CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution - The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting Widget Factory Joomla Content Editor (JCE) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-48907...
News alert: Varist announces AI-scale malware detection for healthcare and medical imaging - REYKJAVIK, Iceland, June 16, 2026 — Varist today introduced its DICOM Detection Engine™, a specialized system designed to safeguard electronic health records (EHR) and picture archiving and communication systems (PACS) from all known malware, including the emerging threat of AI-powered malware.
CrowdStrike Announces Continuous Identity for AI Agents - Identity security has long been built around a simple premise: Authenticate a user, grant access, and trust that decision until their next login. While for many this model worked well enough when iden[…]
Webinar: How behavioral AI stops phishing and account takeovers - Modern phishing, BEC, and account takeover attacks increasingly bypass traditional email defenses and create operational strain for security teams. This webinar explores how behavioral AI can help automate detection, investigation, and remediation to reduce alert fatigue and accelerate response times....
Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails - A China-linked espionage group hid inside North American medical, academic, and military research networks for more than a year, quietly stealing sensitive research and defense email. The way in was a backdoor on their REDCap research servers that stole login credentials. The exfiltration was the unusual...
Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting - A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no access to a victim's project hijack the victim's machine learning model upload and run code inside Google's serving infrastructure. Palo Alto Networks Unit 42, which found and reported the bug through Google's bug bounty program,...
GhostTree Attack Abused Recursive Windows Junctions to Hide Malware - GhostTree uses recursive NTFS junctions to generate vast numbers of valid Windows file paths. Varonis explains how the technique could cause Microsoft Defender folder scans to never complete, leaving malware undetected.
SimpleHelp bug lets hackers create rogue remote support accounts - A vulnerability in the SimpleHelp remote management software allows unauthenticated attackers to create privileged technician accounts on servers using the OpenID Connect (OIDC) authentication protocol.
Sniper Dz Scams Target MENA Users via Fake Facebook Offers and Browser Alerts - Cybersecurity researchers have disclosed details of fraudulent activity targeting users across the Middle East and North Africa by employing various fraudulent Facebook accounts impersonating politicians, public figures, and trusted organizations. "These accounts promoted fake offers, including free mobile...
UK to require ID or face scan before you can make social media accounts - Opening a new social media account in the UK will soon mean proving you're over 16 with an ID upload or a facial age scan, under a government ban on under-16s taking effect in spring 2027. Security experts warn the age checks are easy to circumvent and create new data-breach risks.
Guernsey Returns £8m To OneCoin Victims - Funds seized from crypto fugitive Ruja Ignatova to be handed over to German officials for return to victims of $4.5bn fraud
Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week - Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. In a post shared on X, the company said it has observed exploitation of CVE-2026-39813, CVE-2026-39808 , and CVE-2026-25089 over the past 24 hours. CVE-2026-39813...
