Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw  - Public exploit details released on July 27 show how an unauthenticated request can reach PHP's eval() function inside vBulletin and execute code on an unpatched forum server. The attack requires no account, administrative access, or interaction from another user. SSD Secure Disclosure lists vBulletin...

+3 from  thehackernews

 Ransomware Groups Increasingly Deploy EDR Kill Techniques  - Halcyon’s latest quarterly ransomware report showed that while ransomware attacks are declining, obfuscation techniques are getting harder to fight against

+1 from  infosecurity-magazine

 Hacker who targeted over 500 Snapchat accounts sentenced to over 6 years in prison  - Svara used two-factor authentication to lock victims out of their Snapchat accounts.

 GitHub, PyPI add time-absed defenses against supply chain attacks  - GitHub and PyPI (Python Package Index) have introduced a time-based mechanism in the Dependabot dependency management tool to protect against supply-chain attacks and to limit their impact.

 亚太经合组织公民人工智能素养提升行动的新理念和新路径研讨会在四川成都举办

 Microsoft Xbox outage leaves players locked out of their own games  - Players lose access to purchased games, accounts, and the Microsoft Store as restoration timeline remains unknown.

+1 from  cybernews

 Secure Open-Source AI Agents with the DLP You Have Now

 Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update  - Cybersecurity researchers have flagged a Microsoft Teams-themed phishing campaign that employs "secure document" lures to deliver legitimate remote monitoring and management ( RMM ) tools. "The victim was directed through compromised web infrastructure to a counterfeit Microsoft Store page claiming that...

+4 from  thehackernews

 MY TAKE: Big Tech is funding the AI race by cutting the skilled employees it needs to win it  - Big Tech isn’t buying the AI future with profits. It’s buying it with payroll.

 Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available  - Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process. Tracked as CVE-2026-16723 , the...

+1 from  thehackernews

 Enterprise AI Doesn’t Stall at the Model — It Stalls at the Seams.

+2 from  dell

 Ernst & Young data breach claimed by ShinyHunters extortion gang  - The ShinyHunters extortion gang has claimed responsibility for a recently disclosed Ernst & Young data breach, saying it obtained credentials for some of the company's systems via a supply-chain attack.

+2 from  bleepingcomputer

 Russian Hackers Steal Emails Via Zimbra Exploit  - Russian state-linked hacking group Laundry Bear targeted previously unknown exploit to steal emails from corporate servers, say authorities

 网信部门严管“自媒体”未规范标注信息来源行为

 Steam forum ClickFix attacks infect gamers with XMRig cryptominers  - Steam discussion forums are being abused in ClickFix attacks that pretend to be fixes for game and computer problems but actually infect devices with cryptominers.

 ShinyHunters data leaks fuel $2,000 sextortion email scam  - Threat actors are using email addresses exposed in data breaches leaked by the ShinyHunters extortion group to send sextortion emails demanding $2,000 in Bitcoin.

+1 from  bleepingcomputer