Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images
î „Ravie Lakshmananî ‚Jul 17, 2026Social Engineering / Malware North Korean threat actors linked to the Contagious Interview campaign have been observed […]
Cybersecurity
New infosec products of the week: July 17, 2026
Here’s a look at the most interesting products from the past week, featuring releases from Cloudflare, Lineation.ai, Nudge Security, and
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared
Two new high severity WordPress vulnerabilities, patch immediately!
The 7.0.2 WordPress security release addresses one critical and one high severity security issue. The vulnerabilities reported to the WordPress
New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator’s own dashboard claims
A hard drive reliability check on 341,263 drives, from 4TB to past 20TB
Large cloud storage operators track their hard drives every day, recording which units keep running and which ones drop off
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
î „Ravie Lakshmananî ‚Jul 17, 2026Software Supply Chain / Malware Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting
The script, not the voice, is what makes AI voice phishing work
The call comes in at 4:40 on a Friday. The voice belongs to a senior manager, or sounds close enough,
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
î „Swati Khandelwalî ‚Jul 17, 2026Vulnerability / Web Security An anonymous HTTP request can run code on a WordPress site. The bug
Claude can now sign into websites with 1Password without exposing your credentials
1Password has introduced 1Password for Claude, a beta integration that lets Anthropic’s AI assistant complete browser tasks requiring authentication without