Cybersecurity Articles
402/69 Wednesday, July 22, 2026 Microsoft has released an out-of-band Windows 11 update, KB5121767, to fix an issue affecting some devices with Intel Innovation Platform Framework (Intel IPF) drivers installed. The issue could cause reduced performance, abnormal power usage, or changes in system behavior after installing a previous Windows update. On some Dell computers, users […]
401/69 Wednesday, July 22, 2026 Estée Lauder, a major cosmetics company, has disclosed a data breach after attackers exploited a vulnerability in Oracle E-Business Suite, which the company uses for Human Resources (HR) processes. Estée Lauder stated that on June 19, 2026, it determined that unauthorized access to its Oracle E-Business Suite system had occurred […]
400/69 Wednesday, July 22, 2026 Cybersecurity firm Group-IB has reported the discovery of a new malware strain called HollowGraph, which uses the Calendar feature in compromised Microsoft 365 accounts as a communication channel with command-and-control (C2) servers to receive commands and exfiltrate stolen data. Researchers assess that it is part of the Cavern framework, which […]
399/69 Tuesday, July 21, 2026 Google has released a security update for Chrome to fix seven memory safety vulnerabilities. These include three Critical-severity Use-after-free vulnerabilities in the CameraCapture, GPU, and Network components, as well as three High-severity vulnerabilities in the Cast, Ozone, and Aura components. Google has not stated that any of the vulnerabilities in […]
398/69 Tuesday, July 21, 2026 Reports indicate that attackers have begun exploiting CVE-2026-6875 in the ServiceNow AI Platform, according to threat intelligence firm Defused. ServiceNow AI Platform, formerly known as the Now Platform, is an enterprise Platform-as-a-Service (PaaS) solution that helps organizations integrate AI into core business workflows. The vulnerability was discovered and reported by […]
397/69 Tuesday, July 21, 2026 Hugging Face, a major open-source AI platform, has disclosed that it was targeted in a cyberattack carried out by an automated AI agent, an incident that highlights a significant irony within the technology industry. The company stated that it detected and responded to a threat targeting its production infrastructure last […]
396/69 Monday, July 20, 2026 Microsoft has observed a surge in attacks involving ACR Stealer, a malware strain designed to steal passwords, cookies, session data, authentication tokens, and important documents stored on users’ devices. Microsoft detected the campaign from late April to mid-June 2026 and believes that ACR Stealer is a Malware-as-a-Service (MaaS) offering linked […]
395/69 Monday, July 20, 2026 Ernst & Young (EY) has disclosed a data breach after a third-party support ticket system used by the company’s IT personnel was accessed without authorization. Tickets submitted through the system may have contained documents that included clients’ tax information. EY is one of the world’s largest accounting firms, providing audit, […]
394/69 Monday, July 20, 2026 The Computer Emergency Response Team of Ukraine (CERT-UA) has detected a cyberattack operation by the threat group UAC-0145, a subgroup within the Sandworm network linked to Russian intelligence services. In this campaign, the hackers shifted their tactics from using fake installers to deceiving users through the ClickFix technique on compromised […]
393/69 Friday, July 17, 2026 Microsoft has released its July 2026 Patch Tuesday updates to fix 622 vulnerabilities across multiple products, including Windows, Microsoft Office, SharePoint Server, SQL Server, Azure, and developer tools. Microsoft stated that the increase in the number of vulnerabilities is partly due to the use of artificial intelligence systems to help […]
