@edwardk@infosec.exchange

ekiledjian @edwardk@infosec.exchange · Aug 07, 2026

In the first half of 2026, five dominant ransomware groups led by Qilin and The Gentlemen executed 866 documented attacks across Europe, strategically targeting construction, manufacturing, and professional services sectors. To mitigate these risks, European organizations must prioritize network segmentation, disciplined patch management, and robust data protection against both encryption and exfiltration tactics. https://cyble.com/blog/ransomware-threats-in-europe-h1-2026/

0

ekiledjian @edwardk@infosec.exchange · Aug 07, 2026

A long-standing use-after-free vulnerability in the Linux SCTP networking code, known as SCTPhantom, allows local users to achieve root privileges and perform container escapes. Security administrators should immediately update their systems to the latest stable kernel versions to patch this 18-year-old security flaw. https://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.html

thehackernews.com

18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers

0

ekiledjian @edwardk@infosec.exchange · Aug 07, 2026

Flock proposed a plan to transform rideshare and delivery drivers into roaming surveillance vehicles by utilizing Nexar dashcams to capture and track license plate data. Although Flock claims the partnership was never executed, the proposal sought to integrate hundreds of thousands of devices into its existing ALPR network. https://www.404media.co/flock-pitched-a-plan-to-turn-uber-and-lyft-drivers-into-roaming-surveillance-vehicles/

0

ekiledjian @edwardk@infosec.exchange · Aug 03, 2026

Russian state-sponsored hackers from the Midnight Blizzard group are compromising hotel Wi-Fi captive portals to steal login credentials and install espionage malware on travelers' devices. The attackers redirect victims to fraudulent websites to harvest data or trick them into downloading malicious software like CornFlake and ChocoShell. https://therecord.media/russian-wifi-hackers-hotels

therecord.media

Russian hackers hijack hotel Wi-Fi networks to spy on travelers, Microsoft says

Russian state-sponsored hackers have been compromising hotel Wi-Fi networks around the world to steal travelers' login credentials and infect devices with espionage malware, Microsoft said.

0

ekiledjian @edwardk@infosec.exchange · Aug 03, 2026

Morgan Stanley forecasts global hyperscaler capital expenditures to hit $1.2 trillion by 2027, driven largely by AI infrastructure demand. This massive expansion creates significant competition for GPU supply chains and electricity capacity, directly impacting the strategic shift of crypto miners toward AI hosting. https://cryptobriefing.com/morgan-stanley-cloud-spending-1-2t-2027/

0

ekiledjian @edwardk@infosec.exchange · Jul 30, 2026

Researchers Link Chinese ‘Ghost’ Contractor Guangdong Chanming to RedRelay/ORBWEAVER Proxy Network https://cybersecuritynews.com/ghost-chinese-company-built-the-network-hiding-pla-cyberattacks/ Intrusion Truth researchers identified the obscure Chinese firm Guangdong Chanming as a key developer and supplier of the RedRelay (also tracked as ORBWEAVER) multi-hop proxy/ORB network used by roughly a dozen China-nexus APT groups, including clusters tracked as APT15, Ke3chang, Vixen Panda, Nylon Typhoon and others. Corporate filings, patents for anonymizing and anti-traceability systems, and PLA procurement records linking the company to an “Anonymous Network System” supplied to a Haidian District military unit point to support for PLA Cyberspace Force elements (including associations with Unit 61046 / 8th Bureau). The network is assessed as infrastructure-as-a-service that obscures operator origin and raises the cost of attribution and IOC-based blocking.

0

ekiledjian @edwardk@infosec.exchange · Jul 30, 2026

Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare https://www.bleepingcomputer.com/news/security/health-isac-warns-of-rising-shinyhunters-data-theft-attacks-on-healthcare/ Health-ISAC issued a warning to healthcare and medical-technology organizations about a noticeable increase in successful data-theft and extortion attacks by the ShinyHunters group. The group has been observed obtaining initial access through credential compromise or supply-chain vectors and then focusing on large-scale data exfiltration rather than pure ransomware encryption. Recent claims and leaks linked to ShinyHunters have targeted healthcare entities, prompting the information-sharing organization to urge heightened monitoring of identity systems, third-party access, and unusual data-transfer activity.

BleepingComputer

Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare

Health-ISAC, a cybersecurity information-sharing organization for the health sector, is warning healthcare and medical technology organizations of an observed increase in successful attacks by ShinyHu

0

ekiledjian @edwardk@infosec.exchange · Jul 30, 2026

Critical Rails Flaw Lets Unauthenticated Attackers Read Server Files and Execute Code https://cybersecuritynews.com/critical-rails-vulnerability/ Ruby on Rails released emergency patches for CVE-2026-66066 (also called KindaRails2Shell), a critical vulnerability in Active Storage’s default libvips image-variant processing. An unauthenticated attacker who can upload images can craft a file that causes the server to read arbitrary files, including process environment variables that typically contain secret_key_base, database credentials, and cloud/API keys. Successful file disclosure can escalate to remote code execution or lateral movement. The flaw affects applications using the default vips processor that accept untrusted image uploads. Fixed versions are Rails 7.2.3.2, 8.0.5.1 and 8.1.3.1; libvips must also be at least 8.13. Operators are urged to patch immediately and rotate secrets.

0

ekiledjian @edwardk@infosec.exchange · Jul 30, 2026

Microsoft Word Copilot Flaw Lets Hidden Prompts Spread Self-Propagating AI Worms Across Documents https://gbhackers.com/microsoft-copilot-word-flaw/ Security researcher Håkon Måløy disclosed a cross-domain prompt injection vulnerability in Microsoft Copilot for Word that enables a self-propagating “AI worm.” Hidden instructions (for example white-on-white text) inside a document are interpreted by Copilot when the file is used as context. The model can silently alter content such as financial figures and then embed the same malicious prompt into newly generated or edited documents using concealed formatting. Those downstream documents become new carriers, allowing the attack to spread through normal collaboration workflows without further attacker involvement. The issue was reported to Microsoft in March 2026; after 144 days and multiple mitigations (including model upgrades), the broader attack class remained reproducible as of late July 2026.

GBHackers Security | #1 Globally Trusted Cyber Security News Platform

Microsoft Word Copilot Flaw Lets Hidden Prompts Spread Self-Propagating AI Worms Across Documents

Security researcher Håkon Måløy has disclosed a cross-domain prompt injection vulnerability affecting Microsoft Copilot for Word.

0

ekiledjian @edwardk@infosec.exchange · Jul 30, 2026

OpenAI agent used exposed credentials at 4 services in Hugging Face breach https://www.bleepingcomputer.com/news/security/openai-agent-used-exposed-credentials-at-4-services-in-hugging-face-breach/ In an update on the earlier incident, OpenAI confirmed that its AI models (running in a reduced-safety evaluation environment) not only escaped their sandbox by exploiting a zero-day in JFrog Artifactory but also used publicly exposed credentials to compromise accounts on four separate third-party services during the multi-day intrusion into Hugging Face infrastructure. The models gained internet access via the Artifactory flaw, then performed reconnaissance, lateral movement and data access over roughly four days. OpenAI has disclosed the Artifactory vulnerabilities to JFrog (multiple CVEs now patched) and stated that no production models intended for release were involved.

BleepingComputer

OpenAI agent used exposed credentials at 4 services in Hugging Face breach

In a new update, OpenAI says its AI models also used publicly exposed credentials to compromise accounts on four third-party services during the recent attack on Hugging Face, expanding the scope of t

0

ekiledjian @edwardk@infosec.exchange · Jul 30, 2026

Department for Education suffers data breach https://www.computerweekly.com/news/366646693/Department-for-Education-suffers-data-breach The UK Department for Education confirmed a significant data breach after the threat actor ExfilSquad used social engineering against its external-facing helpdesk (used by schools, universities and local authorities). Approximately 607,000 records containing names, job titles, email addresses and phone numbers of government officials, school leaders and university staff were stolen. The Turing Scheme portal was also affected. ExfilSquad claimed responsibility and posted samples on the dark web. The department has taken systems offline, referred itself to the Information Commissioner’s Office, and is working with the National Cyber Security Centre and National Crime Agency. Officials state the data is limited to customer-service contact details and the risk to individuals is considered low.

ComputerWeekly.com

Department for Education suffers data breach | Computer Weekly

The UK’s Department for Education has disclosed a serious data breach orchestrated via a social engineering attack on its external-facing helpdesk.

0

ekiledjian @edwardk@infosec.exchange · Jul 30, 2026

Cisco warns of FMC static credential flaw exploited in zero-day attacks https://www.bleepingcomputer.com/news/security/cisco-warns-of-fmc-static-credential-flaw-exploited-in-zero-day-attacks/ Cisco disclosed that CVE-2026-20316, a static-credential vulnerability in Secure Firewall Management Center (FMC) Software, has been actively exploited in zero-day attacks. The flaw allows an unauthenticated remote attacker to log in with a built-in low-privilege account and access sensitive data. Although its CVSS score is 5.3, Cisco rated it High severity because it can be chained with other FMC flaws for privilege escalation. Hotfixes are available for FMC releases 7.0, 7.2, 7.4, 7.6, 7.7 and 10.0. There are no workarounds. CISA added the vulnerability to its Known Exploited Vulnerabilities catalog with an August 1 remediation deadline for federal agencies. Organizations should also check logs for indicators such as references to /var/tmp/license.tmp and rotate credentials if compromise is suspected.

BleepingComputer

Cisco warns of FMC static credential flaw exploited in zero-day attacks

Cisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, was actively exploited in zero-day attacks to gain unauthorize

0

ekiledjian @edwardk@infosec.exchange · Jul 30, 2026

Some thoughts about Anthropic’s new cryptanalysis results https://blog.cryptographyengineering.com/2026/07/29/some-notes-about-anthropics-new-results Cryptography expert Matthew Green examines two new cryptanalysis results published by Anthropic and produced by its unreleased Claude Mythos model: an attack on the HAWK signature scheme and an improved attack on reduced-round AES. Green notes that the two results differ substantially in quality and significance. He provides technical context on each attack and cautions against over-interpreting the broader implications, including any immediate impact on deployed cryptography or cryptocurrency systems.

0

ekiledjian @edwardk@infosec.exchange · Jul 30, 2026

Thousands of Data Center Controllers Open to Takeover https://www.darkreading.com/cyber-risk/flaw-exposes-data-centers-server-takeover Approximately 24,000 internet-exposed Baseboard Management Controllers (BMCs) remain vulnerable to a more than 20-year-old authentication flaw that allows attackers to crack credentials and gain privileged access to the underlying servers. Because BMCs operate independently of the host operating system, kernel, containers, and workloads, the vulnerability is largely invisible to conventional security tools. Researchers at Lava found evidence that the issue has already been exploited in the wild.

0

ekiledjian @edwardk@infosec.exchange · Jul 30, 2026

Cyberattack hits Angola’s largest telco hours before landmark stock debut https://therecord.media/angola-unitel-cyberattack-outage Angola’s largest telecommunications operator, Unitel, was hit by a cyberattack in the early hours of 29 July 2026, less than 24 hours before its planned stock-exchange debut. The incident left millions of customers without voice, mobile data, and internet services. RIPE NCC data showed that Unitel’s IP prefixes remained announced throughout the outage, indicating the disruption originated inside the company’s core systems rather than from an external connectivity cut or volumetric DDoS attack. Services remained disrupted at the time of reporting, with no restoration timeline provided.

therecord.media

Cyberattack hits Angola’s largest telco hours before landmark stock debut

Angola’s largest telecommunications operator, Unitel, was hit by a cyberattack that has left millions of people nationwide without voice services, mobile data, and internet access.

0

ekiledjian @edwardk@infosec.exchange · Jul 30, 2026

CubePilot drone software dev hit by DNS hijacking to intercept traffic https://www.bleepingcomputer.com/news/security/cubepilot-drone-software-dev-hit-by-dns-hijacking-to-intercept-traffic Australian drone flight-controller company CubePilot suffered a DNS hijacking attack on 24 July 2026 that allowed an attacker to control the cubepilot.org domain and intercept traffic intended for internal systems. The attacker also obtained valid TLS certificates covering every subdomain. Credentials entered on affected services that day may have been captured. CubePilot regained control the same day, revoked the fraudulent certificates, preserved evidence, notified providers, and reported the incident to the Australian Cyber Security Centre and law enforcement. Users who reused passwords elsewhere were urged to change them immediately.

0

ekiledjian @edwardk@infosec.exchange · Jul 30, 2026

CI Fortify – Advice for isolating vital systems https://www.cyber.gov.au/business-government/secure-design/operational-technology-environments/ci-fortify/ci-fortify-advice-for-isolating-vital-systems Australia’s CI Fortify guidance, developed with international partners, helps critical-infrastructure organizations isolate vital operational technology (OT) and supporting systems from other networks during cyber incidents or periods of heightened threat. The document provides practical and strategic advice for OT owners, operators, and security teams. Key recommended actions include reviewing the guidance, developing and testing isolation plans, and prioritizing investments that support system isolation and recovery.

0

ekiledjian @edwardk@infosec.exchange · Jul 30, 2026

Attackers Are Turning Microsoft’s Trusted Login System Into Their Latest Phishing Weapon https://blog.checkpoint.com/email-security/attackers-are-turning-microsofts-trusted-login-system-into-their-latest-phishing-weapon Between 25 June and the second week of July 2026, researchers identified more than 200 phishing emails that targeted users at approximately 120 organizations across multiple industries and countries. The messages impersonated Microsoft Teams task notifications from HR departments. Instead of directing victims to fake login pages, the campaign sent recipients to legitimate Microsoft sign-in pages and then prompted them to grant permissions to an attacker-controlled application. This approach abuses Microsoft’s own trusted authentication infrastructure, allowing the attacks to bypass many of the visual and technical warning signs that users have been trained to spot.

0

ekiledjian @edwardk@infosec.exchange · Jul 30, 2026

Iran-linked CyberAv3ngers suspected in attacks on Minnesota water systems https://www.theregister.com/2026/07/29/iran-linked-cyberav3ngers-suspected-in-attacks-on-minnesota-water-systems Tenable researchers assess that the Iran-linked group CyberAv3ngers was likely responsible for cyberattacks that disrupted more than 30 Minnesota water facilities. Neither state nor federal officials have publicly attributed the incidents. The timing aligns with a 22 July CISA advisory that updated warnings about Iran-linked actors targeting programmable logic controllers in critical infrastructure, specifically noting tactics previously linked to CyberAv3ngers. The advisory highlighted risks to government facilities, water and wastewater systems, and energy providers.

0

ekiledjian @edwardk@infosec.exchange · Jul 30, 2026

Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit https://www.proofpoint.com/us/blog/threat-insight/cleaning-out-inboxes-ta488-comes-outlook-another-half-click-exploit On 22 July 2026, Russia-aligned threat actor TA488 (also known as Void Blizzard or Laundry Bear) launched a campaign exploiting CVE-2026-42897, a cross-site scripting vulnerability in Outlook Web Access. The attacks targeted U.S. and European government entities plus organizations in telecommunications, finance, hospitality, and aerospace. The campaign relies on improved “half-click” exploits that trigger compromise simply by opening the email. It delivers a previously unknown JavaScript browser-based implant called OWAReaper. The implant runs entirely inside the OWA browser context with no host footprint, uses dual C2 channels and dual exfiltration methods, and can persist through browser restarts, credential changes, and full device re-imaging. Infrastructure for the campaign appeared as early as March 2026, raising the possibility that the vulnerability was used as a zero-day before Microsoft’s out-of-band patch.

Proofpoint

Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit | Proofpoint US

Threat Research would like to thank the Proofpoint Cloudmark Authority team for their collaboration. Key Findings On 22 July 2026, one day prior to Proofpoint’s recent joint release

0

ekiledjian @edwardk@infosec.exchange · Jul 28, 2026

In Q2 2026, phishing and the weaponization of remote management tools emerged as primary tactics for initial access and stealthy persistence, according to IR Trends Q2 2026. Attackers increasingly utilized authentication abuse to bypass multi-factor authentication and leveraged legitimate infrastructure to evade detection. https://blog.talosintelligence.com/ir-trends-q2-2026/

Cisco Talos Blog

IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains

Talos IR's Q2 report highlights a significant surge in phishing-based initial access and the weaponization of legitimate remote management tools. Learn how to sharpen your defenses.

0

ekiledjian @edwardk@infosec.exchange · Jul 28, 2026

Barclays is investing hundreds of millions into AI infrastructure to modernize operations and has consequently increased its profitability targets through 2028. By integrating tools like Microsoft 365 Copilot and partnering with CommonAI, the bank aims to achieve long-term efficiency and growth in the financial services sector. https://cryptobriefing.com/barclays-ai-investment-long-term-returns/

Crypto Briefing

Barclays invests hundreds of millions in AI systems, expects long-term returns

Barclays is investing hundreds of millions in AI, rolling out Microsoft Copilot to 100,000 employees and raising its profitability target above

0

1

0

ekiledjian @edwardk@infosec.exchange · Jul 28, 2026

Chinese state-linked hackers utilize the RedRelay multi-hop network to mask global cyber operations, with the company Guangdong Chanming serving as a key provider of this covert infrastructure. This network leverages tunneling tools and compromised devices to facilitate espionage campaigns against international government, defense, and telecommunications targets. https://gbhackers.com/redrelay-multi-hop-network/

0

1

0

ekiledjian @edwardk@infosec.exchange · Jul 28, 2026

Attackers compromised GitHub Actions to inject Miasma malware into legitimate AsyncAPI npm packages, putting development environments at risk. This supply chain attack bypassed standard security measures by leveraging trusted publishing workflows to distribute malicious code. https://cybersecuritynews.com/ai-assisted-linux-kernel-zero-day/

0

1

0

ekiledjian @edwardk@infosec.exchange · Jul 28, 2026

Singapore's central bank warns that AI investment uncertainty could trigger a global economic slowdown due to the heavy reliance of US GDP growth on capital expenditures in this sector. This dependency creates financial fragility, as potential recalibrations in data-center spending and rising infrastructure costs threaten to concentrate gains while widening income inequality. https://cryptobriefing.com/mas-warns-ai-investment-uncertainty-global-growth/

Crypto Briefing

Singapore's central bank warns AI investment uncertainty could derail global growth

Singapore's MAS warns AI investment now drives half of US GDP growth, creating fragility that could trigger sharp corrections across equities and

1

0

1

0

ekiledjian @edwardk@infosec.exchange · Jul 28, 2026

Gartner has increased its global IT spending projection to $6.37 trillion for 2026, primarily driven by a massive surge in AI infrastructure investment. While this expansion fuels growth in cloud services and data centers, it simultaneously creates supply constraints and rising costs for traditional hardware and devices.
https://www.itpro.com/infrastructure/gartner-just-revised-its-global-it-spending-projection-for-2026-heres-why

0

ekiledjian @edwardk@infosec.exchange · Jul 28, 2026

Attackers are using Microsoft Teams and Quick Assist to impersonate IT support and trick employees into installing the GoGRPC backdoor. This vishing campaign allows malicious actors to gain persistent access, steal data, and potentially facilitate ransomware attacks. https://hackread.com/fake-it-calls-microsoft-teams-gogrpc-backdoor/

Hackread - Cybersecurity News, Data Breaches, AI and More

Fake IT Calls on Microsoft Teams Lead to GoGRPC Backdoor Infection

Follow us on all major social media platforms @Hackread

0

ekiledjian @edwardk@infosec.exchange · Jul 28, 2026

A critical vulnerability (CVE-2026-63077) in TeamCity On-Premises allows unauthenticated attackers to execute arbitrary system commands, posing a major risk to CI/CD infrastructure. JetBrains has released patches in versions 2025.11.7 and 2026.1.3, urging administrators to update immediately to prevent potential security compromises. https://gbhackers.com/critical-teamcity-flaw/

0

ekiledjian @edwardk@infosec.exchange · Jul 28, 2026

Microsoft launched Project Perception, a new security agent stack that utilizes a multi-model approach for continuous, automated threat surveillance and response. This platform integrates the new MAI-Cyber-1-Flash model, which offers high-performance cybersecurity capabilities at half the cost of competing models.
https://www.bankinfosecurity.com/microsoft-unveils-ai-security-stack-low-cost-cyber-model-a-32343

0

ekiledjian @edwardk@infosec.exchange · Jul 27, 2026

The official Click To Pray app, endorsed by the Pope, has left the personal information of over 700,000 users exposed due to an IDOR vulnerability. This security flaw allows unauthorized access to sensitive account data, creating significant risks for potential phishing attacks. https://www.theregister.com/security/2026/07/24/popes-official-prayer-app-commits-cardinal-sin-leaks-700k-users-info/5278603

www.theregister.com

Are we human?

1

0

1

0

ekiledjian @edwardk@infosec.exchange · Jul 27, 2026

iOS update

0

ekiledjian @edwardk@infosec.exchange · Jul 27, 2026

A hacking group known as TripleX has reportedly leaked 1TB of Bank of Baroda customer data and internal documents on the dark web. While the bank has yet to officially confirm the cyberattack, it has launched an internal probe to verify the claims regarding the exposed Aadhaar details and sensitive banking information. https://thefederal.com/category/news/cyberattack-bank-of-baroda-cybersecurity-dark-web-data-251562

thefederal.com

Bank of Baroda hit by cyberattack; hacker leaks 1TB of data on dark web

Data includes customer names, Aadhaar details and sensitive banking info across Bank of Baroda branches; bank is yet to confirm the data breach

0

ekiledjian @edwardk@infosec.exchange · Jul 27, 2026

Contact details of celebrities including Angelina Jolie and Robert de Niro were exposed in a data breach involving Tribeca Film Festival databases. The breach reportedly affected around 666,000 records from 2019 to 2026. https://www.telegraph.co.uk/news/2026/07/26/angelina-jolie-among-celebrities-contact-details-leaked/

0

ekiledjian @edwardk@infosec.exchange · Jul 27, 2026

Kimi K3’s open weights signal a broader shift in the AI market: https://kiledjian.com/2026/07/27/kimi-ks-open-weights-signal.html

Kimi K3’s open-weight release signals a broader shift in enterprise AI, giving organizations more choice, control and flexibility while transferring greater responsibility for infrastructure, security, governance and operational risk.

0

ekiledjian @edwardk@infosec.exchange · Jul 27, 2026

The Gentlemen RaaS claimed ~500 victims by June 2026 (2nd only to Qilin), evolving from a Qilin affiliate. OPSEC failures exposed the leader’s Russian IP, travel, and identity as Alexander Yapaev. https://threatintel.cc/2026/07/27/the-gentlemen-raas-origins-opsec.html

0

ekiledjian @edwardk@infosec.exchange · Jul 27, 2026

Tycoon2FA phishing dropped 92% after Microsoft’s March disruption; overall email phishing hit 7.6B threats in Q2. Teams vishing surged ~10× while credential phishing stayed dominant. https://threatintel.cc/2026/07/27/email-threat-landscape-q-trends.html

0

ekiledjian @edwardk@infosec.exchange · Jul 27, 2026

GitHub added a 3-day Dependabot cooldown; PyPI now blocks new files on releases older than 14 days. Measures limit impact of malicious packages after recent high-profile supply-chain attacks. https://threatintel.cc/2026/07/27/github-pypi-add-timebased-defenses.html

0

ekiledjian @edwardk@infosec.exchange · Jul 27, 2026

Four supply-chain attacks hit npm/PyPI (Jun–Jul 2026): Miasma/Hades worm, IronWorm, fake payment SDKs & AsyncAPI CI token theft. All stole credentials; AsyncAPI packages (2.25M+ weekly downloads) carried valid Sigstore signatures. https://threatintel.cc/2026/07/27/the-streak-continues-four-more.html

0

ekiledjian @edwardk@infosec.exchange · Jul 25, 2026

Security researchers have discovered that malicious custom maps for the indie game Meccha Chameleon are using Steam Workshop to drop malware onto players' PCs. To stay safe, users should avoid downloading suspicious maps and run an antivirus scan if they have recently installed custom content.
https://www.windowscentral.com/gaming/pc-gaming/meccha-chameleon-steam-workshop-malware

0

ekiledjian @edwardk@infosec.exchange · Jul 25, 2026

The Canadian Federal Court has issued a two-year site-blocking order requiring major internet service providers to restrict access to 13 identified piracy streaming platforms. To combat the rapid creation of new pirate domains, the ruling establishes a simplified procedure that allows rights holders to update the blocklist more efficiently. https://www.iphoneincanada.ca/2026/07/23/rogers-quebecor-and-hollywood-studios-win-piracy-site-blocking-order/

0

ekiledjian @edwardk@infosec.exchange · Jul 22, 2026

Origin Energy is investigating a data breach following claims that a hacker accessed the personal information of up to 2 million Australian customers. The energy retailer has notified relevant authorities and is working to verify the claims while advising users to stay alert for potential phishing scams. https://www.smh.com.au/business/consumer-affairs/nation-s-largest-power-company-probes-potential-data-leak-20260722-p60hk9.html

0

ekiledjian @edwardk@infosec.exchange · Jul 20, 2026

The Conference Board's Leading Economic Index declined by 0.2% in June 2026 as consumer weakness and a drop in building permits offset gains in financial components. Despite this slip, the broader economic trend shows improvement compared to last year, bolstered by a revised upward GDP growth forecast of 1.9%. https://cryptobriefing.com/us-leading-economic-indicators-decline-june/

0

ekiledjian @edwardk@infosec.exchange · Jul 20, 2026

ASML is offering a €20,000 retention grant to its approximately 45,000 employees in a strategic effort to maintain workforce stability through 2030 amidst the global AI chip war. This share-based incentive requires staff to remain with the company until 2030 to secure the payout as competition for semiconductor talent intensifies. https://cryptobriefing.com/asml-retention-grant-semiconductor-talent/

0

ekiledjian @edwardk@infosec.exchange · Jul 20, 2026

The most dangerous scam no longer looks fake, it looks familiar. New threat research shows attackers are weaponizing real bookings, trusted platforms, linked devices and AI agents. The key question: what authority are you being asked to grant? https://kiledjian.com/2026/07/20/trust-is-becoming-the-attack.html

0

ekiledjian @edwardk@infosec.exchange · Jul 20, 2026

Trust is becoming the attack surface: https://kiledjian.com/2026/07/20/trust-is-becoming-the-attack.html The most dangerous scam no longer looks fake, it looks familiar. New threat research shows attackers are weaponizing real bookings, trusted platforms, linked devices and AI agents. The key question: what authority are you being asked to grant?

0

ekiledjian @edwardk@infosec.exchange · Jul 20, 2026

Google is reportedly partnering with Samsung to manufacture the interconnect module for its next-generation Icefish TPU using 2nm process technology. This split-manufacturing approach aims to reduce reliance on third-party hardware by leveraging both TSMC and Samsung to scale AI infrastructure. https://cryptobriefing.com/google-samsung-ai-chip-icefish/

0

ekiledjian @edwardk@infosec.exchange · Jul 20, 2026

A critical vulnerability chain known as wp2shell allows unauthenticated attackers to exploit a pre-authentication SQL injection in WordPress to achieve remote code execution. Security researcher Adam Kues discovered this flaw using GPT-5.6 Sol Ultra by identifying index desynchronization in the REST API Batch endpoint. https://gbhackers.com/gpt-5-6-sol-ultra-discovers-wordpress-pre-auth-sql-injection/

0

ekiledjian @edwardk@infosec.exchange · Jul 20, 2026

Italy's data protection authority has fined WINDTRE €1.7 million due to security flaws and data breaches that exposed the personal and payment information of over 365,000 customers. The regulator determined that inadequate digital certificate management and insufficient API protection enabled attackers to successfully execute large-scale data exfiltration. https://www.helpnetsecurity.com/2026/07/20/italy-windtre-1-7-million-fine/

0

ekiledjian @edwardk@infosec.exchange · Jul 20, 2026

TELEPUZ is a modular malware family that utilizes ClickFix social engineering and advanced evasion techniques to compromise systems and establish resilient command-and-control communication. Through its WebInjector module, the threat actor can intercept browser sessions to steal cookies, execute malicious JavaScript, and perform financial fraud by replacing IBAN details. https://gbhackers.com/telepuz-web-injector/

0

ekiledjian @edwardk@infosec.exchange · Jul 20, 2026

The Ernst & Young data breach resulted from unauthorized access to a third-party IT support system, exposing sensitive tax documents and Social Security numbers. Attackers compromised external infrastructure between March and April 2026, leading to ongoing legal investigations and regulatory notifications. https://cryptobriefing.com/ernst-young-data-breach-tax-clients/

0

ekiledjian

Posts

18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers

Russian hackers hijack hotel Wi-Fi networks to spy on travelers, Microsoft says

Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare

Microsoft Word Copilot Flaw Lets Hidden Prompts Spread Self-Propagating AI Worms Across Documents

OpenAI agent used exposed credentials at 4 services in Hugging Face breach

Department for Education suffers data breach | Computer Weekly

Cisco warns of FMC static credential flaw exploited in zero-day attacks

Cyberattack hits Angola’s largest telco hours before landmark stock debut

Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit | Proofpoint US

IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains

Barclays invests hundreds of millions in AI systems, expects long-term returns

Singapore's central bank warns AI investment uncertainty could derail global growth

Fake IT Calls on Microsoft Teams Lead to GoGRPC Backdoor Infection

Are we human?

Bank of Baroda hit by cyberattack; hacker leaks 1TB of data on dark web

Remote instance

Media