@asyncapi/specs (2.7M weekly downloads) got compromised today via a malicious CI commit

Ransomware activity continues to rise, with 2,509 confirmed victims and 91 active threat groups observed during Q2 2026. Top ransomware operators Industry and country targeting MITRE ATT&CK TTP analysis Indicators of Compromise (IOCs) Strategic recommendations for security teams Q3 2026 threat outlook The ransomware ecosystem didn’t slow down in Q2; it accelerated. Discover which threat groups gained…

Police allege Texan suspect opened account to receive fraudulent wire transfer before moving money through Zelle A Texas man is facing multiple felony charges after Hatfield Township Police alleged he received and transferred more than $23,000 fraudulently stolen from a Hatfield Township resident’s Wells Fargo account as part of an identity theft and banking fraud…

AI security firm Manifold says two vulnerabilities it reported to Anthropic in May remain exploitable in the latest version of Claude for Chrome, the company’s agentic browser extension.  According to Manifold, the flaws let a malicious browser extension trigger Claude into taking actions on a user’s behalf without any genuine click or approval from the…

This post is part 2 in a series about automated content moderation. Read the first post here. When whistleblower Frances Haugen leaked a set of documents from Meta in 2020, among the revelations was a jarring statistic: The company’s algorithms designed to detect terrorist content incorrectly deleted nonviolent Arabic-language content 77 percent of the time,…

Governance & Risk Management , Patch Management NightmareEclipse Says Mitigation Can Exhaust Disk Space, Crash Apps Tiffany Wang • July 10, 2026     Image: Microsoft/ISMG An independent security researcher disgruntled with how Microsoft handled vulnerability disclosure on Thursday criticized the computing giant’s patch this week for a zero-day flaw in the Defender security engine…

The Indian Computer Emergency Response Team (CERT-In) has issued an urgent security advisory alerting the public to a highly active malware campaign targeting desktop and web clients of the messaging platform WhatsApp. The federal cyber security agency established that threat actors are systematically weaponizing compromised user accounts to deliver infected attachments to established contacts. By…