July 13, 2026 The Debian Project has released Debian 13.6, the latest maintenance update for Debian 13 “trixie.” The point release focuses on security corrections and fixes for serious software …
Hackers Using Vibe-Coded Generated PowerShell Script to Enumerate Active Directory Accounts
July 13, 2026 Threat actors have started weaponizing AI-generated PowerShell code to map Active Directory (AD) environments, marking a notable shift from off-the-shelf hacking tools to bespoke, “vibe-coded” malware. Security …
CISA Warns of Joomla Sites Running iCagenda or Balbooa Exploited in Attacks
July 13, 2026 The Cybersecurity and Infrastructure Security Agency (CISA) has added two high-risk Joomla extension flaws to its Known Exploited Vulnerabilities (KEV) Catalog. Both vulnerabilities allow unrestricted file uploads, …
iPhone and MacBook Forensics Investigation Exposes £113,000 Property Fraud Operation
July 13, 2026 A digital forensics investigation from Belkasoft into an iPhone and a damaged MacBook has helped secure the conviction of Jason Cunningham, a rent-to-rent property operator who defrauded …
Critical WordPress Plugin Vulnerability Allows Attackers to Gain Full Control Over Website
July 13, 2026 A critical security vulnerability has been discovered in the widely used WordPress OAuth Single Sign–On (SSO (OAuth Client) plugin developed by miniOrange, exposing millions of WordPress websites …
VEXAIoT Multi-Agent System Automates IoT Reconnaissance and Exploit Execution
July 13, 2026 Security researchers have introduced VEXAIoT, an AI-powered multi-agent framework designed to automate vulnerability discovery and exploit execution against Internet of Things environments. The research shows how large …
Armored Likho APT Uses AI-Generated Loaders to Deploy BusySnake Stealer Against Government Targets
July 13, 2026 Armored Likho has launched a phishing campaign that uses AI-generated loaders to deploy the newly identified BusySnake Stealer. The operation has targeted government agencies and electrical power …
Hackers Compromised jscrambler With 15,800+ Weekly Downloads to Attack Developers
July 13, 2026 A supply chain attack on the jscrambler npm package, a JavaScript code-protection tool with over 15,800 weekly downloads, involved malicious versions that silently deployed native malware on …
Anthropic Extends Claude Fable 5 Access From July 12 to July 19
July 13, 2026 Anthropic has extended promotional access to Claude Fable 5 until July 19, 2026, giving eligible paid subscribers more time to use the company’s newest AI model at …
Hackers Weaponize Real Academic Event Materials to Infect Researchers With RokRAT
July 13, 2026 A targeted phishing campaign is using genuine academic event details to trick researchers into opening malware. The operation delivers a RokRAT variant through a fake document package …