-plus serversSteve ZurierJuly 28, 2026Decades-old IPMI bug leaves thousands of internet-facing servers exposed.
Vulnerability ManagementCheckPoint authentication bypass bug exploited, added to CISA listSteve ZurierJuly 27, 2026CISA orders rapid patching as Check Point auth bypass faces active attacks.
Critical Infrastructure SecurityUS warns of Iran-linked attacks on critical infrastructureSteve ZurierJuly 24, 2026Iran-linked hackers target Siemens, Schneider, Rockwell OT.
