DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware https://firewalls.firm.in/wp-content/uploads/2026/07/all-secure.jpg Ravie LakshmananJul 30, 2026Malvertising / Cryptocurrency Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake web pages displaying a full-screen non-existent update sequence to deliver malware as part of a new iteration of the long-running Contagious ...
Read More »Vulnerabilities & Exploits
Australian regulator says Telegram breached online safety law
Australian regulator says Telegram breached online safety law https://etimg.etb2bimg.com/thumb/msid-132725875,imgsize-17457,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/australian-regulator-says-telegram-breached-online-safety-law.jpg Australia’s cyber safety watchdog took court action Thursday against Telegram, alleging the global messaging platform had failed to remove terrorism material. Under Australia’s online safety law, Telegram faces a maximum penalty of up to AU$54.6 million ($38 million). The development comes a day after Russia announced it was seeking the arrest ...
Read More »Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory https://firewalls.firm.in/wp-content/uploads/2026/07/mcp.jpg Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in unauthenticated remote code execution. The vulnerability, tracked as CVE-2026-59726 (CVSS score: 10.0), impacts all versions of the project before version 3.16.3. It ...
Read More »Bank of Baroda data leak: Compromised employee email linked to alleged 1TB data leak on darknet
Bank of Baroda data leak: Compromised employee email linked to alleged 1TB data leak on darknet https://etimg.etb2bimg.com/thumb/msid-132674551,imgsize-60056,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/bank-of-baroda-data-leak-compromised-employee-email-linked-to-alleged-1tb-data-leak-on-darknet.jpg Bank of Baroda said a recent data leak linked to a reported cyberattack stemmed from the compromise of a single employee’s email account after claims emerged that up to one terabyte of data, including customers’ Aadhaar details, was leaked on the darknet. The ...
Read More »Microsoft Says New Cybersecurity AI Model Helps MDASH Hit 95.95% at Half the Cost
Microsoft Says New Cybersecurity AI Model Helps MDASH Hit 95.95% at Half the Cost https://firewalls.firm.in/wp-content/uploads/2026/07/MAI-Cyber-1-Flash.jpg Swati KhandelwalJul 28, 2026AI Security / Vulnerability Management Microsoft has launched its first cybersecurity-specific model inside MDASH, its multi-model vulnerability identification and remediation harness. The company says MDASH, using MAI-Cyber-1-Flash and GPT-5.4, scored 95.95% on CyberGym. It also claims the configuration costs 50% less than ...
Read More »Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available https://firewalls.firm.in/wp-content/uploads/2026/07/fastjson.gif Swati KhandelwalJul 25, 2026Vulnerability / Application Security Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba’s JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process. Tracked ...
Read More »Security breaches are inevitable, your response is not
Security breaches are inevitable, your response is not https://etimg.etb2bimg.com/thumb/msid-132555659,imgsize-124819,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/security-breaches-are-inevitable-your-response-is-not.jpg Enterprise security leaders have tried to prevent attacks for years. Boards invested in firewalls, perimeter defenses and access restrictions while measuring success by the absence of breaches. Yet, AI is increasing the speed and scale of attacks, causing organizations in India and around the world to reevaluate how they define security ...
Read More »ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories
ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories https://firewalls.firm.in/wp-content/uploads/2026/07/th.jpg Ravie LakshmananJul 23, 2026Hacking News / Cybersecurity News Most of this week’s trouble came dressed as something useful. A package stole data. A fake extension opened remote access. A safety app became spyware. An image gave hidden orders to an AI agent. Other threats hid in ...
Read More »OpenAI says AI models went rogue during testing, triggering ‘unprecedented’ breach at startup
OpenAI says AI models went rogue during testing, triggering ‘unprecedented’ breach at startup https://etimg.etb2bimg.com/thumb/msid-132550729,imgsize-95548,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/openai-says-ai-models-went-rogue-during-testing-triggering-unprecedented-breach-at-startup.jpg FILE – The OpenAI logo appears on a mobile phone in front of a screen showing part of the company website in this photo taken on Nov. 21, 2023 in New York. (AP Photo/Peter Morgan, File) OpenAI said on Tuesday that an autonomous agent powered by ...
Read More »FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware https://firewalls.firm.in/wp-content/uploads/2026/07/github.jpg Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to deliver a malware family known as SmartLoader as part of an ongoing campaign codenamed FakeGit. “FakeGit uses copied projects, lookalike developer ...
Read More »
Firewall Security Company India Complete Firewall Security Solutions Provider Company in India











