Top 10 Phishing Kits Used by Hackers to Launch Cyberattacks (July 20-26, 2026) Global phishing-as-a-service (PhaaS) activity surged to 7,295 tracked uploads during the week of July 20-26, 2026, driven …
Chrome Extension Monitors AI Conversations Across ChatGPT, Claude, Gemini, and Other Platforms
July 28, 2026 A Chrome extension with roughly 100,000 installs is quietly harvesting every prompt and AI response typed across nine major artificial intelligence platforms. Despite its official listing and …
Nginx Buffer Overflow Vulnerability Allows Attackers to Execute Arbitrary Code – PoC Released
July 28, 2026 A high-severity heap buffer overflow in NGINX Plus and NGINX Open Source can let unauthenticated attackers crash worker processes and, under certain conditions, run arbitrary code. Tracked …
Aembit Joins Snowflake to Tackle AI’s Next Security Frontier: Trusted Agent Interoperability
July 28, 2026 Silver Spring, MD, USA, July 28th, 2026, CyberNewswire To reduce identity risk when third-party AI agents access business systems, Aembit is launching a new integration with Snowflake …
Apple iOS 26.6 Fixes Flaws Enabling Kernel Code Execution, Root Access and Sandbox Escape
July 28, 2026 Apple has released iOS 26.6 and iPadOS 26.6 to address a significant number of security vulnerabilities, including flaws that could allow malicious applications to execute code with …
Fake Claude Code Install Guide Uses Google Ads to Deliver MacSync Infostealer
July 28, 2026 Fake Google Ads are being used to push a convincing Claude Code installation guide that delivers the MacSync infostealer to macOS users. The campaign turns an ordinary …
Origin Confirms Data Breach – Hackers Accessed 900,000 Customers’ Data
July 28, 2026 Origin Energy, an Australian energy provider, has confirmed that unauthorized access to customer information has affected approximately 900,000 current and former customers. The company has completed its …
Hackers Are Using Fake Crypto Wallet Screens to Steal Recovery Phrases and Browser Sessions
July 28, 2026 Criminals are using convincing cryptocurrency wallet screens and browser extensions to steal recovery phrases, login data, and active browser sessions. The activity is linked to a wider …
AI-Assisted Research Uncovers Linux Kernel Zero-Day Enabling Root Privilege Escalation
A serious Linux kernel zero-day vulnerability capable of local privilege escalation (LPE) has been uncovered by security researchers, underscoring both the growing role of artificial intelligence in vulnerability research and …
Researchers Say a ‘Ghost’ Chinese Company Built the Network Hiding PLA Cyberattacks
July 28, 2026 A little-known Chinese company may have helped build the hidden network used to support military-linked cyber operations around the world. Researchers say Guangdong Chanming, a firm with …