Author: nitya

Cybersecurity researchers have uncovered a new attack technique called Phantom Squatting, where cybercriminals take advantage of web addresses that artificial intelligence (AI) models mistakenly generate. Instead of relying on fake domains that closely resemble real ones, attackers register domains that never actually existed but are repeatedly suggested by AI systems. Researchers say this creates a … Continued

Cybersecurity researchers have uncovered a massive password spray campaign targeting Microsoft’s Azure Command-Line Interface (Azure CLI). According to Huntress, the attackers carried out more than 81 million login attempts between June 12 and June 26. The campaign successfully compromised at least 78 Microsoft user accounts across 64 different organizations. Researchers believe the attack is still … Continued

Citrix has released security updates to fix six vulnerabilities affecting NetScaler ADC and NetScaler Gateway appliances. According to the company, these flaws could allow attackers to read sensitive files without authentication or cause affected systems to stop responding through denial-of-service (DoS) attacks. The vulnerabilities impact several NetScaler deployments depending on how they are configured. Citrix … Continued

Anthropic has restored global access to its Claude Fable 5 AI model after the U.S. Department of Commerce removed the export controls that had been introduced in mid-June. The restrictions were lifted on June 30, allowing the company to begin bringing the model back online from July 1. Claude Fable 5 is now being restored … Continued

American insurance company Aflac has disclosed a new cybersecurity incident after hackers gained unauthorized access to systems belonging to its Japan subsidiary. According to the company, the breach was discovered on June 25, 2026, following suspicious activity that occurred between June 15 and June 25. The company confirmed that an unauthorized third party accessed certain … Continued

A newly discovered cyberattack campaign is exploiting a critical security flaw in SimpleHelp remote monitoring and management (RMM) software to install two previously unknown malware families named TaskWeaver and Djinn Stealer. The vulnerability, tracked as CVE-2026-48558, has received the highest possible CVSS score of 10.0 because it allows attackers to gain unauthorized access without valid … Continued

A new security study has revealed a major problem affecting AI-powered iPhone applications. Researchers from Wake Forest University found that 282 out of 444 iOS apps using large language model (LLM) features exposed sensitive API credentials or backend access during normal network communication. The issue was discovered after examining hundreds of AI-enabled apps across the … Continued

A new security study has revealed a serious weakness in many popular open-source AI coding agents. Researchers from Adversa AI named this issue GuardFall, describing it as a structural security problem rather than a single software bug. The flaw allows attackers to use decades-old Bash shell techniques to bypass safety checks built into AI coding … Continued

A cyber espionage campaign linked to the China-aligned hacking group Mustang Panda has been found targeting Indian government organizations. Security researchers discovered that the attackers used Zoho WorkDrive, a trusted cloud storage service, as part of their command-and-control infrastructure. By relying on a legitimate cloud platform instead of suspicious servers, the attackers attempted to make … Continued

The United States has announced a reward of up to $10 million for information that helps identify or locate members of two Russian-linked cyber groups accused of targeting Signal and WhatsApp users. The reward is being offered through the U.S. State Department’s Rewards for Justice program. According to U.S. authorities, the campaign mainly targeted government … Continued