threat-intel Two Scattered Spider Hackers Sentenced to Jail in UK Two members of the Scattered Spider cybercrime group, Thalha Jubair and Owen Flowers, were sentenced to prison in the UK for their role in a 2024 attack on Transport for London, resulting in significant financial losses.… SecurityWeek · Jul 16, 2026 High UKUSEScybercrimeukscattered spider
threat-intel HelloNet campaign — new malicious modules launched through the ViPNet update system A Chinese-speaking Advanced Persistent Threat (APT) group, likely operating since May 2026, has been targeting Russian organizations using a sophisticated campaign centered around the ViPNet software suite. The campaign… Securelist · Jul 16, 2026 High CHaptdll hijackingprocess injection
threat-intel AI Data Centers Are Being Built Faster Than They Can Be Secured A Lava Labs report highlights significant security risks associated with the rapid growth of AI data centers, arguing that these new facilities are being built without adequately addressing the unique vulnerabilities ste… SecurityWeek · Jul 16, 2026 High aidata centersecurity
threat-intel New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands A new modular malware, TELEPUZ, is spreading via ClickFix lures and is being developed by a solo developer or small team. The malware steals data, runs commands, and evades detection through various techniques, including… The Hacker News · Jul 16, 2026 High BRINclickfixpastejackingmalware-as-a-service
threat-intel ‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing ClickLock Stealer, a new macOS malware, bypasses macOS security through social engineering and aggressive process killing to steal sensitive data, including browser data, cryptocurrency wallets, and password manager info… SecurityWeek · Jul 16, 2026 High DEFRITmacossocial engineeringprocess killing
threat-intel New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password A new macOS infostealer, dubbed ClickLock Stealer, is actively targeting users by forcing them to enter their passwords repeatedly through a loop of killing apps. The malware, a copy of GSocket, uses a deceptive Cloudfla… The Hacker News · Jul 16, 2026 High EUmacosinfostealerpassword
threat-intel GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration A sophisticated, evolving threat actor, potentially linked to TetrisPhantom, has been targeting government and diplomatic entities in Southeast Asia since late 2025 with a campaign utilizing tools like GoSerpent, Stowawa… Securelist · Jul 16, 2026 High VNTHproxyremote accessdata exfiltration
vulnerability Rockwell Automation 1756-EN2, 1756-EN3, and 1756-ENBT Rockwell Automation has released a vulnerability in its 1756-EN2, 1756-EN3, and 1756-ENBT communication modules. Exploitation could lead to a denial-of-service condition. Users are advised to update to the latest version… CISA Advisories · Jul 16, 2026 High CVE-2026-9653vulnerabilitycontrol systemscisa
vulnerability SALTO ProAccess Space A critical vulnerability (CVE-2026-11889) exists in SALTO ProAccess Space versions prior to 6.13, allowing an authenticated attacker to escalate privileges and gain unauthorized access to spaces beyond their assigned par… CISA Advisories · Jul 16, 2026 Critical CVE-2026-11889WOvulnerabilityprivilege escalationcve-2026-11889
vulnerability Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix Several vulnerabilities exist in Rockwell Automation's CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers. Successful exploitation could lead to a denial-of-service condition due to an invalid pro… CISA Advisories · Jul 16, 2026 High CVE-2025-12011CVE-2025-12012CVE-2025-11698firmwarecontrol-systemdenial-of-service
vulnerability Rockwell Automation Arena Rockwell Automation has released an advisory regarding critical vulnerabilities in its Arena simulation software. Specifically, versions up to V17.00.00 are affected by memory corruption flaws that could allow an attacke… CISA Advisories · Jul 16, 2026 High CVE-2026-8085CVE-2026-8312CVE-2026-8313vulnerabilitycontrol-systemmemory-corruption
vulnerability NASA Core Flight System (cFS) Health & Safety (HS) Application NASA has issued an advisory regarding a vulnerability in its Core Flight System (cFS) Health & Safety (HS) Application, potentially leading to denial-of-service conditions. The vulnerability, identified as a segmentation… CISA Advisories · Jul 16, 2026 Medium CVE-2026-15352vulnerabilitysegmentation faultcisa
threat-intel Siemens SICAM 8 Siemens has released security advisories detailing multiple vulnerabilities in its SICAM 8 industrial control system firmware and related components. These vulnerabilities could allow an attacker to cause denial of servi… CISA Advisories · Jul 16, 2026 High CVE-2026-54798CVE-2026-54799CVE-2026-54800vulnerabilityfirmwareindustrial control systems
vulnerability AutomationDirect Productivity Suite AutomationDirect Productivity Suite versions 4.6.2.2 and earlier are vulnerable to multiple out-of-bounds read and write vulnerabilities, potentially leading to kernel memory corruption, privilege escalation, system inst… CISA Advisories · Jul 16, 2026 High CVE-2026-60063CVE-2026-61389CVE-2026-60140cvevulnerabilityioctl
threat-intel Scattered Spider hackers sentenced to 5.5 years over £29 million Transport for London hack Two members of the Scattered Spider cybercrime group, Thalha Jubair and Owen Flowers, have been sentenced to over five years in prison for their role in a 2024 attack against Transport for London (TfL). The attack caused… The Record · Jul 16, 2026 High UNcybercrimeransomwaredata breach
vulnerability Rockwell Automation FactoryTalk DataMosaix Rockwell Automation has issued a security advisory regarding a critical vulnerability (CVE-2026-9292) in its FactoryTalk DataMosaix Private Cloud software. An authenticated attacker can inject malicious scripts that are… CISA Advisories · Jul 16, 2026 Critical CVE-2026-9292cve-2026-9292xsscwe-79
vulnerability Rockwell Automation Flex 5000 Adapter Rockwell Automation has released a security advisory regarding a denial-of-service vulnerability in its Flex 5000 Adapter software. Exploitation could lead to a denial-of-service condition, and Rockwell recommends upgrad… CISA Advisories · Jul 16, 2026 High CVE-2026-12659vulnerabilitydenial-of-servicecontrol systems
threat-intel 20+ Hijacked Government Websites Became an Attack Channel A sophisticated campaign, dubbed PhantomEnigma, has hijacked over 20 Brazilian government websites to deliver malware and conduct attacks against banks and public agencies. Attackers leveraged compromised .gov.br infrast… The Hacker News · Jul 16, 2026 High BRgovernmentphishingmalware
threat-intel New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands Researchers at Seoul National University, the University of Illinois Urbana-Champaign, and Largosoft have discovered a new attack method called Agent Data Injection (ADI) that can manipulate AI agents by subtly corruptin… The Hacker News · Jul 16, 2026 High CVE-2025-32711prompt-injectiondata-exfiltrationai-security
threat-intel Oak Emerges From Stealth Mode With $60 Million in Funding Israeli cybersecurity startup Oak has secured $60 million in seed funding to develop an AI-powered Identity Operating System, aiming to consolidate fragmented identity governance tools and address the growing challenges… SecurityWeek · Jul 16, 2026 Info ISUSidentity managementaicybersecurity
