Anthropic CEO: Time to Shift From Improving to Controlling AI

As the AI industry continues to accelerate at breakneck speed, a growing chorus of experts is sounding the alarm about the need for greater control and caution in the development and deployment of artificial intelligence. Dario Amodei, CEO of Anthropic, has issued one of the most stark warnings yet, urging industry leaders to slow down … Read more

Maximum Severity GitLab Flaw Puts Supply Chains at Risk

Cybersecurity experts are sounding the alarm over a newly disclosed vulnerability in GitLab, a popular platform used by developers to collaborate on software projects. The flaw, known as CVE-2026-85706, has already been exploited by threat actors, who are using it to gain access to sensitive information and potentially compromise entire supply chains. The vulnerability, which … Read more

‘Sandworm’ Chains Cisco Vulnerabilities to Deploy Cyclops Blink

A Notorious Russian Threat Group is Back with an Upgraded Botnet Malware A sophisticated malware implant capable of harvesting credentials, scanning internal networks, and capturing live traffic on compromised devices has been deployed by a likely Russian threat actor. This malware, identified as a new version of Cyclops Blink, chains two vulnerabilities in Cisco’s Firewall … Read more

Hackers target exposed Vite dev servers to steal AWS, Azure secrets

Vite Dev Servers Exposed to Mass Scanning Campaigns Targeting AWS and Azure Secrets A concerning trend has emerged in the cybersecurity landscape, as hackers are leveraging a previously disclosed vulnerability in Vite development servers to steal sensitive cloud credentials and configurations from AWS and Azure deployments. The mass-scanning campaign, detected by technology company F5 through … Read more

Hackers hijack HBO Max Reddit account to push malware in ClickFix ads

Hackers Hijack HBO Max Reddit Account to Push Malware in ClickFix Ads A sophisticated cyberattack has seen hackers compromise the official HBO Max Reddit account, using it to spread malicious ads that launched attacks on Windows and macOS devices. The campaign, dubbed PasteSwitch by security researchers, targeted both platforms with a range of malware payloads. … Read more

Twitch extension with 30K installs exposes users’ OAuth tokens

A Browser Extension with 30,000 Installs Exposes Twitch Users’ OAuth Tokens, Raises Security Concerns A disturbing security flaw has been discovered in a popular browser extension for the live streaming platform Twitch. The extension, called Twitch Enhanced Viewer | JeetBot, boasts over 30,000 installs and promises to block ads, improve video playback, and bypass region … Read more

Homebrew 7.0.0 gets built-in GUI, better security controls

Homebrew 7.0.0 Packs a Punch with Enhanced Security Features and Native GUI In a significant upgrade, Homebrew’s package manager has been released in version 7.0.0, boasting a built-in vulnerability scanner, improved security controls, and a fully-fledged native graphical interface. This major overhaul promises to make the popular open-source tool even more appealing to macOS users, … Read more

Hackers hijack HBO Max Reddit account to push malware in ClickFix ads

Cybercriminals have hijacked HBO Max’s official Reddit account to spread malware by pushing malicious ads that trick users into installing information-stealing malware. Over 48 hours, the verified u/hbomax account posted 108 malicious advertisements, some of which impersonated the streaming service while others promoted fake AI tools and developer software. The attackers used a social engineering … Read more

Japan’s Digital Agency says VPN flaw exposed 246,000 personnel records

A significant data breach has compromised the personal information of over 246,000 government employees and individuals associated with Japan’s Government Solution Service (GSS). The attack, which was discovered on July 9th, involved exploiting a vulnerability in a VPN device used by the GSS system. While it is unclear what specific VPN product was affected or … Read more