July 7, 2026 A persistent Microsoft device identifier was used to unravel the anonymity of an alleged Scattered Spider operator, according to a federal superseding complaint filed in the Northern …
Fast-mcp-telegram Vulnerability Allow Attackers to Access Sensitive Files
July 7, 2026 A critical security flaw has been discovered in the fast-mcp-telegram package that could allow remote attackers to access sensitive Telegram session data and perform unauthorized actions. The vulnerability, tracked …
Top 10 Best Next-Generation Firewall (NGFW) Solutions in 2026
Best Next-Generation Firewall (NGFW) Solutions If you’re shortlisting the best next-generation firewall for 2026, Palo Alto Networks’ PA-Series is our top overall pick for its App-ID application control and machine-learning …
Microsoft Device Code Phishing Attack Steals Tokens Through Legitimate Login Page
July 6, 2026 A new phishing technique is tricking users into handing over their Microsoft account tokens without a fake website in sight. Attackers are exploiting a legitimate Microsoft authentication …
Gemini Live Voice Session Flaw Enables Tool Injection Through Misconfigured Ephemeral Tokens
July 6, 2026 A security flaw in how developers implement Google’s Gemini Live API allows attackers to hijack browser-based AI voice sessions, override system prompts, and trigger unauthorized code execution …
The Gentlemen Ransomware Uses 21 Remote Execution Techniques to Encrypt Entire Networks
July 6, 2026 A new ransomware strain called The Gentlemen has emerged as one of the more aggressive threats tracked this year, combining strong encryption with a self-spreading worm engine …
SilverFox Hackers Use Go RAT, AV Killer, and Kernel Rootkit in Live ValleyRAT Campaign
July 6, 2026 A new strain of remote access malware is quietly moving through corporate networks, and it does not behave like anything defenders have seen from this threat group …
OpenSSH 10.4 Released with Multiple Security Fixes and New Features
July 6, 2026 OpenSSH 10.4 launched on July 6, 2026, delivering a batch of security patches, protocol hardening, and early post-quantum cryptography support, available through mirrors listed on the official …
Insignary Closes SBOM Accuracy Gap With Binary-Level Clarity for Regulatory Risk
July 6, 2026 Toronto, Canada, July 6th, 2026, CyberNewswire Most software composition analysis tools read what developers declare. Insignary Clarity’s patented binary-first platform analyzes what is actually built, shipped, and …
Microsoft Edge Vulnerability Allows Remote Attacker to Execute Arbitrary Code
July 6, 2026 Microsoft has disclosed a new security vulnerability in Microsoft Edge (Chromium-based) that could allow a remote attacker to execute arbitrary code on affected systems. Tracked as CVE-2026-57992, …