Aggregator

Las Vegas, USA, July 29th, 2026, CyberNewswire Catches rogue AI agents – and stops them in live production before they cause damage Sweet Security, the proactive runtime enforcement company for cloud and AI, today announced its further expansion into AI security with Agentic AI Blocking. Sweet now blocks rogue agent behavior in real time – […]

The post Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Las Vegas, USA, July 29th, 2026, CyberNewswire Catches rogue AI agents – and stops them in live production before they cause damage Sweet Security, the proactive runtime enforcement company for cloud and AI, today announced its further expansion into AI security with Agentic AI Blocking. Sweet now blocks rogue agent behavior in real time – […]

The post Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities appeared first on Cyber Security News.

За красивыми обещаниями скрывалась неприглядная правда.

AI agents are designed to improvise as they complete tasks, making broad permissions a growing security risk. Token Security explains why identity, intent-based access controls, and least privilege are becoming the foundation for securing agentic AI. [...]

​​Microsoft has released the KB5101684 preview cumulative update for Windows 11 24H2 and 25H2, which 42 bug fixes and additional feature improvements for the operating system. [...]

A new Mirai-derived IoT botnet can force an infected Linux device to reboot once its main process is killed, giving its persistence mechanisms another opportunity to relaunch it, Nozomi Networks Labs has found. The malware, dubbed Tengu, was discovered by a machine-learning system the company uses to identify malware families that do not match known signatures. Researchers first observed the dropper reaching their honeypots through Telnet credential brute-force attacks. Tengu isn’t just another Mirai variant … More →

The post Tengu botnet reboots Linux devices to survive removal appeared first on Help Net Security.

A critical vulnerability in the open-source AI orchestration platform Ruflo has been disclosed, allowing unauthenticated attackers to achieve full remote code execution (RCE) with a single HTTP request. This vulnerability, tracked as CVE-2026-59726 and referred to as “RufRoot,” has been assigned a maximum CVSS score of 10.0 due to its ease of exploitation and potential […]

The post Critical Ruflo MCP Bridge Flaw Allows Full AI Agent Platform Takeover appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27, triggering a statewide cybersecurity response. Braham, Plymouth, South St. Paul and Maple Plain have publicly described a plant outage, communications failures or affected automated controls. Braham's water plant went offline, and the city asked residents to minimize

Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves creating lookalike websites of major Russian companies with an aim to siphon funds from international firms for more than nine years. According to Russian cybersecurity vendor F6, the threat actors have set up clone websites of Russian companies across fertilizer manufacturers, petrochemical companies

ShinyHunters claimed the Ernst & Young data breach, threatening to leak stolen tax records unless the firm contacts the group by July 31. The ShinyHunters cybercrime group has taken responsibility for the recently disclosed data breach involving professional services firm Ernst & Young (EY), adding the company to its Tor-based leak site and threatening to […]

A single malicious webpage is enough to compromise Tor Browser users running an unpatched build, following newly disclosed research into CVE-2026-10702. The flaw, a high-severity Firefox JavaScript engine bug, was successfully exploited against Tor Browser by researchers at Nebula Security. Mozilla resolved the vulnerability in Firefox 151.0.3 on June 2, 2026, and the Tor Project […]

The post Hackers Can Hijack Tor Browser Users Through a Single Malicious Web Page appeared first on Cyber Security News.

Broadcom has released important security updates addressing critical vulnerabilities in VMware that could allow remote attackers to bypass vCenter authentication or execute arbitrary code. These vulnerabilities, outlined in advisory VMSA-2026-0006, affect a range of products including vCenter, ESX, Workstation, Fusion, VMware Cloud Foundation, vSphere Foundation, and selected Telco Cloud products. The advisory, published on July […]

The post Critical VMware vCenter Flaws Let Remote Attackers Bypass Authentication and Execute Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Индустрия IoT десятилетиями делает устройства для чужого бизнеса на DDoS.

Revolut is currently under scrutiny after hackers claimed to be selling a database containing records of more than 75 million users. However, the company asserts that it has found no evidence of a new breach at this time. A threat actor has advertised what they describe as a Revolut customer database on a cybercrime forum, […]

The post Revolut Alleged Data Breach – Hackers Claiming to Access Over 75 Million Users’ Records appeared first on Cyber Security News.

Broadcom patched a critical VMware ESXi VM escape flaw (CVE-2026-47876) that could let attackers run code on the host from a compromised virtual machine. Broadcom has released patches to address five vulnerabilities affecting VMware ESXi, vCenter, Workstation, and Fusion, including three rated critical. The most severe, tracked as CVE-2026-47876 (CVSSv3 base score of 9.3), is a […]

Stairwell, the AI SOC that stops breaches no one else can, today announced the availability of Backstory, an agentic investigation platform that traces related malware variants, identifies affected systems, and maps the full blast radius of an incident in seconds, so enterprises know what happened, where it spread, and what needs to be contained before precious time is lost. AI-generated malware is making it easier for attackers to create new variants, and legacy alert-based tools … More →

The post Stairwell launches Backstory, pioneering agentic investigation for malware blast radius appeared first on Help Net Security.

Las Vegas, USA, 29th July 2026, CyberNewswire

Research from Aryon reveals that each year, 3,731,699 short-lived cloud resources containing highly sensitive information are publicly exposed. This impacts any organization using AWS services that support public sharing. These exposures often last only minutes or hours, too briefly for periodically scanning CSPM and CNAPP platforms to detect, yet long enough for attackers to discover and copy them.  The findings expose a fundamental limitation of the reactive CSPM/CNAPP model: some cloud misconfigurations can be exploited … More →

The post ShutterGap: Aryon Security finds 3.7M AWS cloud resources exposed beyond CSPM/CNAPP visibility appeared first on Help Net Security.