A fresh supply chain scare hit software teams after attackers slipped malware into trusted open source libraries. On July 28, 2026, malicious beta builds of two Joyfill packages appeared on the npm registry. The libraries, @joyfill/components and @joyfill/layouts, are used for forms and layout work in many web apps. Anyone who imported those beta builds […]
The post Hijacked Joyfill npm Packages Deploy Worm-Like RAT and Steal Developer Credentials appeared first on Cyber Security News.
Las Vegas, USA, July 29th, 2026, CyberNewswire Catches rogue AI agents – and stops them in live production before they cause damage Sweet Security, the proactive runtime enforcement company for cloud and AI, today announced its further expansion into AI security with Agentic AI Blocking. Sweet now blocks rogue agent behavior in real time – […]
The post Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Las Vegas, USA, July 29th, 2026, CyberNewswire Catches rogue AI agents – and stops them in live production before they cause damage Sweet Security, the proactive runtime enforcement company for cloud and AI, today announced its further expansion into AI security with Agentic AI Blocking. Sweet now blocks rogue agent behavior in real time – […]
The post Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities appeared first on Cyber Security News.
A new Mirai-derived IoT botnet can force an infected Linux device to reboot once its main process is killed, giving its persistence mechanisms another opportunity to relaunch it, Nozomi Networks Labs has found. The malware, dubbed Tengu, was discovered by a machine-learning system the company uses to identify malware families that do not match known signatures. Researchers first observed the dropper reaching their honeypots through Telnet credential brute-force attacks. Tengu isn’t just another Mirai variant … More →
The post Tengu botnet reboots Linux devices to survive removal appeared first on Help Net Security.
A critical vulnerability in the open-source AI orchestration platform Ruflo has been disclosed, allowing unauthenticated attackers to achieve full remote code execution (RCE) with a single HTTP request. This vulnerability, tracked as CVE-2026-59726 and referred to as “RufRoot,” has been assigned a maximum CVSS score of 10.0 due to its ease of exploitation and potential […]
The post Critical Ruflo MCP Bridge Flaw Allows Full AI Agent Platform Takeover appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.