• This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Jul. 13, 2026

    – Listen to the podcast

    Larry Clinton is the President and CEO of the Internet Security Alliance. Since 2001, ISA strives to promote the recognition of cybersecurity as an economic issue, shape effective policy and help translate it into legislation, promote proven standards and best practices, and strengthen cyber resilience across government and industry.

    In a new Cybercrime Magazine Podcast episode, Clinton joins JR Williamson, SVP and Chief Information Security Officer at Leidos, an industry and technology leader serving government and commercial customers with more than 50,000 employees.

    Host Kris Lovejoy, Global Head of Strategy at Kyndryl, the world’s largest provider of IT infrastructure services, leads a discussion on cyber risk oversight in the AI era.

    How resilient is your enterprise in an AI-native world? Listen to these thought leaders and if you still can’t answer, then answer 10 quick questions from Kyndryl to see how you compare to industry leaders.

    Listen to the Podcast Episode



    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post Cyber Risk Oversight in the AI Era: How Resilient is Your Enterprise? appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Internet-wide reconnaissance is expanding beyond conventional application targets to include Model Context Protocol (MCP) services, AI assistant configuration files, and locally exposed LLM endpoints. A 14-day review of Apache and ModSecurity logs from a small, low-traffic shared host found roughly 200 requests tied to AI-agent reconnaissance, alongside routine WordPress, .env, Git, and Spring Boot Actuator […]

    The post Attackers Combine MCP Recon With Cloud Metadata SSRF to Steal Service Account Tokens appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Meta has filed a patent application for an AI that listens to your voice throughout the day, works out how it thinks you are feeling from the way you sound, and keeps a timestamped log of every read. Each read gets pinned to the moment it happened: the time, your location, what you were doing, even how you were using your phone. Some versions in the filing would listen all day; others would

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A few days ago, I was sitting with the CISO of a Fortune 50 company, walking through how his security team was thinking about AI agents in the SOC. Smart team. Serious program. They had already connected Claude to a few detection tools and were seeing real value in specific investigations. But as we mapped out the broader architecture, something kept nagging at me. The design they were building

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Dr.Web details Siggen Windows backdoor that uses Steam for C2, steals credentials and crypto data and infects Visual Studio projects to spread among developers.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibe-coded PowerShell script for Active Directory (AD) enumeration. “The script looked for the Domain Controller (DC) and mapped users, computers, and domains, before creating a directory and exporting out a number of files, and finally creating AD_Report.html to measure the success of the

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Debian Project has released Debian 13.6, the sixth point update for its stable Debian 13 “trixie” distribution. This update, released on July 11, 2026, includes a collection of security fixes, critical bug corrections, and updated installation images. It does not introduce a new version of Debian; existing systems can be upgraded to the latest […]

    The post Debian 13.6 Released With Security Updates for Linux, Apache, Curl, QEMU, and More appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Armored Likho, a previously undocumented threat group also tracked as Eagle Werewolf based on circumstantial evidence, is targeting government institutions and electric-power organizations across Russia, Brazil, and Kazakhstan with a new Python-based infostealer named BusySnake. The group’s activity reflects an unusual overlap between cyber-espionage and financially motivated operations. Armored Likho targets organizations for intelligence collection […]

    The post BusySnake Stealer Uses Reverse SSH Tunnels and AI-Generated Loaders to Evade Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The cloud connectivity that makes big AI models work is also the reason they won’t work in war. As the Marine Corps explores ways to bring AI tools to the battlefield, it is looking at one software company’s proposal to keep troops computing when broader access gets cut off.

    Ditto will announce Monday that the Marines’ Project Dynamis will evaluate their technology for turning radios, cell phones, even drones, into a local network that can keep data flowing and AI tools running locally when cloud access disappears.

    “Ditto's position is that we do not leverage a server-client model,” Eric Hanft, Ditto’s senior vice president for public sector and a former Army infantry officer, said in an interview. “If you continue to architect your data flows around that, you never remove this fundamental dependency that, if two edge nodes need to communicate and have to go to and from a server—and that server is not available—there's no communication.”

    A digital and data communication failure is a nightmare scenario that the United States has largely been able to avoid in past operations. But over the past two decades, those operations have increasingly focused on the Middle East, where the United States did not face adversaries that were capable of disrupting critical communications infrastructure.

    Project Dynamis is the Marine Corps' addition to the Pentagon’s joint all-domain command and control, or JADC2, efforts. Increasingly, such efforts focus on binding troops, satellites, drones, and more in a data web to enable much faster sharing of information and, as a consequence, faster and more successful operations. According to Marine Corps documents about these efforts, they test solutions in situations where communication is “degraded or denied.” But details beyond that, such as whether cloud connectivity itself was denied during experiments or tests, are hard to come by.

    Marine Corps leaders are more likely to discuss the need to move to the cloud. 

    “Implementing cloud on our networks is the critical requirement for CJADC2. Without cloud, JADC2 just is not going to come to fruition,” Col. Jason Quinter, who led Project Dynamis as  commanding officer of Marine Air Control Group 38, said in 2024. 

    As sensors—flying, orbiting, marching—proliferate across the battlefield, and as the military charges ahead with ambitious AI plans to better use that sensed data in combat, the growing reliance on cloud computing makes sense.

    But Ukraine's experience against Russian electronic warfare suggests that cloud architectures are exactly the sort of target high-tech adversaries will come after first.

    That is already becoming a problem for the military as it seeks to put large language models into combat settings. One of Anthropic’s arguments against allowing the Pentagon to use its tools in battle is that if data is wrong or is missing, transformer models may hallucinate the missing pieces. It’s a low-stakes problem when trying to write a term paper, a high-stakes issue in war.

    OpenAI appears to have similar concerns, announcing in March that its own military contracts “would not permit powering fully autonomous weapons, as this would require edge deployment.”

    The Pentagon has responded to such concerns by looking for models less prone to errors on the edge. And the Marines have added a goal to Dynamis: testing assured communication technologies.That’s where Ditto comes in. Hanft argues that relying on the cloud during a conflict is “going to become a problem” no matter which AI company is making the tools. Local networks can help ensure important data aren’t lost when the cloud goes offline, but the military’s existing peer-to-peer tools are limited and difficult to use, he said.

    So Ditto offers a way to use “whatever transports the customer brings—in the case of a commercial environment, that could be the radios that are already built into your phone—and deal with Bluetooth and Wi-Fi. We can create a peer-to-peer data mesh with no new hardware, just, you know, your consumer phones.”

    That aligns with the Pentagon’s efforts to prioritize commercially available or dual-use technology rather than military-specific tech.

    The company was founded eight years ago to connect civilian and commercial devices when their cloud connectivity vanishes, as when, for instance, a business closes its doors for the day because  the credit-card machine is down, he offered by way of example.

    Now it’s trying to apply its methods to the battlefield. Hanft said that the company has already done experiments with U.S. special operations elements and Nordic military forces. He didn’t say whether the company had worked with Ukraine directly but acknowledged that they have “worked in the past with organizations that are operating within those boundaries.”

    "One of the greatest strengths of Project Dynamis is in its methodology. For the last several months we’ve been in a continuous cycle of designing, testing, and refining warfighting solutions—Marines and industry engineers side-by-side—so we can find best-of-breed solutions and get them into the hands of our Marines,” said Col. Arlon Smith, the current director of Project Dynamis, in an early version of Ditto's press release.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two file-upload vulnerabilities, affecting iCagenda and Balbooa Forms, to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation in the wild. The alert was issued on July 10, 2026, identifying these flaws as vulnerabilities that allow unrestricted file uploads of dangerous types. […]

    The post CISA Warns of Actively Exploited iCagenda and Balbooa Forms File Upload Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶