July 30, 2026 A new vulnerability in Microsoft Copilot for Word shows how hidden prompts inside documents can transform routine editing into a self‑propagating “AI worm” that tampers with business …
Critical Rails Flaw Lets Attackers Read Arbitrary Files and Execute Malicious Code Remotely
A severe security vulnerability in Ruby on Rails Active Storage tracked as CVE-2026-66066 can let unauthenticated attackers read sensitive files from a server and potentially escalate to remote code execution. …
AI-Generated Phishing No Longer Needs Malware: It Can Steal Your Session Inside the Browser
AI-generated phishing campaigns are rapidly evolving beyond traditional malware delivery, shifting the battleground directly into the web browser where attackers can hijack active sessions, bypass multi-factor authentication (MFA), and evade …
NVIDIA BlueField Vulnerability Enables Code Execution Attacks
July 29, 2026 NVIDIA has disclosed a serious vulnerability affecting its BlueField DPUs and ConnectX networking platforms that could allow attackers to execute code on affected systems if successfully exploited. …
Critical Ruflo MCP Bridge Flaw Lets Attackers Execute Commands and Hijack AI Agents
July 29, 2026 A critical security flaw in the open-source AI orchestration platform Ruflo has been disclosed, allowing unauthenticated attackers to execute arbitrary commands and fully compromise AI agent environments. …
Russian Intelligence Hackers Phish Signal Backup Keys to Hijack Accounts and Messages
July 29, 2026 Russian intelligence-linked hackers are trying to seize Signal accounts by posing as support staff and asking targets for backup recovery keys. The campaign targets people with access …
Hijacked Joyfill npm Packages Deploy Worm-Like RAT and Steal Developer Credentials
A fresh supply chain scare hit software teams after attackers slipped malware into trusted open source libraries. On July 28, 2026, malicious beta builds of two Joyfill packages appeared on …
Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities
July 29, 2026 Las Vegas, USA, July 29th, 2026, CyberNewswire Catches rogue AI agents – and stops them in live production before they cause damage Sweet Security, the proactive runtime …
Hackers Can Hijack Tor Browser Users Through a Single Malicious Web Page
July 29, 2026 Hackers Can Compromise Your Tor Browser if You Visit a Single Malicious Page A single malicious webpage is enough to compromise Tor Browser users running an unpatched …
Revolut Alleged Data Breach – Hackers Claiming to Access Over 75 Million Users’ Records
Revolut is currently under scrutiny after hackers claimed to be selling a database containing records of more than 75 million users. However, the company asserts that it has found no …