July 9, 2026 AssuranceAmerica has disclosed a major data breach that exposed the personal information and driver’s license numbers of nearly 6.9 million individuals, marking one of the largest known …
GitLab Patches Eight Security Vulnerabilities Across Community and Enterprise Editions
July 9, 2026 GitLab has released critical security updates addressing eight vulnerabilities across its Community Edition (CE) and Enterprise Edition (EE), urging users to upgrade immediately to mitigate potential risks. …
New HalluSquatting Attack Allows Hackers to Poison AI Coding Assistants Into Installing Botnet Malware
A newly disclosed attack technique dubbed “HalluSquatting” is raising serious concerns in the cybersecurity community after researchers demonstrated how AI coding assistants can be manipulated into installing botnet malware through …
Meta’s Muse AI Tool Lets Users Create Images Using Public Instagram Photos
July 9, 2026 Meta has launched Muse Image, its first image generation model built by Meta Superintelligence Labs, and the release has already triggered a privacy backlash because it lets …
QR Codes Are the New Security Blindspots That Steal Your Card Details and Deliver Malware
A small pixelated square. You’ve scanned hundreds of them at coffee shops, parking meters, airport lounges, and restaurant tables. It feels instant. It feels safe. It feels routine. That’s exactly …
GitHub Copilot Refuses Harmful Chat Prompts But Writes Them Inside Code Workflows
July 9, 2026 GitHub Copilot can refuse harmful prompts in chat while still generating the same harmful content inside code workflows when the request is decomposed across a multi-step IDE …
GoodPersonRAT Uses Fake LetsVPN Installer to Give Attackers Full Remote Control
July 9, 2026 A fake installer for a popular Chinese VPN service is quietly handing full remote control of infected computers to unknown attackers. The malicious file poses as a …
Helix Data Extortion Group Uses Vishing and Device Code Phishing to Steal SharePoint Data
July 9, 2026 Helix has surfaced as a fast-moving data extortion group that targets Microsoft 365 users through phone scams and cloud-focused phishing instead of traditional malware drops. Attackers are …
Microsoft Released Patches for RoguePlanet Defender Zero-Day Vulnerability
July 9, 2026 Microsoft has released security updates to address a newly disclosed zero-day vulnerability in Microsoft Defender, publicly referred to as “RoguePlanet.” The flaw, tracked as CVE-2026-50656, affects the …
New GhostApproval Vulnerability Affects Amazon Q, Claude Code, Cursor, and Other AI Agents
July 9, 2026 A newly disclosed vulnerability pattern dubbed “GhostApproval” has exposed a critical security flaw in six of the most widely used AI coding assistants: Amazon Q Developer, Anthropic …