NVIDIA BlueField Vulnerability Enables Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 29, 2026 NVIDIA has disclosed a serious vulnerability affecting its BlueField DPUs and ConnectX networking platforms that could allow attackers to execute code on affected systems if successfully exploited. This vulnerability, tracked as CVE-2026-65094, impacts the VIRTIO-Net component and …

Critical Ruflo MCP Bridge Flaw Lets Attackers Execute Commands and Hijack AI Agents

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 29, 2026 A critical security flaw in the open-source AI orchestration platform Ruflo has been disclosed, allowing unauthenticated attackers to execute arbitrary commands and fully compromise AI agent environments. Assigned a maximum CVSS base score of 10.0, the vulnerability …

Russian Intelligence Hackers Phish Signal Backup Keys to Hijack Accounts and Messages

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 29, 2026 Russian intelligence-linked hackers are trying to seize Signal accounts by posing as support staff and asking targets for backup recovery keys. The campaign targets people with access to sensitive conversations, including officials, military personnel, political figures, journalists, …

Hijacked Joyfill npm Packages Deploy Worm-Like RAT and Steal Developer Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A fresh supply chain scare hit software teams after attackers slipped malware into trusted open source libraries. On July 28, 2026, malicious beta builds of two Joyfill packages appeared on the npm registry. The libraries, @joyfill/components and @joyfill/layouts, are used …

Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 29, 2026 Las Vegas, USA, July 29th, 2026, CyberNewswire Catches rogue AI agents – and stops them in live production before they cause damage Sweet Security, the proactive runtime enforcement company for cloud and AI, today announced its further …

Hackers Can Hijack Tor Browser Users Through a Single Malicious Web Page

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 29, 2026 Hackers Can Compromise Your Tor Browser if You Visit a Single Malicious Page A single malicious webpage is enough to compromise Tor Browser users running an unpatched build, following newly disclosed research into CVE-2026-10702. The flaw, a …

Revolut Alleged Data Breach – Hackers Claiming to Access Over 75 Million Users’ Records

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Revolut is currently under scrutiny after hackers claimed to be selling a database containing records of more than 75 million users. However, the company asserts that it has found no evidence of a new breach at this time. A threat …

Russia Charges Telegram CEO Pavel Durov With Aiding Terrorism, Issues Arrest Warrant

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 29, 2026 Russia’s Federal Security Service (FSB) has formally charged Telegram founder and CEO Pavel Durov with aiding terrorism and issued a warrant for his arrest, escalating a long-running clash between the Kremlin and one of the world’s most …

Houston City College Data Breach Exposes 832k Unique Student Email Addresses

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 29, 2026 Houston City College has experienced a serious data breach that exposed sensitive personal information of approximately 832,000 unique students and alums. This incident is linked to a cyber extortion campaign by the ShinyHunters threat group. The breach, …

AsyncAPI Malware Contains Modules to Steal GitHub, npm, Cloud and AI API Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 29, 2026 A dangerous supply chain attack struck the AsyncAPI project on the npm registry, putting developers and automated build systems at risk. Attackers republished five package versions in about ninety minutes on July 14, 2026. Each version carried …