July 7, 2026 Microsoft has introduced Microsoft Execution Containers (MXC), a new security capability designed to protect AI agent workflows on Windows, marking a significant step toward making Windows more …
U.S. Cyber Defense Agency Reportedly Using Anthropic’s Mythos to Audit Government Code Repositories
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is reportedly deploying Anthropic’s advanced AI model, Mythos, to audit federal government code repositories, signaling a growing reliance on artificial intelligence for …
Critical PHP PDO Driver Bugs Expose Firebird SQL Injection and PostgreSQL DoS Risks
July 7, 2026 A newly disclosed pair of flaws in PHP’s database driver layer shows that even mature code can hide dangerous surprises. The bugs live inside PHP Data Objects …
Microsoft Confirms Windows 11, 26H2 Comes With Change in Backup Policy
July 7, 2026 Microsoft has confirmed a significant change to its Windows settings backup policy with the upcoming release of Windows 11 version 26H2, marking a shift toward improved system …
Hackers Use Recruiter Phishing Emails and Fake Career Pages to Harvest Gmail Logins
July 7, 2026 A new phishing campaign is targeting job seekers by posing as recruiters from recognizable brands. The scheme uses fake career pages and worded emails to trick people …
Hackers Leverage Microsoft Teams Call to Install RMM Tools and Deploy EtherRAT
July 7, 2026 Threat actors are now weaponizing something as ordinary as a Microsoft Teams call to slip past corporate defenses and plant a stealthy new remote access trojan called …
OpenAI Codex Desktop App for macOS Vulnerability Allows Attackers to Inject Indirect Prompt
July 7, 2026 A newly disclosed vulnerability in the OpenAI Codex desktop application for macOS could allow attackers to exploit indirect prompt injection techniques to exfiltrate sensitive data, according to …
Cavern Manticore Abuses SysAid RMM and WinDirStat DLL Sideloading to Deploy C2 Framework
A new Iranian-linked hacking group has been caught abusing everyday IT tools to slip malware onto Israeli networks. Researchers have named the group Cavern Manticore, and its latest campaign shows …
Tenda Authentication Backdoor Grants Attackers Full Administrative Access
July 7, 2026 A newly disclosed vulnerability in Tenda network devices exposes a critical authentication backdoor that allows attackers to gain full administrative access without valid credentials. The flaw affects …
Critical BeyondTrust Flaws Let Attackers Bypass Access Controls and Gain Unauthorized Access
July 7, 2026 BeyondTrust has disclosed multiple critical and high-severity vulnerabilities affecting its Remote Support (RS) and Privileged Remote Access (PRA) solutions, potentially allowing attackers to bypass access controls and …