Rubrik has launched a major new offering bringing together identity security with data security, with the debut of its Identity Resilience platform. Identity security vendor Keyfactor announced the acquisitions of two companies that offer cryptography-related technologies, InfoSec Global and CipherInsights, as part of expanding its platform for enabling quantum readiness. In addition, PowerStore is now a self-healing platform, Dell said, with on-board AI that now takes corrective action autonomously to reduce risk, effort and downtime. Omni DLP brings together Cyera’s DSPM (data security posture management) technology with real-time DLP analysis, and the tool can integrate with an organization’s existing security systems, the company said. Oglethorpe is offering one year of credit monitoring services to people whose information may have been exposed.

We enable businesses to mind what really matters – their most sensitive data. MIND is the first-ever data security platform to autonomously discover and classify sensitive data, fix data security issues and stop data leaks in one place, so organizations can put their data loss prevention and insider risk management programs on autopilot. MIND is on a mission to help organizations gain peace of mind and thrive in a digital world in this AI era by protecting their most sensitive data, mitigating data risks and preserving brand reputation. This verification enables MIND to use Claude’s full capabilities to sharpen how the platform discovers sensitive data, detects data security issues and prevents data loss without default limitations on dual-use cybersecurity activities. SEATTLE, May 20, 2026 /PRNewswire/ — MIND™, the AI-native data loss prevention platform, today announced its acceptance into Anthropic’s Cyber Verification Program, becoming the first data security company to achieve this distinction.

• In a blog post published today, the Google Threat Intelligence Group (GTIG) said NetNut’s proxy network is widely resold and white-labeled by a number of third-party proxy providers, and that its services are heavily sought out by cybercriminals seeking to obfuscate the source of their malicious traffic.
• DragonForce posted eighteen victims across eight countries in 48 hours, including a US defense subcontractor, four law firms, and chemical manufacturers.
• A malvertising operation dubbed SourTrade is making victims’ browsers build the final Windows executable themselves, using a legitimate Bun runtime as its base instead of serving one complete malicious file from a fixed URL.
• Responding to questions about Spur’s research, LG Senior Vice President John Taylor told KrebsOnSecurity the company was working with app developers to remove the residential proxy option from their apps on the webOS platform.
• Key product moves from Cohesity have included the debut of on-premises isolated data vaults, targeting customers that are facing strict requirements related to data sovereignty.

Microsoft said this bug has been detailed publicly, but that it is not aware of any active exploitation. Nearly 60 of the bugs quashed in July’s Patch Tuesday earned a “critical” severity rating, meaning miscreants or malware could use them to seize remote control over a Windows device with little or no help from the user. “As part of our ongoing efforts to enhance platform quality and the user experience, LG will continue to strengthen our evaluation process for developer-submitted apps, including those that incorporate residential proxy SDKs,” Taylor wrote in an emailed statement. The move comes less than a month after researchers found that more than 42 percent https://scale-models.net/the-risks-of-collecting-what-you-need-to-know/ of games and other apps available for download on LG’s webOS store allow unknown third-parties to route their Internet traffic through a user’s TV. Surveillance technology creates and perpetuates injustices across the legal system in the US, the ACLU says Hackers accessed insurance, treatment, and personal data months before victims were finally notified.

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

More concerning, some of these proxy networks do little to stop malicious customers from communicating with and even compromising systems on the local network of the unsuspecting device owner. Malicious streaming devices sold online that enroll the user’s home Internet address https://montsec.info/zero-party-data-the-structural-reset-of-privacy-and-personalization/ in a residential proxy service. New Jersey prosecutors also allege Jubair also was involved in a mass SMS phishing campaign during the summer of 2022 that stole single sign-on credentials from employees at hundreds of companies. The group would then use that access to sell a service that could redirect a target’s phone number to a device the attackers controlled and intercept the victim’s calls and text messages (including one-time codes for multi-factor authentication).

Sectigo unveiled a platform aimed at helping to enable the transition to quantum-resistant cryptography with the launch of Sectigo PQC Labs. Saviynt offers a converged platform for identity security and management that aims to serve as a modern, cloud-based alternative to “legacy” identity systems, the company said. SailPoint rolled out enhanced capabilities for its Identity Security Cloud platform including new functionality in the area of Non-Employee Risk Management, providing protection for the “extended workforce,” the company said. The offering provides defense against threats impacting both human and non-human identities, the company said, starting with identity recovery capabilities. The offering also delivers protection against agentic threats through detection and mitigation capabilities, Ping Identity said. Okta unveiled an expansion of its privileged access management capabilities with the acquisition of Axiom Security, driven by the shift to agentic AI and demand for a consolidated identity platform.

Svara used two-factor authentication to lock victims out of their Snapchat accounts. Chick-fil-A has confirmed a customer data breach after credential stuffing attacks compromised an undisclosed number of Chick-fil-A One accounts and exposed personal information. A threat actor claims to have stolen 32 million database rows from PeakManager while offering customer data, source code, and internal access for sale.

The China-linked cybercrime group behind the use of income tax-related phishing lures targeting Indian taxpayers, tax professionals, and corporate finance teams has been observed using a sophisticated crypter service called https://dailyscreak.com/what-are-the-benefits-and-drawbacks-of-cloud-hosting-solutions.html Cruciferra . Cybersecurity researchers have flagged a Microsoft Teams-themed phishing campaign that employs “secure document” lures to deliver legitimate remote monitoring and management ( RMM ) tools. N8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform. This week, trusted tools crossed lines, old flaws found new work, exposed systems stayed exposed, and attackers kept hiding inside normal-looking services. VBulletin issued security patches for 6.2.1, 6.2.0, and 6.1.6 at the end of June and released the fixed version 6.2.2 on July 1, nearly four weeks before the exploit went public Administrators running self-hosted installations should apply the patch for their branch or upgrade to 6.2.2.

MedusaHVNC Malware Uses Hidden Windows Desktops to Evade Detection

Russian state-supported cyber actors conduct phishing campaign targeting users of Zimbra Collaboration Suite GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents. GitHub has introduced a default cooldown period for Dependabot version updates to decrease the risk of organizations automatically adopting malicious or compromised open-source dependencies… A newly uncovered cluster of more than 70 impersonation domains targeting popular Windows applications is raising fresh concerns about a scalable malware distribution campaign…

From there, the video shows the attacker told the bot to link the account in question to a new email address, after which the bot dutifully sent that address a one-time code that allowed a password reset. Two of the zero-days addressed this month appear to stem from recent vulnerability disclosures by Nightmare Eclipse, the nickname chosen by a security researcher who has been dropping exploits for various Windows flaws. “Some surveys put AI usage among security professionals generally at 90%, so it’s unsurprising that this volume of patches may be the norm,” Narang said. Nearly three dozen of those bugs earned Microsoft’s most dire “critical” rating, and exploit code for at least three of the weaknesses is now publicly available.

“The SDKs at issue are designed to facilitate bandwidth-sharing functionality and do not transform user devices into malware-controlled systems or otherwise compromise the devices on which they operate,” the statement reads. “The research team assesses with high confidence that devices running Popa forward traffic from Netnut clients,” Synthient wrote. The first clues about Popa’s origins came in a 2025 report from the Chinese security company XLAB, which flagged at least nine domain names that were used to register and direct the activities of compromised devices.

GitLab RCE Flaws Allow Attackers to Execute Commands via Malicious Jupyter Notebooks

Data Breach Report Victim brazeringenierie.com Threat Actor ArcusMedia Date Discovered Jul 27, 2026 Description Brazer Ingenierie is a technology and telecommunications services … New SharePoint flaw exploited as attackers steal machine keys for lasting access. In what OpenAI said was the first-ever incident of its kind, an advanced AI model escaped its “sandbox” to the internet and used stolen credentials to break into the servers of Hugging Face.

These devices, which are marketed under thousands of brand names and model numbers and broadly available for purchase at top e-commerce destinations, all advertise the ability to stream hundreds of subscription video services for an up front one-time fee. The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor published dozens of internal CISA credentials — including AWS Govcloud keys — in a public GitHub repository for almost six months before being notified by KrebsOnSecurity. Thousands of vulnerable industrial devices, accessible from the public internet, are being targeted by Iran-linked hackers, U.S. authorities said this week. Instead of harvesting credentials for later use, attackers now synchronize their activity with victims in real time, authenticating against legitimate insurance portals as victims unknowingly complete the login process. A malvertising operation dubbed SourTrade is making victims’ browsers build the final Windows executable themselves, using a legitimate Bun runtime as its base instead of serving one complete malicious file from a fixed URL. Cybersecurity researchers have flagged fresh malicious cyber activity by a threat actor with ties to East Asia targeting government entities in the Middle East.