July 9, 2026 Microsoft has formally expanded its use of artificial intelligence in vulnerability discovery, deploying a proprietary multi-model agentic scanning system across the Windows codebase to identify and patch …
A Hacker Used AI to Compromise an AWS Cloud Environment in Just 72 Hours
July 9, 2026 A large-scale AWS intrusion reveals how AI-assisted attackers can chain familiar cloud techniques to move from initial access to full environmental compromise in roughly 72 hours, not …
Roundcube 0-Click Vulnerability Enables Stored XSS Attack via MIME Type Attachment
July 9, 2026 Roundcube has released version 1.7 to patch six security vulnerabilities, including two critical stored cross-site scripting (XSS) flaws that require zero user interaction to exploit. The update …
Hackers Abuse Microsoft Entra Passkey Enrollment to Hijack Enterprise Accounts
Cybercriminals have found a new way to hijack corporate Microsoft accounts by exploiting the very feature meant to protect them: passkeys. A threat group tracked as O UNC 066, also …
HP Linux Printing Software Vulnerability Allows Remote Attackers to Execute Arbitrary Code
July 9, 2026 A critical security vulnerability has been identified in HP Linux Imaging and Printing (HPLIP) software that could allow remote attackers to execute arbitrary code on affected systems. …
Windows Update Silently Installs LG Monitor App That Pushes McAfee Ads
July 9, 2026 A recent user report has raised concerns about Windows Update silently installing third-party applications, after an LG monitor-related app allegedly appeared on systems and began displaying McAfee …
UNC6692 Hackers Uses Microsoft Teams Helpdesk Impersonation to Deploy SNOW Malware
July 9, 2026 A newly identified threat group tracked as UNC6692 is hijacking Microsoft Teams to install a custom malware suite called SNOW. The campaign relies almost entirely on social …
Everest Ransomware Claims 1 TB Data Theft But Encryptor Shows No Exfiltration Code
July 9, 2026 A new technical breakdown of the Everest ransomware family reveals a strange contradiction at the heart of one of its recent attack claims. Despite boasting about stealing …
Operationalizing Threat Intelligence: Bridging the Gap Between Feed Data and SOC Action
Threat intelligence feeds have become a staple line item in security budgets. Yet a persistent gap exists between purchasing a feed and actually using it to stop attacks. Many SOC …
AssuranceAmerica Data Breach Exposed 6.9 Million People’s License Numbers and Personal Data
July 9, 2026 AssuranceAmerica has disclosed a major data breach that exposed the personal information and driver’s license numbers of nearly 6.9 million individuals, marking one of the largest known …