threat-intel Multiples vulnérabilités dans les produits Elastic (22 juillet 2026) Multiple vulnerabilities have been discovered in Elastic products, including Elasticsearch and Kibana. These vulnerabilities can lead to data integrity compromise, data confidentiality breaches, and denial-of-service att… CERT-FR · Jul 22, 2026 High CVE-2018-17245CVE-2026-42397CVE-2026-49092vulnerabilityssrfelastic
threat-intel Ransomware Is Accelerating, But It's Not Because of AI Ransomware activity is surging, with a 25% increase in incidents between April 2025 and March 2026, driven by a fragmented ecosystem and the emergence of numerous new groups. Black Kite researchers found that many victim… Dark Reading · Jul 21, 2026 High USEUransomwarevulnerabilitysupply-chain
threat-intel Using LLMs to Find and Prioritize Vulnerabilities Is No Easy Task Large language models (LLMs) are not effectively addressing vulnerability prioritization for application security teams, with a significant number of flagged vulnerabilities proving to be false positives or irrelevant du… Dark Reading · Jul 21, 2026 Medium aivulnerabilityappsec
threat-intel Cisco's open-weight bug busters take on Google and OpenAI This article covers a variety of cybersecurity and technology news items, including Cisco's efforts to compete with Nvidia's AI hardware, a security breach involving Joomla extensions, and various other developments in t… The Register · Jul 21, 2026 Medium securitycybersecurityjoomla
threat-intel AI's cheatin' heart will make you weep This article covers a range of cybersecurity and technology news, including AMD's challenge to Nvidia in AI compute, security vulnerabilities in Joomla extensions, a Russian phishing campaign mimicking Signal support, an… The Register · Jul 21, 2026 Medium USIRSWcybersecurityphishingransomware
threat-intel DNI nominee Clayton wins Senate panel’s approval The Senate Intelligence Committee has approved Jay Clayton as the next Director of National Intelligence. This approval paves the way for a full Senate vote, potentially enabling the renewal of Section 702 of the FISA Ac… The Record · Jul 21, 2026 Info fisasurveillancenational security
threat-intel Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs Apple has finally fixed a significant security flaw in its Hide My Email service, which allowed real email addresses to be exposed in mail logs. The issue stemmed from sending a rejected spam email to a Hide My Email use… The Hacker News · Jul 21, 2026 Medium privacysecurityicloud
threat-intel Hacker Turns AI Jailbreaks Into Offensive Attack Platform A Russian-speaking cybercriminal, known as ‘Trim,’ successfully weaponized publicly available AI language models to create a commercial offensive cybertooling platform. By developing and publishing jailbreaking technique… Dark Reading · Jul 21, 2026 High RUaijailbreakoffensive-security
threat-intel Cisco Launches Low-Cost AI Models for Source Code Security Cisco has launched Antares, a new small language model (SLM) designed to assist security teams in identifying known vulnerabilities within codebases. Antares is an open-weight model, aiming to provide a cost-effective an… SecurityWeek · Jul 21, 2026 Medium aivulnerabilitycode-security
threat-intel Kratos phishing-as-a-service kit loses its battle with international law enforcement International law enforcement agencies have taken down a phishing-as-a-service kit operated by Russian threat actors, who were using it to launch attacks mimicking Signal support. The kit exploited vulnerabilities in Joo… The Register · Jul 21, 2026 Medium RUphishingjoomlaopen source
threat-intel AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code A security flaw in AWS Kiro, an AI coding assistant, allowed an attacker to rewrite its configuration file and execute arbitrary code on a developer's machine simply by inserting malicious text into a seemingly innocuous… The Hacker News · Jul 21, 2026 High CVE-2026-10591prompt-injectionai-securitycode-execution
threat-intel Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities Google has launched Gemini 3.5 Flash Cyber, a specialized AI model designed to rapidly identify and fix software vulnerabilities. This AI model, accessible only to governments and trusted partners through CodeMender, sig… The Hacker News · Jul 21, 2026 High aivulnerabilitycybersecurity
threat-intel Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access Threat actors are exploiting a vulnerability in Palo Alto Networks PAN-OS to gain initial access and deploy Qilin ransomware. The vulnerability, CVE-2026-0257, allows unauthenticated remote access, leading to widespread… The Hacker News · Jul 21, 2026 High CVE-2026-0257ransomwarevulnerabilityvpn
threat-intel Captive Portal Detection, (Tue, Jul 21st) This article details how operating systems and browsers detect captive portals – the splash screens that appear when connecting to public Wi-Fi networks. Instead of intercepting old non-TLS homepages, these systems now… SANS Internet Storm Center · Jul 21, 2026 Medium captive portalwifinetwork detection
threat-intel Taiwan to slow mobile data during national resilience drills Taiwan is conducting a national resilience drill to simulate communication disruptions, primarily targeting mobile data services, to prepare its citizens for potential network outages during emergencies, especially in th… The Record · Jul 21, 2026 Info TWresiliencecommunicationsdisruption
threat-intel A new extortion cocktail: office printers, small ransoms, and BitLocker Two separate incidents – one in Colombia and another in Mexico – highlight a concerning trend of attackers leveraging misconfigured systems and built-in Microsoft tools to deploy BitLocker encryption and demand ransom pa… Securelist · Jul 21, 2026 High COMXransomwarebitlockerrdp
threat-intel Choose Wisely: AI-Generated Coding Risk Varies, A Lot A Secure Code Warrior study revealed that AI-generated code introduces a significant number of vulnerabilities – an average of 15 per codebase – but the risk varies greatly depending on the development framework used. Th… Dark Reading · Jul 21, 2026 Medium aicodevulnerability
threat-intel Intel fortifies Foundry with an actual customer: Fortinet This article covers a range of cybersecurity and technology news, including AMD's challenge to Nvidia's AI compute platform, a Russian phishing campaign mimicking Signal support, and a security acquisition by EQT in the… The Register · Jul 21, 2026 Medium vulnerabilityphishingransomware
threat-intel Empirical Security Raises $25 Million in Series A Funding Cybersecurity startup Empirical secured $25 million in Series A funding to bolster its AI-powered threat prediction and risk management solutions. The company, founded by former Kenna Security executives, aims to address… SecurityWeek · Jul 21, 2026 Info aivulnerabilityrisk management
threat-intel SecurityWeek Launches Critical Impact Awards to Recognize Excellence in Industrial Cybersecurity SecurityWeek is launching a new award program, the Critical Impact Awards, designed to recognize genuine achievements and contributions in industrial cybersecurity, moving away from traditional, commercially influenced a… SecurityWeek · Jul 21, 2026 Info industrial cybersecurityawardsrecognition
