VEIL#DROP: How Blogger Became an Infostealer Armorer https://deafnews.it/en/article/veildrop-how-blogger-became-an-infostealer-armorer #Cybersecurity

Amazon cuts 33% off the Samsung Galaxy Watch 8 Classic

Samsung’s premium Galaxy Watch 8 Classic is at an all-time low at Amazon of just $334.99.

https://www.androidauthority.com/deal-samsung-galaxy-watch-8-classic-3683534/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

🚨New ransom group blog posts!🚨

Group name: qilin
Post title: Dixie Beverage
Info: https://cti.fyi/groups/qilin.html

Group name: qilin
Post title: Dynamic Laser Solutions Ltd.
Info: https://cti.fyi/groups/qilin.html

Group name: qilin
Post title: Rossum Integration
Info: https://cti.fyi/groups/qilin.html

Group name: qilin
Post title: Laughlin Nunnally Hood & Crum
Info: https://cti.fyi/groups/qilin.html

Group name: qilin
Post title: Mattatuck Industrial Scrap Metal
Info: https://cti.fyi/groups/qilin.html

Group name: qilin
Post title: Dennis Waters Rental Properties
Info: https://cti.fyi/groups/qilin.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

Older Amazon Echo speakers are acting up — is yours?

The original Amazon Echo speaker may be on its last legs.

https://www.androidauthority.com/amazon-echo-not-responding-3683484/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Possible Phishing 🎣
on: ⚠️hxxps[:]//atencionintegral240[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a44ecf63b77500005621142
#cybersecurity #phishing #infosec #urldna #scam #infosec

New attack provides one more reason why #AI browsers are a bad idea

https://arstechnica.com/security/2026/06/ai-browsers-can-be-lulled-into-a-dream-world-where-guardrails-no-longer-apply/

#LLM #PromptInjection #cybersecurity #AIAgent #AgenticAI

Don't Tell ZimaSpace I Did This to the ZimaBoard... Get 15$ off your purchase at https://zima.valtersit.com/ #homelab #devsecops #devops #docker #sysadmin #developers #proxmox #python #pentest #cybersecurity #minipc #git #github #gitlab #100daysofcode #100daysofcodechallange

Sony is killing all physical PlayStation game discs

Sony’s PlayStation 5 Pro doesn’t even feature a disc drive. | Photo by Vjeran Pavic / The Verge Sony has announced that from January 2028 it will entirely stop the production of physical discs for new PlayStation games.…

https://www.theverge.com/games/960160/sony-playstation-disc-production-ending

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

#Microsoft adds smarter bot protection to #Teams meetings

https://www.bleepingcomputer.com/news/microsoft/microsoft-adds-smarter-bot-protection-to-teams-meetings/

#privacy #cybersecurity

🚨 EUVD-2026-40964

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+5 more)
🏢 Vendor: Linux
📅 Updated: 2026-07-01

📝 In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()

[Why & How]
The aux_rd_interval array in struct dc_lttpr_caps is declared with
MAX_REPEATER_CNT - 1 (7) elements...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40964

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-40963

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+13 more)
🏢 Vendor: Linux
📅 Updated: 2026-07-01

📝 In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Use krealloc_array() in dal_vector_reserve()

[Why & How]
dal_vector_reserve() computes the allocation size as
"capacity * vector->struct_size" using uint32_t arithme...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40963

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-40962

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+7 more)
🏢 Vendor: Linux
📅 Updated: 2026-07-01

📝 In the Linux kernel, the following vulnerability has been resolved:

sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task()

A WARN fires when systemd's user manager writes "+cpu +memory +pids" to
its own subtree_control while a sched_...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40962

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-40961

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+5 more)
🏢 Vendor: Linux
📅 Updated: 2026-07-01

📝 In the Linux kernel, the following vulnerability has been resolved:

debugobjects: Do not fill_pool() if pi_blocked_on

On RT enabled kernels, fill_pool() ends up calling rtlock_lock(), which
asserts if current::pi_blocked_on is set, because a task can ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40961

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-40960

📊 Score: n/a
📦 Product: Linux, Linux, Linux (+4 more)
🏢 Vendor: Linux
📅 Updated: 2026-07-01

📝 In the Linux kernel, the following vulnerability has been resolved:

debugobjects: Don't call fill_pool() in early boot hardirq context

When booting a debug PREEMPT_RT kernel on an ARM64 system, a "inconsistent
{HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage" l...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40960

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-40959

📊 Score: 8.8/10 (CVSS v3.1)
📅 Updated: 2026-07-01

📝 A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an authenticated user with usergroup management permissions to attach arbitrary roles, including administrative roles, to a user group and ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40959

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-40958

📊 Score: 9.0/10 (CVSS v3.1)
📦 Product: pretix-oppwa
🏢 Vendor: pretix
📅 Updated: 2026-07-01

📝 The payment integration pretix-oppwa provides support
for the payment providers VR Payment, Hobex, and potentially others
based on Oppwa's technology. The integration of Oppwa, following their
official documentation, includes a step where the user is ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40958

#cybersecurity #infosec #euvd #cve #vulnerability

River Bank & Trust Discloses Ransomware Attack

River Bank & Trust disclosed a ransomware attack in June 2026 that disrupted operations and potentially exposed customer data. The bank is working with external experts to investigate the scope of the breach and restore systems.

****
#cybersecurity #infosec #incident #ransomware
https://beyondmachines.net/event_details/river-bank-trust-discloses-ransomware-attack-k-v-e-o-s/gD2P6Ple2L

🖲️ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
⚫ China-Linked Group Targets Southeast Asia Critical Systems
🔗 https://www.darkreading.com/threat-intelligence/china-linked-group-targets-southeast-asia-critical-systems

The group compromised at least 10 regional organizations, including two state-owned entities, and deployed a new backdoor.

Sony is closing the PS3 and Vita digital stores

It's the end of an era for the PlayStation store on PS3 and PS Vita, with Sony now planning to shut down its digital distribution service on both consoles. The PlayStation store on PS3 will close in select markets later…

https://www.theverge.com/games/960168/sony-playstation-ps3-vita-store-shut-down

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

AI-Generated Ransomware Attacks via Browser: No Payload, Just Chrome Permissions https://deafnews.it/en/article/ai-generated-ransomware-attacks-via-browser-no-payload-just-chrome-permissions #Cybersecurity

📰 Actively Exploited 'ShiftScribe' Zero-Day in Apex-Office Suite Puts Millions at Risk

🚨 CRITICAL ZERO-DAY: 'ShiftScribe' (CVE-2026-35801) in Apex-Office Suite is being actively exploited by state-sponsored hackers (APT42). The RCE flaw allows full system takeover. CISA issues emergency directive. 🛡️ #ZeroDay #CVE #CyberSecurity #APT

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/critical-zero-day-shiftscribe-in-apex-office-suite-under-active-explo…

📰 'SandViper' APT Hits Global Energy Sector with New 'DuneStalker' Espionage Malware

New APT 'SandViper' targets global energy sector with 'DuneStalker' malware. ⛽ The espionage campaign uses spear-phishing and watering holes to steal sensitive OT data from oil & gas firms in the Middle East and Europe. #APT #CyberSecurity #Energy #OT

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/sandviper-apt-targets-global-energy-sector-with-dunestalker-malware/?u…

📰 EU Unveils 'CYBER-AI Act' with Strict Security Mandates and Heavy Fines for High-Risk AI

The EU has announced the 'CYBER-AI Act', imposing strict security rules on high-risk AI systems. 🇪🇺 The law mandates secure development, 24-hour breach reporting, and fines up to 6% of global turnover. #AI #CyberSecurity #Regulation #EU

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/eu-announces-strict-ai-security-regulations-in-cyber-ai-act/?utm_source=masto…

📰 'Synapse' Wiper Malware Disguised as Ransomware, Designed for Maximum Destruction

New malware 'Synapse' is a destructive wiper disguised as ransomware. 💣 It fakes encryption but actually destroys the MBR and corrupts files. Possible links to the Sandworm APT group. #Wiper #Malware #CyberSecurity #Sandworm

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/deep-dive-analysis-of-synapse-wiper-malware-posing-as-ransomware/?utm_source=mastodon&utm_medium=…

Sony is killing discs — and showing us why it’s a terrible idea

The future of video game preservation just took a major hit. This morning, Sony announced that, starting in January 2028, the company will no longer produce physical PlayStation discs, which means that from that moment …

https://www.theverge.com/games/960212/sony-playstation-killing-discs-digital-preservation

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

#Insurance giant #Aflac discloses #DataBreach after subsidiary hack

https://www.bleepingcomputer.com/news/security/insurance-giant-aflac-discloses-data-breach-after-subsidiary-hack/

#cybersecurity #privacy

Possible Phishing 🎣
on: ⚠️hxxps[:]//m[.]v-binance[.]com[.]cn
🧬 Analysis at: https://urldna.io/scan/6a4501693b77500005621370
#cybersecurity #phishing #infosec #urldna #scam #infosec

This dumb password rule is from WellStar MyChart.

Your password must be between 8 and 20 characters.

https://dumbpasswordrules.com/sites/wellstar-mychart/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

A researcher found that using Anthropic’s Claude Opus 4.7, he could break into the website of Front Gate—used by every festival from Lollapalooza to Bonnaroo—and freely issue any ticket he chose.

Alt...

Claude Helped a Hacker Find a Way to Issue Tickets to Almost Every US Music Festival

Nothing confirms the Ear 3a will launch in 4 colors alongside the Phone 4b

The company is launching both the Phone 4b and the Ear 3a on the same day.

https://www.androidauthority.com/nothing-ear-3a-launch-date-colors-3683301/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

🎣 Phishing Spotlight

instagram-gamma[.]vercel[.]app

🔒 SSL: exp. 2026-09-26
🌐 Stack: Vercel

🔗 https://beesint.com/pulse/13dd3466-2f62-4bea-95b7-896e8c2887e3

#OSINT #Phishing #ThreatIntel #CyberSecurity

💾 🟠 Madison Square Garden Sports (msgsports.com)
✓ Verified
📊 ~9.8M records compromised
📂 Customer service records, Email addresses, Names, Phone numbers +1 more
📅 2026-06-05 · disclosed 19d after incident
🌐 cloudflare, WordPress (CMS)
⚠️ No SPF/DMARC configured

🔗 https://beesint.com/pulse/6ffbb0d7-0719-4796-9499-b6affd36637c

#OSINT #DataBreach #HaveIBeenPwned #InfoSec #CyberSecurity

Fortinet wprowadza FortiSOC – ujednoliconą platformę SOC bazującą na agentowej sztucznej inteligencji.Nowa chmurowa platforma SOC integruje w jednym, wspieranym przez AI środowisku sześć... https://linuxiarze.pl/fortinet-wprowadza-fortisoc/ #sztucznainteligencja #cybersecurity

Google shares more details about Android Halo and how it’ll work

Google's Sameer Samat recently spoke about Android Halo and what to expect from the feature.

https://www.androidauthority.com/google-android-halo-details-3683294/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

🚨 EUVD-2026-40940

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Woffice
🏢 Vendor: WofficeIO
📅 Updated: 2026-07-01

📝 Missing Authorization vulnerability in WofficeIO Woffice allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Woffice: from n/a before 5.4.33.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40940

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-40939

📊 Score: 6.1/10 (CVSS v3.1)
📦 Product: VikBooking Hotel Booking Engine & PMS
🏢 Vendor: e4jvikwp
📅 Updated: 2026-07-01

📝 The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'layoutstyle' parameter in all versions up to, and including, 1.8.12 due to insufficient input sanitization ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40939

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-40938

📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: MotoPress Appointment Booking
🏢 Vendor: jetmonsters
📅 Updated: 2026-07-01

📝 The MotoPress Appointment Booking plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 2.4.5 due to insufficient escaping on the user supplied parameter and lack of ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40938

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxps[:]//ferstingpostale[.]firebaseapp[.]com
🧬 Analysis at: https://urldna.io/scan/6a449ed63b7750000562091e
#cybersecurity #phishing #infosec #urldna #scam #infosec

Cross Resource Group Report Data Breach Following Inadvertent Employee Disclosure

Cross Resource Group disclosed a data leak caused by an employee inadvertently sending sensitive personal information, including Social Security numbers and payroll data, to an unauthorized recipient. The company is offering 24 months of credit monitoring to affected current and former employees.

****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/cross-resource-group-report-data-breach-following-inadvertent-employee-disclosure-v-f-k-q-n/gD2P6Ple2L

Android 17 proves that Android updates have lost their magic

And that's a sign the platform has finally matured.

https://www.androidauthority.com/android-17-proves-updates-lost-magic-3682444/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]