Dev says Google warned him about account hijack – then charged him $11,000 anyway
1. Executive summary Over June 7–8 2026, a solo developer's Google Cloud account incurred $11,089.77 in unauthorised charges driven by Gemini
1. Executive summary Over June 7–8 2026, a solo developer's Google Cloud account incurred $11,089.77 in unauthorised charges driven by Gemini
1. Executive summary Sysdig threat researchers have documented what they assess as the first fully agentic ransomware operation, in which an LLM-driven agent — named "
1. Executive summary Cisco Talos published research on ARToken, a phishing-as-a-service (PhaaS) operator panel that shares infrastructure, API contracts, and operational patterns with
1. Executive summary A U.S. Supreme Court ruling that President Trump acted legally in firing FTC Commissioner Rebecca Slaughter without cause has undermined the independence
1. Executive summary An active, evolving ClickFix campaign uses fake Google and Cloudflare verification pages to socially engineer users into executing malicious PowerShell commands, resulting in
1. Executive summary A new CitrixBleed-like vulnerability (CVE-2026-8451, CVSS 8.8) in NetScaler ADC and NetScaler Gateway appliances was exploited in the wild
1. Executive summary A new attack variant dubbed "ConsentFix" is being actively deployed against Microsoft 365 users, combining social engineering with OAuth consent-flow
1. Executive summary Kaspersky GReAT has published details of a new toolset dubbed "Umbrij," attributed to the ToddyCat APT (MITRE G1022), which abuses the
1. Executive summary Cisco has confirmed active in-the-wild exploitation of CVE-2026-20230, an unauthenticated remote server-side request forgery (SSRF) vulnerability in Cisco
1. Executive summary A critical vulnerability in Oracle E-Business Suite (EBS) Payments — CVE-2026-46817 — is being actively exploited in the wild following Oracle'
1. Executive summary Rarlab has patched a remote code execution vulnerability (CVE-2026-14191) in WinRAR and UnRAR affecting RAR5 recovery-volume (.rev) file handling. The
1. Executive summary Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability (CVE-2026-45659, CVSS 8.8 HIGH, CWE-502) enabling authenticated, remote code