Security news

• Today's NYT Mini Crossword Answers for Sunday, Dec. 21

  21-12-2025 04:41 via cnet.com
  Here are the answers for The New York Times Mini Crossword for Dec. 21.
  
  Read more

• How to Map Controls Across Frameworks Without Losing Meaning

  23-08-2026 20:56 via scworld.com
  
  Move Beyond Crosswalks to Control-Based Compliance
  
  Read more

• TrueConf flaws enabling attacks on meeting participants added to KEV catalog

  22-08-2026 01:15 via scworld.com
  
  The flaws have been used by the Head Mare APT hacktivist group to spread PhantomCore malware.
  
  Read more

• Secure AI agent identity in private cloud and hybrid environments

  21-08-2026 23:29 via scworld.com
  
  Ping Identity adds self-managed identity controls to secure and govern AI agents in regulated environments.
  
  Read more

• Advertisement

• Navy warns of multi-pronged adversary campaign targeting personnel and installations

  21-08-2026 23:02 via scworld.com
  
  The campaign includes direct threats and harassment via social media, doxing, drone activity near Navy assets, ground-level surveillance, physical attacks, and probes of security measures.
  
  Read more

• New Agent Tesla malware version uses emoji obfuscation to evade detection

  21-08-2026 22:58 via scworld.com
  
  The latest Agent Tesla campaign utilizes a JScript dropper that incorporates Unicode emoji characters to disrupt signature-based detection and obscure the malicious code.
  
  Read more

• Army seeks AI agents for cyber defense amid evolving threats

  21-08-2026 22:58 via scworld.com
  
  Project Griffin, also known as the Intelligent Response and Orchestration Node (IRON), is a pilot program designed to create an ecosystem of AI agents capable of analyzing data from the Army's extensive network sensors and autonomously executing defensive actions.
  
  Read more

• Researchers find way to weaponize Windows Defender's own driver

  21-08-2026 22:52 via scworld.com
  
  Check Point Research disclosed a technique that uses Microsoft Defender's boot-time remediation driver, BTR.sys, to perform arbitrary kernel-level file and registry operations on Windows 7 through Windows 11 25H2.
  
  Read more

• Advertisement

• A ‘kill switch’ law only makes sense for a worst-case scenario

  20-08-2026 03:15 via scworld.com
  
  Congress wants an AI ‘kill switch’ – but we really need identity-based access.
  
  Read more

• The CISO Doesn't Own the Outcome: A Shared-Accountability Model for Security Decisions

  19-08-2026 21:51 via scworld.com
  
  Align Security Accountability with Decision Authority
  
  Read more

• Medusa ransomware group attacked more than 500 victims since 2021

  19-08-2026 20:31 via scworld.com
  
  Medusa ransomware hit 500-plus victims, exploiting critical flaws at increasing speed.
  
  Read more

• Perspective and lessons learned from mergers and acquisitions

  19-08-2026 18:45 via scworld.com
  
  M&A success depends on product fit, cultural alignment and disciplined post-deal execution.
  
  Read more

• Geekom admits malware found in legacy mini PC driver download

  19-08-2026 16:20 via scworld.com
  
  The compromised LAN driver, hosted on a legacy support page, allowed the Asruex backdoor to operate with administrator-level permissions.
  
  Read more

• Microsoft removes WMIC tool from Windows 11

  19-08-2026 16:12 via scworld.com
  
  WMIC, a legacy command-line utility for interacting with Windows Management Instrumentation (WMI), has been progressively phased out.
  
  Read more

• Critical vulnerability in Ray framework allows remote code execution

  19-08-2026 16:06 via scworld.com
  
  The vulnerability, rated 9.4 under CVSS v4, was disclosed in November 2025 and allows attackers to exploit browsers like Firefox and Safari to achieve remote code execution (RCE) on a vulnerable Ray system.
  
  Read more

• CISA explores single contract for cybersecurity software purchases

  19-08-2026 15:38 via scworld.com
  
  CISA is currently acquiring these tools through the Continuous Diagnostics and Mitigation program and its Capacity Building arm.
  
  Read more

• Heights Finance data breach impacts over 700,000 customers

  19-08-2026 15:28 via scworld.com
  
  The breach, which occurred on May 7, 2026, exposed the personal and financial information of potentially over 730,000 Texans, and affected individuals in Alabama, Tennessee, Georgia, and South Carolina.
  
  Read more

• ‘TWINLOOT’ Python implant abuses Microsoft services for stealthy C2

  19-08-2026 15:08 via scworld.com
  
  The implant ensures defenders only see legit Microsoft services rather than unknown external domains, making it more challenging to block attacks.
  
  Read more

• Okta to acquire identity threat detection startup Permiso Security

  31-07-2026 01:51 via scworld.com
  
  The acquisition aims to integrate Permiso’s technology for detecting and mitigating identity threats across human, non-human, and agentic identities into Okta’s existing platform.
  
  Read more

• UK Department for Education confirms data breach affecting over 600,000 records

  31-07-2026 01:48 via scworld.com
  
  The breach, claimed by the ExfilSquad hacking group, exposed names, job titles, and phone numbers of head teachers, university staff, and government officials.
  
  Read more

• AI amplifies dangling DNS takeover risks, research shows

  31-07-2026 01:46 via scworld.com
  
  Security firm Silent Push's research, dubbed "DangleGeddon," utilized AI to massively expand the discovery of vulnerable domains and subdomains.
  
  Read more

• Russia charges Telegram CEO Pavel Durov with aiding terrorism

  31-07-2026 01:43 via scworld.com
  
  The Kremlin claims Telegram facilitated "acts of sabotage and terrorism, mass murder, and cyber fraud," resulting in "numerous human casualties."
  
  Read more

• Australian privacy watchdog clarifies rules on facial recognition in retail

  31-07-2026 01:41 via scworld.com
  
  The OAIC's updated guidance clarifies exceptions to consent obligations for Australian Privacy Principle (APP) entities considering facial recognition in retail settings.
  
  Read more

• FTC sues Hims & Hers for alleged deceptive privacy practices and data sharing

  31-07-2026 01:40 via scworld.com
  
  The lawsuit alleges that Hims & Hers placed pixel-sized trackers from Meta, Snap, Microsoft, Pinterest, Reddit and X on its website.
  
  Read more

• Silver Fox group uses new drivers in BYOVD attacks against Japanese manufacturer

  31-07-2026 01:35 via scworld.com
  
  The attack chain begins with a phishing lure disguised as an invoice, utilizing attacker-controlled content hosted on legitimate QQ and Tencent Cloud services.
  
  Read more

• Sysadmin AI adoption lags behind 2024 predictions

  31-07-2026 01:32 via scworld.com
  
  The Action1 2026 Survey Report highlights significant gaps between 2024 predictions and 2026 reality for AI adoption in IT workflows.
  
  Read more

• UK cybersecurity agency urges manufacturers to improve device forensic observability

  31-07-2026 01:26 via scworld.com
  
  The NCSC highlights that network devices like firewalls and VPN gateways are increasingly targeted by attackers.
  
  Read more

• Brinks Home confirms data breach after ShinyHunters claims attack

  31-07-2026 01:26 via scworld.com
  
  Brinks Home identified the attack on July 20, though the ShinyHunters extortion gang claimed the breach occurred on July 13.
  
  Read more

• Inside Samsung HQ: An Early Look at the Galaxy Z Fold 8 Hints at the Future of Foldables

  22-07-2026 15:00 via cnet.com
  
  Samsung's bold design shift shows how consumer needs are reshaping the foldables category. I was among the first outside Samsung to see its new lineup in Korea.
  
  Read more

• Today's Wordle Hints, Answer and Help for July 22, #1859

  21-07-2026 22:00 via cnet.com
  
  Here are hints and the answer for today's Wordle for July 22, No. 1,859.
  
  Read more

Follow @newloc_security on Twitter!