A severe security vulnerability in Ruby on Rails Active Storage tracked as CVE-2026-66066 can let unauthenticated attackers read sensitive files from a server and potentially escalate to remote code execution. …
AI-Generated Phishing No Longer Needs Malware: It Can Steal Your Session Inside the Browser
AI-generated phishing campaigns are rapidly evolving beyond traditional malware delivery, shifting the battleground directly into the web browser where attackers can hijack active sessions, bypass multi-factor authentication (MFA), and evade …
NVIDIA BlueField Vulnerability Enables Code Execution Attacks
July 29, 2026 NVIDIA has disclosed a serious vulnerability affecting its BlueField DPUs and ConnectX networking platforms that could allow attackers to execute code on affected systems if successfully exploited. …
Critical Ruflo MCP Bridge Flaw Lets Attackers Execute Commands and Hijack AI Agents
July 29, 2026 A critical security flaw in the open-source AI orchestration platform Ruflo has been disclosed, allowing unauthenticated attackers to execute arbitrary commands and fully compromise AI agent environments. …
Russian Intelligence Hackers Phish Signal Backup Keys to Hijack Accounts and Messages
July 29, 2026 Russian intelligence-linked hackers are trying to seize Signal accounts by posing as support staff and asking targets for backup recovery keys. The campaign targets people with access …
Hijacked Joyfill npm Packages Deploy Worm-Like RAT and Steal Developer Credentials
A fresh supply chain scare hit software teams after attackers slipped malware into trusted open source libraries. On July 28, 2026, malicious beta builds of two Joyfill packages appeared on …
Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities
July 29, 2026 Las Vegas, USA, July 29th, 2026, CyberNewswire Catches rogue AI agents – and stops them in live production before they cause damage Sweet Security, the proactive runtime …
Hackers Can Hijack Tor Browser Users Through a Single Malicious Web Page
July 29, 2026 Hackers Can Compromise Your Tor Browser if You Visit a Single Malicious Page A single malicious webpage is enough to compromise Tor Browser users running an unpatched …
Revolut Alleged Data Breach – Hackers Claiming to Access Over 75 Million Users’ Records
Revolut is currently under scrutiny after hackers claimed to be selling a database containing records of more than 75 million users. However, the company asserts that it has found no …
Russia Charges Telegram CEO Pavel Durov With Aiding Terrorism, Issues Arrest Warrant
July 29, 2026 Russia’s Federal Security Service (FSB) has formally charged Telegram founder and CEO Pavel Durov with aiding terrorism and issued a warrant for his arrest, escalating a long-running …