PureLogs Stealer now hides behind Blogger pages and a fake PDF JavaScript file.

Experts say VEIL#DROP uses PowerShell, dynamic Blogspot URLs, fileless .NET loading, and Microsoft-signed LOLBins to evade detection.

Two Cursor vulnerabilities could let hidden prompt-injection instructions escape the editor’s terminal sandbox and run commands on a developer’s machine.

Tracked as CVE-2026-50548 and CVE-2026-50549, they affect versions before 3.0.

Attackers are trying to exploit CVE-2026-8037 in Progress Kemp LoadMaster.

The CVSS 9.6 flaw enables unauthenticated OS command injection and arbitrary code execution on vulnerable appliances.

Ousaban hides a ZIP payload inside an image after a fake “corrupted” PDF screens victims in Spain and Portugal.

The Windows banking trojan watches 24+ banks and can log keys, grab screenshots, tamper with the clipboard, and enable remote control.

Adobe patched 9 flaws in ColdFusion and Campaign Classic, 7 rated CVSS 10.0.

ColdFusion issues enable RCE, privilege escalation, file read, and bypass.

Campaign Classic CVE-2026-48286 impacts on-prem ACC v7 only.

Adobe patches 7 critical vulnerabilities, including multiple RCE flaws in ColdFusion. No active exploitation yet—but risk level is high. Immediate updates recommended.

Cyber defense alone is no longer enough. Experts emphasize integrating offensive capabilities, AI-driven monitoring, and proactive response for modern cyber warfare.

Nvidia and Palantir unveil a secure AI platform built on open Nemotron models, designed for U.S. government and critical infrastructure use. Focus: full data control, isolated deployment, and high-stakes environments.

The EU adopts “Omnibus 7” reforms, delaying some AI regulations while simplifying compliance and banning non-consensual AI-generated explicit content.

Scattered Spider investigation expands: 19-year-old Peter Stokes extradited from Finland to the U.S., accused of operating as “Bouquet.” Prosecutors link him to at least four intrusions, including one involving an $8M crypto ransom demand.

CISA added CVE-2026-45659 to KEV following active exploitation.

The SharePoint Server RCE was patched in May 2026.

Fake GitHub PoC repos are being used to infect vulnerability researchers with ChocoPoC RAT.

The PoC may look clean. The malware hides in Python dependencies like frint and skytext, then steals saved passwords, cookies, browser data, and files.

CVE-2025-3248 exploited to steal secrets, move laterally, hijack Nacos, encrypt 1,342 configuration items, and drop database schemas.

New leaks reveal U.S. officials continued using Signal for sensitive communications despite prior security controversies, reigniting concerns over secure messaging practices.

Startup sues Palo Alto Networks' Koi Security, saying an AI-hallucinated report falsely linked it to Chinese espionage.

Dev says Google warned him about account hijack – then charged him $11,000 anyway.

Google’s Continued Disruption of Malicious Residential Proxy Networks.

Europe Confirms Record €4.1B Penalty Against Google for Android Practices.

Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials.

Claude Helped a Hacker Find a Way to Issue Tickets to Almost Every US Music Festival.

Microsoft fixes bug that removed Copilot button in Outlook (it was an improvement not a bug :/).