Security Bulletin

The ShinyHunters group targeted Salesforce users by tricking them into authorizing a malicious Salesforce Data Loader application, which then requested OAuth permissions.

The vulnerability centers on how Cursor resolves Git binaries. An attacker can place a malicious file named "git.exe" at the root of a Git repository.

K8s-aibom functions as a controller that surfaces a bill of materials (BOM) for AI operations, exposing them across a user's cloud estate.

Fortinet Inc. has expanded its FortiEndpoint platform with new features designed to help companies monitor employee use of artificial intelligence tools and prevent sensitive data from leaking into them.

LabubaRAT operates by impersonating NVIDIA's container runtime toolkit, using an executable named "nvidia-sysruntime.exe."

Three of the 622 CVEs for which Microsoft issued patches this week are zero-days; there are more than 60 critical vulnerabilities.

The cyberattack, which occurred on July 13, 2026, targeted the systems of an unnamed logistics company responsible for delivering ingredients to KFC's numerous Japanese locations.

The Central Regional Security Operations Center, operating from Glendale Community College and Paradise Valley Community College, functions as a student-run cyber defense hub.

Structural problems prevent teams from reconstructing control-plane activity even when cloud logging is active

The acquisition aims to bolster Cribl's platform with advanced detection engineering capabilities, enabling enterprise customers to identify and respond to sophisticated cybersecurity threats more effectively.

Embed governance into the data movement process rather than applying governance after data has moved