July Patch Tuesday offers 127 fixes
The seventh month is always a big one for Microsoft, and this year is no exception
The seventh month is always a big one for Microsoft, and this year is no exception
Related
Google to Acquire Wiz for $32B in Multicloud Security Play
The all-cash deal offers a path for Google to better support cloud customers who have assets spread across public environments, including Azure and others.
AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers
Sophos looked at a week of its own endpoint data and found that AI coding agents such as Claude Code, Cursor, and OpenAI Codex are setting off detection rules written to catch human intruders. The agents are not malicious. They just do a lot of things that, to a behavioral engine, look exactly like an…
Innovative FileFix Phishing Attack Proves Plenty Potent
Highly deceptive FileFix uses code obfuscation and steganography and has been translated into at least 16 languages to power a global campaign.
How Attackers Bypass Synced Passkeys
TLDR Even if you take nothing else away from this piece, if your organization is evaluating passkey deployments, it is insecure to deploy synced passkeys. Synced passkeys inherit the risk of the cloud accounts and recovery processes that protect them, which creates material enterprise exposure. Adversary-in-the-middle (AiTM) kits can force authentication fallbacks that circumvent strong
Dark Patterns Undermine Security One Click at a Time
People trust organizations to do the right thing, but websites’ and apps’ dark patterns pose a hidden threat that can lead to inadequate security behaviors.
US Soldier Intends to Admit Hacking 15 Telecom Carriers
The federal government views the defendant as a flight risk and danger to the community due to his ability to access sensitive and private information.