Europe’s Multilingual Reality Exposes AI Security Gaps

Europe’s Multilingual Reality Exposes AI Security Gaps As the world becomes increasingly dependent on artificial intelligence (AI) to perform a wide range of tasks, from chatbots to software development, a concerning reality has emerged: not all languages are treated equally when it comes to AI model function and safety. This disparity puts European organizations at … Read more

Clop ransomware targets Windchill, FlexPLM in data theft attacks

Clop Ransomware Gang Exploits Critical Vulnerability in PTC Windchill and FlexPLM Platforms A new wave of cyber attacks has been unleashed by the Clop ransomware gang, targeting enterprise software platforms used by high-profile companies across various industries. The attackers are exploiting a critical vulnerability in PTC Windchill and FlexPLM instances, allowing them to exfiltrate sensitive … Read more

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

A malicious Notepad++ plugin, masquerading as a legitimate code editor add-on, has been found to be spreading a highly sophisticated malware strain known as MATCHBOIL.V2. The affected software is used by developers and programmers worldwide, with potentially thousands of users unknowingly exposing their systems to the threat. The attack vector relies on social engineering tactics, … Read more

Flaws in Passkey Implementation Show Old Attacks Still Work

A Critical Flaw in Passkey Implementation Exposes Users to Old-Style Attacks Researchers have uncovered a trio of vulnerabilities in Microsoft’s passkey systems that could allow attackers to impersonate privileged users, bypassing even the most robust forms of authentication. The findings, set to be presented at Black Hat USA next month, highlight the importance of proper … Read more

Agentic AI Challenges Progress in Confidential Computing

Agentic AI Agents Pose New Security Challenges in Confidential Computing Confidential computing, a technology designed to protect sensitive data from being stolen when in storage, transit, or use, has been gaining momentum in recent years. However, as artificial intelligence (AI) agents become increasingly prevalent, they are introducing new security challenges that current confidential computing systems … Read more

Russian Hackers Exploit Zimbra Zero-Day Against US, Ukraine Targets

Russian State-Backed Hackers Exploit Zimbra Zero-Day Vulnerability Against US and Ukraine Targets A sophisticated Russian state-sponsored threat group, known as “Laundry Bear,” has been using a previously unknown vulnerability in the Zimbra Collaboration Suite (ZCS) to breach networks of Western governments and enterprises. The attack, which involves a “half-click” phishing campaign, has compromised networks across … Read more

Check Point warns of SmartConsole zero-day exploited in attacks

Check Point Warns of SmartConsole Zero-Day Exploit, Urgent Patching Advised Israeli cybersecurity firm Check Point Software has issued a warning about an actively exploited zero-day vulnerability in its SmartConsole graphical user interface (GUI) admin panel. The flaw, tracked as CVE-2026-16232, allows unauthenticated attackers to obtain an application login token that can be used to authenticate … Read more

Microsoft working to fix Exchange Online mailbox quarantine issue

A critical issue has been plaguing Microsoft’s Exchange Online service, causing widespread disruptions for users worldwide. Since Sunday, July 19, thousands of Exchange Online mailboxes have been mistakenly quarantined due to an out-of-memory condition triggered by a recent infrastructure change. The result is that many users are struggling to send and receive emails, while others … Read more

Is Patching Dead? Vulnerability Management in the Post-Mythos Era

The Vulnerability Management Crisis: Is Patching Dead? A major shift is underway in the way governments and organizations approach cybersecurity. The White House’s Gold Eagle initiative, launched on July 14, 2026, marks a significant departure from the traditional model of humans finding and patching vulnerabilities one at a time. Instead, advanced AI is being harnessed … Read more

OpenAI Fixes ChatGPT Agent Flaw That Could Let Attackers Forge an AI Insider

A Critical Flaw in OpenAI’s ChatGPT Workspace Agents Exposes Organizations to Insider Threats Cybersecurity researchers have uncovered a severe vulnerability in OpenAI’s ChatGPT Workspace Agents, which could allow attackers to create an invisible autonomous agent that can be remotely controlled and used for malicious activities. The flaw, dubbed “AgentForger,” is a tailored cross-site request forgery … Read more