Your Daily Dose of Cybersecurity News

Data Breaches

Novo Nordisk Breached: Ozempic Maker Suffers 264 GB Data Leak

They allegedly breached Novo in March via a GitHub access token that let it clone the company's repositories and find additional credentials.

Jul 5, 2026 · SecurityXP

AI/ML Security

AI-Enabled Hacker Caught: Leaked Prompts Expose Resume and IP Address

A fully AI-enabled hacker was caught, revealing his full system prompts, which included his resume and his IP address.

Jul 5, 2026 · SecurityXP

AI/ML Security

Threat Modeling Generative AI: What 11,658 Incidents Reveal About Real-World Risk

Instead, improper output handling (42%) and misinformation/misuse (35%) represent the vast majority of actual incidents.

Jul 5, 2026 · SecurityXP

Latest News

Vulnerabilities & ExploitsJul 4, 2026·4 min read

bingo-ai 3.6.3 Vulnerability

Blind Signing / EIP-7730 (Bybit $1.5B Attack Vector) The Bybit $1.5B hack (Feb 2025) exploited a Safe multisig blind signing flaw: - Attackers changed...

TechnologyJul 2, 2026·3 min read

Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures Malware

This malware employs sophisticated techniques to evade detection and steal banking credentials, The Hacker News reports.The Ousaban campaign begins with a phishing PDF disguised as a corrupted file, p...

TechnologyNO IMAGE

TechnologyJul 2, 2026·3 min read

Secure Amazon container workloads using container attribute-based rules in AWS Network Firewall

If you run AI and machine learning (ML) workloads on Amazon EKS, such as model inference, RAG pipelines, or JupyterHub, your containerized workloads require the same firewall protections you enforce f...

TechnologyNO IMAGE

Vulnerabilities & ExploitsJul 1, 2026·4 min read

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer Vulnerability

"Credentials accessible from a developer or administrator workstation may provide entry into production infrastructure, build pipelines, source code...

Vulnerabilities & ExploitsJun 24, 2026·3 min read

Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild Vulnerability

Cisco Unified Communications Manager has a serious vulnerability, tracked as CVE-2026-20230 (CVSS score of 8.6), that attackers are already exploiting. The...

Cloud SecurityJun 24, 2026·3 min read

From Platform to Program: How to Ensure Your Cloud Security Solution Delivers

Orca’s 2026 State of Application Security Report found that 77% of organizations retain high or critical container vulnerabilities for more than 90 days, a...

CybercrimeJun 23, 2026·3 min read

Scattered Spider Hackers Plead Guilty on Day 1 of Trial Cybercrime

According to the NCA, the cyberattack at TfL forced all 28,000 employees to visit their local offices to reset their passwords and caused £29 million...

Cloud SecurityJun 23, 2026·3 min read

AWS Warns Outbound Traffic Blind Spots Can Enable Cloud Data Exfiltration Cloud Security

The AWS report shared with Cyber Security News (CSN) points to cases where unpatched vulnerabilities, such as CVE-2025-55182 (React2Shell), allowed attackers...

Data BreachesJun 22, 2026·3 min read

Texas Parks & Wildlife Data Breach Affects 3 Million Individuals

Related: Data Breaches at Healthcare Organizations in Illinois and Texas Affect 600,000 Related: 377,000 Impacted by Data Breach at Texas Gas Station Firm...

Application SecurityJun 22, 2026·2 min read

On-Premises API Security on Kubernetes: What It Actually Looks Like in Practice App Security

PCI DSS 4.0.1 now requires continuous API security testing and maintained API inventories. (These PCI DSS 4.0.1 requirements became mandatory on March 31...

Cybersecurity Careers / WorkforceJun 22, 2026·1 min read

Sunil Varkey Joins Hexaware Technologies as EVP & CISO Cybersecurity Careers

His responsibilities align with Hexaware Technologies’ broader technology and growth objectives as the company continues to support large-scale digital...

Vulnerabilities & ExploitsJun 21, 2026·4 min read

Week in review: 74k Fortinet firewall credentials stolen, Splunk Enterprise RCE under active attack

Microsoft working on patch for RoguePlanet Defender zero-day (CVE-2026-50656) Microsoft has acknowledged the local elevation of privilege issue in Microsoft...

Malware & RansomwareJun 21, 2026·3 min read

GentleKiller Ransomware Abuses Vulnerable Drivers to Disable 400+ EDR Security Processes Malware

This rapid adoption distinguishes Gentlemen from most other RaaS operators, who typically wait weeks or months before adapting publicly released exploits...

CybercrimeJun 21, 2026·2 min read

Nancy Guthrie Case Reframed by Crypto Firm's "Wrench Attack" Label as Police Confirm Motive Pending

In it, CertiK described Nancy Guthrie's kidnapping as part of a "$6 million bitcoin ransom demand" and tied it to what the company called "the documented...

Malware & RansomwareJun 21, 2026·3 min read

Virus vs Worm: Why the Propagation Difference Actually Matters Malware

But no detection tool replaces patching: the vulnerability that WannaCry used had a patch available for eight weeks before the attack. In 1988, the Morris...

Vulnerabilities & ExploitsJun 21, 2026·1 min read

Vulnerability response: Built for humans, outpaced by machines.

Frontier models now discover and chain vulnerabilities faster than human analysts can confirm them, and the gap between finding and fixing is shrinking in...

Cybersecurity Careers / WorkforceJun 21, 2026·1 min read

6 years Fullstack Dev, 1 week into bug bounty, zero findings. How long did your first valid bug take?

Dev-to-hunter transition: Any other devs here who struggled with the mindset shift from "making things work" to "breaking things intentionally"? What I've...

ResearchJun 21, 2026·2 min read

Privacy-Preserving Outsourced Witness Updates for Append-Only RSA Accumulators Security Research

In this paper, we present a privacy-preserving outsourced witness-update protocol for append-only RSA accumulators. The protocol combines witness updates...

Cyberwarfare / Nation-StateJun 21, 2026·1 min read

Navigating the GPS threat landscape, with Brandon Karpf. Cyberwarfare

If this research is accurate, these attacks represent a significant evolution for how defenders think about this critical technology. Key sources: -...

ResearchJun 21, 2026·3 min read

Google Shor's Algorithm Obfuscation Broken: LLM Crowdsourcing Outperforms ZKP-Verified Benchmark by 44%

An open-source contest utilizing Large Language Models (LLMs) has successfully reverse-engineered and optimized Google Quantum AI's restricted Shor's algorithm circuit optimization, exceeding Google's obfuscated benchmark by 44.0%.

Visualization of ZKP verification and crowdsourced LLM quantum circuit optimization

Security Digest

Get the latest cybersecurity news, vulnerability alerts, and threat intelligence delivered to your inbox.

SecurityXP — Cybersecurity News, Threat Intelligence & Infosec Utilities

Novo Nordisk Breached: Ozempic Maker Suffers 264 GB Data Leak

AI-Enabled Hacker Caught: Leaked Prompts Expose Resume and IP Address

Threat Modeling Generative AI: What 11,658 Incidents Reveal About Real-World Risk

Latest News

bingo-ai 3.6.3 Vulnerability

Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures Malware

Secure Amazon container workloads using container attribute-based rules in AWS Network Firewall

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer Vulnerability

Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild Vulnerability

From Platform to Program: How to Ensure Your Cloud Security Solution Delivers

Scattered Spider Hackers Plead Guilty on Day 1 of Trial Cybercrime

AWS Warns Outbound Traffic Blind Spots Can Enable Cloud Data Exfiltration Cloud Security

Texas Parks & Wildlife Data Breach Affects 3 Million Individuals

On-Premises API Security on Kubernetes: What It Actually Looks Like in Practice App Security

Sunil Varkey Joins Hexaware Technologies as EVP & CISO Cybersecurity Careers

Week in review: 74k Fortinet firewall credentials stolen, Splunk Enterprise RCE under active attack

GentleKiller Ransomware Abuses Vulnerable Drivers to Disable 400+ EDR Security Processes Malware

Nancy Guthrie Case Reframed by Crypto Firm's "Wrench Attack" Label as Police Confirm Motive Pending

Virus vs Worm: Why the Propagation Difference Actually Matters Malware

Vulnerability response: Built for humans, outpaced by machines.

6 years Fullstack Dev, 1 week into bug bounty, zero findings. How long did your first valid bug take?

Privacy-Preserving Outsourced Witness Updates for Append-Only RSA Accumulators Security Research

Navigating the GPS threat landscape, with Brandon Karpf. Cyberwarfare

Google Shor's Algorithm Obfuscation Broken: LLM Crowdsourcing Outperforms ZKP-Verified Benchmark by 44%

Security Digest