Google has released its June 2026 Android security update addressing 124 vulnerabilities, including an actively exploited high severity flaw affecting Android 14, 15, and 16 devices.
Cybersecurity experts warn that fragmented identity verification systems are weakening fraud detection by losing critical telemetry needed to stop digital injection attacks and synthetic identity fraud.
Organizations are increasingly expanding EDR capabilities with proactive hardening and managed detection and response to improve cyber resilience and reduce operational pressure on security teams.
Russian linked hacking group Gamaredon has exploited a WinRAR vulnerability to deploy GammaWorm and GammaSteel malware targeting Ukraine, according to cybersecurity firm Sekoia.
A new supply chain attack called Miasma has compromised Red Hat npm packages to steal credentials, target CI/CD environments, and deploy a self propagating malware campaign affecting developers and cloud systems.
North Korean threat actor Kimsuky has intensified cyberattacks targeting South Korean military and corporate organizations, deploying HTTPSpy malware, HelloDoor, and abusing VS Code tunneling for covert access.
Iran linked hacking group MuddyWater has launched a cyber espionage campaign targeting organizations across nine countries using DLL side loading, credential theft, and covert access techniques.
Cybersecurity experts warn that AI driven vulnerability discovery is increasing pressure on organizations to rethink patch only security strategies and compliance readiness.
Researchers uncover a malicious npm package targeting Claude AI user directories to steal files and upload them to attacker controlled GitHub repositories.
ANY.RUN outlines three SOC strategies to improve early threat detection, faster alert triage, and response readiness through threat intelligence and malware analysis tools.
LayerX State of AI Usage Report 2026 reveals enterprise AI risks are concentrated among a small group of power users, personal accounts, and unmanaged AI platforms.