Swiss rail giant Stadler rejects 12.3M ransom demand after cyberattack

A newly disclosed vulnerability in the Ubuntu component that isolates snap applications has been found to hand full root access to any local user on default installations of Ubuntu Desktop 24.04, 25.10 and 26.04. According to new research from the Qualys Threat Research Unit (TRU) published on July 21, the flaw sits in snap-confine, the…

Intruder has announced the launch of AI Pentesting for web applications, providing on-demand penetration testing. Following its initial release of issue-level investigations last quarter, the platform now allows organizations to securely connect their codebases via GitHub or GitLab to automatically scope and launch penetration tests in minutes, with results and audit-ready reporting in hours. Mythos…

In this article On July 14, 2026, Microsoft Threat Intelligence identified a coordinated supply chain compromise of the @asyncapi npm organization, a widely used set of packages for the AsyncAPI specification and code generation. Five package versions across four package names were republished within roughly ninety minutes, each carrying the same maliciously injected loader: @asyncapi/specs…

The US government is seeking to tackle a growing vulnerability management challenge with the launch of Gold Eagle, a program intended to drive faster exploit detection and remediation. Gold Eagle was trailed in Executive Order 14409 in June, and involves the collaboration of the Cybersecurity and Infrastructure Security Agency (CISA), the Treasury, and the Department…

We are Yuki Koike, Senior Executive Officer/CTO, and Kota Toda, a part-time member of the Advanced Analysis Division. The vulnerability CVE-2026-43456, which the two of us had reported to the Linux kernel, has now been fixed and is ready for public disclosure. We would therefore like to introduce the details in this blog post. The…

A Flock surveillance camera. Photo Credit: Facebook. Public opposition forces a freeze on neighborhood camera feeds while city officials demand tighter privacy rules. The Los Angeles Police Department is ending its access to a controversial network of neighborhood surveillance cameras this weekend after a wave of public pushback over privacy rights, as reported by ABC…