July 29, 2026 Bank of Baroda has confirmed a cybersecurity incident in which attackers gained unauthorized access to an employee’s email account, exposing internal communications and potentially sensitive information, raising …
Malicious npm Packages Deploy Cross-Platform RAT Targeting Alibaba Developers
July 29, 2026 A cluster of malicious npm packages has been used to deliver a cross-platform remote access trojan against developers who use Alibaba-related tools. The campaign hides its harmful …
Hackers Are Hiding Commands in Emails to Trick the AI Systems Protecting You
July 29, 2026 Attackers are beginning to hide malicious instructions inside ordinary emails, documents, calendar invites, and online advertisements. The goal is not always to fool a person. Instead, the …
OpenAI Open-Sources Codex Security CLI for Finding, Validating, and Fixing Security Vulnerabilities
July 29, 2026 OpenAI has open-sourced Codex Security, a command-line tool and TypeScript SDK designed to help developers find, validate, and fix security vulnerabilities in their codebases. The release marks …
First-Ever Fully Autonomous AI Cyberattack Exploits 0-Day Flaws to Infiltrate Hugging Face
July 29, 2026 Between July 9 and July 13, 2026, security researchers documented what is being called the first fully autonomous AI agent cyberattack to chain zero-day flaws across multiple …
Claude Mythos Preview Discovers Cryptographic Weaknesses That Human Experts Missed for Years
July 28, 2026 Anthropic researchers using Claude Mythos Preview have uncovered mathematical flaws in major cryptographic algorithms that human experts failed to spot for years. The AI found improved attacks …
JetBrains Urging Customers to Patch Critical TeamCity Flaw that Enables OS Command Execution
July 28, 2026 JetBrains has urgently released security updates for a critical vulnerability in TeamCity On-Premises that could allow remote attackers to bypass authentication and execute arbitrary operating system commands. …
Top 10 Phishing Kits Used by Hackers to Launch Cyberattacks (July 20-26, 2026)
Top 10 Phishing Kits Used by Hackers to Launch Cyberattacks (July 20-26, 2026) Global phishing-as-a-service (PhaaS) activity surged to 7,295 tracked uploads during the week of July 20-26, 2026, driven …
Chrome Extension Monitors AI Conversations Across ChatGPT, Claude, Gemini, and Other Platforms
July 28, 2026 A Chrome extension with roughly 100,000 installs is quietly harvesting every prompt and AI response typed across nine major artificial intelligence platforms. Despite its official listing and …
Nginx Buffer Overflow Vulnerability Allows Attackers to Execute Arbitrary Code – PoC Released
July 28, 2026 A high-severity heap buffer overflow in NGINX Plus and NGINX Open Source can let unauthenticated attackers crash worker processes and, under certain conditions, run arbitrary code. Tracked …