Security Bulletin

CardinalOps will give Cribl customers the ability to map detection rules and security controls to the MITRE ATT&CK framework. SecOps teams can identify coverage gaps and operationalize threat intelligence.

These vulnerable UEFI applications, primarily older versions of the shim bootloader, can allow attackers to execute untrusted code during system startup, according to ESET researcher Martin Smolár.

The ransomware group D1R claimed to have accessed a database of 40,000 entries from Synopsys and subsequently used this information to target Bosch, alleging the theft of valuable intellectual property.

The hearing, the first of its kind in Brussels regarding advanced AI risks, focused on Anthropic's cyber-capable models, Mythos and Fable, which are capable of identifying and exploiting software vulnerabilities.

A Welshman has been sentenced to prison for his involvement in numerous swatting incidents across the UK, US, and Canada. Callum Dare, 26, was an administrator for Doxbin, a dark web platform used for doxxing and facilitating harassment, according to...

The ShinyHunters group targeted Salesforce users by tricking them into authorizing a malicious Salesforce Data Loader application, which then requested OAuth permissions.

The vulnerability centers on how Cursor resolves Git binaries. An attacker can place a malicious file named "git.exe" at the root of a Git repository.

K8s-aibom functions as a controller that surfaces a bill of materials (BOM) for AI operations, exposing them across a user's cloud estate.

Fortinet Inc. has expanded its FortiEndpoint platform with new features designed to help companies monitor employee use of artificial intelligence tools and prevent sensitive data from leaking into them.

LabubaRAT operates by impersonating NVIDIA's container runtime toolkit, using an executable named "nvidia-sysruntime.exe."

Three of the 622 CVEs for which Microsoft issued patches this week are zero-days; there are more than 60 critical vulnerabilities.

The cyberattack, which occurred on July 13, 2026, targeted the systems of an unnamed logistics company responsible for delivering ingredients to KFC's numerous Japanese locations.