Hackers Are Hiding Commands in Emails to Trick the AI Systems Protecting You

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 29, 2026 Attackers are beginning to hide malicious instructions inside ordinary emails, documents, calendar invites, and online advertisements. The goal is not always to fool a person. Instead, the hidden text is designed to manipulate the artificial intelligence tools …

OpenAI Open-Sources Codex Security CLI for Finding, Validating, and Fixing Security Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 29, 2026 OpenAI has open-sourced Codex Security, a command-line tool and TypeScript SDK designed to help developers find, validate, and fix security vulnerabilities in their codebases. The release marks a notable step in bringing AI-driven security analysis into everyday …

First-Ever Fully Autonomous AI Cyberattack Exploits 0-Day Flaws to Infiltrate Hugging Face

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 29, 2026 Between July 9 and July 13, 2026, security researchers documented what is being called the first fully autonomous AI agent cyberattack to chain zero-day flaws across multiple organizations. An AI agent running inside OpenAI’s ExploitGym cyber-capability evaluation …

Claude Mythos Preview Discovers Cryptographic Weaknesses That Human Experts Missed for Years

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 28, 2026 Anthropic researchers using Claude Mythos Preview have uncovered mathematical flaws in major cryptographic algorithms that human experts failed to spot for years. The AI found improved attacks against HAWK, a post-quantum digital signature scheme, and a reduced-round …

JetBrains Urging Customers to Patch Critical TeamCity Flaw that Enables OS Command Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 28, 2026 JetBrains has urgently released security updates for a critical vulnerability in TeamCity On-Premises that could allow remote attackers to bypass authentication and execute arbitrary operating system commands. This vulnerability, tracked as CVE-2026-63077, affects all versions of TeamCity …

Top 10 Phishing Kits Used by Hackers to Launch Cyberattacks (July 20-26, 2026)

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Top 10 Phishing Kits Used by Hackers to Launch Cyberattacks (July 20-26, 2026) Global phishing-as-a-service (PhaaS) activity surged to 7,295 tracked uploads during the week of July 20-26, 2026, driven overwhelmingly by OAuth device-code flow abuse and adversary-in-the-middle (AiTM) kits …

Chrome Extension Monitors AI Conversations Across ChatGPT, Claude, Gemini, and Other Platforms

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 28, 2026 A Chrome extension with roughly 100,000 installs is quietly harvesting every prompt and AI response typed across nine major artificial intelligence platforms. Despite its official listing and privacy policy explicitly claiming zero personal data collection, the extension …

Nginx Buffer Overflow Vulnerability Allows Attackers to Execute Arbitrary Code – PoC Released

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 28, 2026 A high-severity heap buffer overflow in NGINX Plus and NGINX Open Source can let unauthenticated attackers crash worker processes and, under certain conditions, run arbitrary code. Tracked as CVE-2026-42533, the flaw affects configurations that use regex-based map …

Aembit Joins Snowflake to Tackle AI’s Next Security Frontier: Trusted Agent Interoperability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 28, 2026 Silver Spring, MD, USA, July 28th, 2026, CyberNewswire To reduce identity risk when third-party AI agents access business systems, Aembit is launching a new integration with Snowflake to help enterprises securely govern third-party agents across platforms. Aembit, …

Apple iOS 26.6 Fixes Flaws Enabling Kernel Code Execution, Root Access and Sandbox Escape

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 28, 2026 Apple has released iOS 26.6 and iPadOS 26.6 to address a significant number of security vulnerabilities, including flaws that could allow malicious applications to execute code with kernel privileges, gain root access, or escape Apple’s app sandbox. …