Forwarded from The Hacker News
🚨 Compliance ≠ Trust.
Join Vanta and Matt Johansen, Founder & Security Researcher at Vulnerable U, on July 23 to unpack the new Trust Maturity Report and explore what real security trust looks like—at every stage of growth.
Don’t miss the session: Security, AI, and Trust: Reviewing Vanta’s Trust Maturity Report → https://thn.news/trust-ai-security-webinar
Join Vanta and Matt Johansen, Founder & Security Researcher at Vulnerable U, on July 23 to unpack the new Trust Maturity Report and explore what real security trust looks like—at every stage of growth.
Don’t miss the session: Security, AI, and Trust: Reviewing Vanta’s Trust Maturity Report → https://thn.news/trust-ai-security-webinar
Forwarded from The Hacker News
🚨 85% of work now happens in the browser—yet most orgs still can’t see what’s pasted into ChatGPT.
A new guide exposes how GenAI, BYOD, and rogue extensions turned the browser into the #1 blind spot in enterprise security.
Get the fix → https://thehackernews.com/2025/07/a-new-maturity-model-for-browser.html
A new guide exposes how GenAI, BYOD, and rogue extensions turned the browser into the #1 blind spot in enterprise security.
Get the fix → https://thehackernews.com/2025/07/a-new-maturity-model-for-browser.html
Forwarded from The Hacker News
🚨 Verified? Think again.
Malicious extensions can pose as trusted in VS Code, IntelliJ, Visual Studio & #Cursor—bypassing checks and running OS commands.
The “verified” badge isn’t protection. Even Microsoft’s filters missed it.
Full details → https://thehackernews.com/2025/07/new-flaw-in-ides-like-visual-studio.html
Malicious extensions can pose as trusted in VS Code, IntelliJ, Visual Studio & #Cursor—bypassing checks and running OS commands.
The “verified” badge isn’t protection. Even Microsoft’s filters missed it.
Full details → https://thehackernews.com/2025/07/new-flaw-in-ides-like-visual-studio.html
Forwarded from The Hacker News
🚨 Russia-linked hackers are now blurring the line between cybercrime and espionage.
TA829 & UNK_GreenSec are using identical tactics—fake job lures, IPFS malware, REM Proxies—to drop ransomware and spy tools.
Read details → https://thehackernews.com/2025/07/ta829-and-unkgreensec-share-tactics-and.html
TA829 & UNK_GreenSec are using identical tactics—fake job lures, IPFS malware, REM Proxies—to drop ransomware and spy tools.
Read details → https://thehackernews.com/2025/07/ta829-and-unkgreensec-share-tactics-and.html
Forwarded from The Hacker News
🚨 Critical RCE flaw hits Anthropic’s AI dev tool.
Just visiting a malicious site could let hackers run code on your machine.
It targets localhost—using a 19-year-old browser bug.
MCP Inspector < v0.14.1 is at risk.
Patch now → https://thehackernews.com/2025/07/critical-vulnerability-in-anthropics.html
Just visiting a malicious site could let hackers run code on your machine.
It targets localhost—using a 19-year-old browser bug.
MCP Inspector < v0.14.1 is at risk.
Patch now → https://thehackernews.com/2025/07/critical-vulnerability-in-anthropics.html
Forwarded from The Hacker News
🚨 Hackers are now using AI tools like Vercel's v0 to spin up fake login pages—just from text prompts.
They’re cloning trusted brands, hosting on legit platforms, and bypassing old phishing methods.
The AI phishing era is here.
Read details here → https://thehackernews.com/2025/07/vercels-v0-ai-tool-weaponized-by.html
They’re cloning trusted brands, hosting on legit platforms, and bypassing old phishing methods.
The AI phishing era is here.
Read details here → https://thehackernews.com/2025/07/vercels-v0-ai-tool-weaponized-by.html
Forwarded from The Hacker News
🚨 U.S. sanctions Russian hosting firm Aeza Group for fueling ransomware, data theft & drug trade.
Its CEO ran dark web drug markets. Its servers powered RomCom, RedLine, and Doppelganger ops.
This wasn't just hosting—it was cybercrime infrastructure.
READ → https://thehackernews.com/2025/07/us-sanctions-russian-bulletproof.html
Its CEO ran dark web drug markets. Its servers powered RomCom, RedLine, and Doppelganger ops.
This wasn't just hosting—it was cybercrime infrastructure.
READ → https://thehackernews.com/2025/07/us-sanctions-russian-bulletproof.html
Forwarded from The Hacker News
🚨 Hackers now talk you into getting hacked.
PDF phishing emails impersonate Microsoft, PayPal, DocuSign—urging you to call fake support lines.
On the call, they steal your info or install malware.
FBI, Cisco, and Varonis warn: it’s rising fast.
Read how it works → https://thehackernews.com/2025/07/hackers-using-pdfs-to-impersonate.html
PDF phishing emails impersonate Microsoft, PayPal, DocuSign—urging you to call fake support lines.
On the call, they steal your info or install malware.
FBI, Cisco, and Varonis warn: it’s rising fast.
Read how it works → https://thehackernews.com/2025/07/hackers-using-pdfs-to-impersonate.html
Forwarded from The Hacker News
🚨 Nearly 80% of cyberattacks now look like normal user behavior.
EDR alone can’t see through it—and attackers know it.
The fix? Elite SOCs are layering in Network Detection & Response (NDR) to catch what endpoints miss.
Here’s how it works ↓ https://thehackernews.com/2025/07/that-network-traffic-looks-legit-but-it.html
EDR alone can’t see through it—and attackers know it.
The fix? Elite SOCs are layering in Network Detection & Response (NDR) to catch what endpoints miss.
Here’s how it works ↓ https://thehackernews.com/2025/07/that-network-traffic-looks-legit-but-it.html
No deleted account found from
60 scanned users from this group 🚫👻Forwarded from Hacker News
Clownacy's Corner
The Original LZEXE (A.K.A. Kosinski) Compressor Source Code Has Been Released
Last year, I discovered that the Kosinski compression format is actually LZEXE, which was used for compressing DOS executables back in the 90s and the late 80s. Its developer catalogues three versi…
Forwarded from Hacker News
Signal Community
Public Signal Backups Testing
TL;DR You can test the new Signal Backups feature on Android on our staging servers. Grab the self-updating apk here! Hello, everyone! Many of you are aware that we’ve been working on a new end-to-end encrypted backup system for quite a while. Well, today…
Forwarded from Hacker News
WIRED
Here Is Everyone Mark Zuckerberg Has Hired So Far for Meta’s ‘Superintelligence’ Team
After a poaching frenzy that’s brought in talent from rival firms like OpenAI, Anthropic, and Google, Zuckerberg announced a team of nearly two dozen researchers in an internal memo.