IT news

BlueHammer Vulnerability Exploited in Ransomware Attacks

The Microsoft Defender vulnerability CVE-2026-33825 was exploited in the wild as a zero-day before patches were released. The post BlueHammer Vulnerability Exploited in Ransomware Attacks appeared first on SecurityWeek.

The Record by Recorded Future12d06/30

An intelligence budget 'super user' job is now in the hands of Russ Vought

Russell Vought, director of the White House Office of Management and Budget (OMB), assumed hands-on responsibility for overseeing the spending plans of intelligence agencies following the recent departure of Amaryllis Fox Kennedy, a senior intelligence official who simultaneously served in multiple roles, including one at OMB.

borderlinegeneral-tech · cybersecurity · government-security

EU Commission Press Corner12d06/30

“Solidarity in action”: President von der Leyen rallies support for Ukraine's recovery in Gdańsk

European Commission News Brussels, 30 Jun 2026 President Ursula von der Leyen joined Ukrainian and international leaders in Gdańsk on 25 June for the Ukraine Recovery Conference, jointly hosted by Poland and...

off-topicai · unknown-it-category-6 · unknown-it-category-7

borderlinecybersecurity · government-security · unknown-it-category-16

Battery research: Europe's opportunity in lithium-sulfur batteries

While the technology is perceived as competition in Asia, long-term research is lacking in the USA. It is important to take advantage of this gap. (battery, LG)

Dark Reading12d06/30

AI-Generated Workflows Are a Silent Security Disaster

Teams are dealing with a truly dangerous problem — automation that works, but that no one understands.

cybersecurity · government-security · regulation

Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks

Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, potentially turning malicious repositories into supply chain attack vectors. The post Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks appeared first on SecurityWeek.

Aflac Japan Data Breach Impacts 4.38 Million

Hackers accessed the insurance giant’s policyholder portal multiple times between June 15 and June 25. The post Aflac Japan Data Breach Impacts 4.38 Million appeared first on SecurityWeek.

borderlinecybersecurity · government-security · unknown-it-category-16

Rail transport: Railways have to give up more routes to competitors like Italo and Flix

The Federal Network Agency is intervening in the long-distance transport market: Deutsche Bahn will have to make more space for competitors on lucrative routes in the future. The railway sees offers in the area threatened.

borderlinecybersecurity · government-security · unknown-it-category-16

Components for data centers as a target: Hardware thefts in the USA are increasing

In the USA, thefts of entire truck trailers that transport hardware and components for data centers are increasing. (PC hardware, server)

borderlinecybersecurity · government-security · unknown-it-category-16

Advertisement: Convertible from HP with Intel Core i5 at a special price on Amazon

A convertible from HP with an Intel Core i5, 14'' 2K touchscreen and 16 GB of RAM is still discounted on Amazon for a short time. (Convertible, Notebook)

FTC Technology News12d06/30

FTC Secures Agreement with Havas to Restore Competition in the Digital Advertising Ecosystem

Today, the Federal Trade Commission, along with a coalition of states, scored another major victory in the fight against collusive conduct in the advertising industry. Advertising agency Havas Media Group USA LLC (Havas) has agreed to a proposed FTC order to resolve allegations that it engaged in unlawful collusion that led to the demonetization of disfavored political viewpoints. View Press Release

borderlinedata-protection · unknown-it-category-6 · vulnerability

FTC Technology News12d06/30

FTC Requires Amazon to Pay $2.25 Million to Resolve Charges It Knowingly Violated the Fair Credit Reporting Act

FTC alleged that Amazon routinely denied requests from identity theft victims seeking records of fraudulent transactions made with their personal data Amazon will pay $2.25 million in civil penalties to settle Federal Trade Commission allegations that the online retail giant knowingly violated the Fair Credit Reporting Act (FCRA) by refusing to provide transaction records to consumers whose personal information was used by identity thieves to commit fraud. View Press Release

borderlinedata-protection · unknown-it-category-6 · vulnerability

StoneFly Storage Concentrator

View CSAF Summary Successful exploitation of these vulnerabilities could allow attackers to gain broad unauthorized access, execute arbitrary commands with root privileges, steal sensitive data, and perform actions on behalf of legitimate users across interconnected systems. The following versions of StoneFly Storage Concentrator are affected: Storage Concentrator <8.0.4.22 (CVE-2026-56415, CVE-2026-55721, CVE-2026-50040) Storage Concentrator Virtual Machine <8.0.4.22 (CVE-2026-56415, CVE-2026-5

Mitsubishi Electric MELSOFT Update Manager SW1DND-UDM-M

View CSAF Summary Successful exploitation of these vulnerabilities could allow a local attacker to tamper with or destroy information in the affected product, cause a denial-of-service condition in the affected product, or execute arbitrary code when a specially crafted archive file is decompressed by the 7-Zip component included in MELSOFT Update Manager. The following versions of Mitsubishi Electric MELSOFT Update Manager SW1DND-UDM-M are affected: MELSOFT Update Manager SW1DND-UDM-M >=1.000A| =1.000A| =1.000A| =1.000A| =1.000A|<=1.014Q Product Status: known_affected Remediations Mitigation

XZ Utils vulnerability impacting B&R Products

View CSAF Summary An update is available that resolves vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the product to stop or corrupt memory data. The following versions of XZ Utils vulnerability impacting B&R Products are affected: PPC3100 <1.8.1, 1.8.1 (CVE-2025-31115) C50 <1.8.0, 1.8.0 (CVE-2025-31115) C80 <1.8.0, 1.8.0 (CVE-2025-31115) FT50 <1.8.1, 1.8.1 (CVE-2025-31115) MT50 <1.8.1, 1.8.1 (CVE-20

Delta Electronics DVP12SE PLC

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to remotely issue commands, modify operational values, interfere with control logic, and alter device behavior without authentication or privilege enforcement. The following versions of Delta Electronics DVP12SE PLC are affected: DVP12SE PLC vers:all/* (CVE-2026-12819, CVE-2026-12818) CVSS Vendor Equipment Vulnerabilities v3 9.8 Delta Electronics Delta Electronics DVP12SE PLC Missing Authentication for Cri

Schneider Electric EasyLogic T150 and Saitel DP RTU

View CSAF Summary Successful exploitation of these vulnerabilities can allow an attacker to cause unauthorized access and exposure of sensitive information when the unauthenticated attacker accesses credentials stored within firmware or system files. The following versions of Schneider Electric EasyLogic T150 and Saitel DP RTU are affected: EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller <=11.06.30 (CVE-2026-9650) EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & C

Schneider Electric EcoStruxure IT Data Center Expert

View CSAF Summary Schneider Electric is aware of a vulnerability in its EcoStruxure™ IT Data Center Expert. The EcoStruxure™ IT Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device information providing a comprehensive view of equipment. Failure to apply the remediation provided below may risk information disclosure. The following versions of Schneider Electric EcoStruxure IT Data Center Expert are affected: EcoStruxure IT Data Ce

Frangoteam FUXA SCADA/HMI

View CSAF Summary Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to enumerate all user accounts and role assignments on a FUXA SCADA/HMI instance. The following versions of Frangoteam FUXA SCADA/HMI are affected: FUXA SCADA/HMI <=1.3.1 (CVE-2026-13207) CVSS Vendor Equipment Vulnerabilities v3 7.5 Frangoteam Frangoteam FUXA SCADA/HMI Authentication Bypass by Spoofing Background Critical Infrastructure Sectors: Critical Manufacturing, Energy, Water and Wastewater Countries/Areas Deployed: Worldwide Company Headquarters Location: Switzerland Vulnerabi

CISA Cybersecurity Advisories12d06/30

OFFIS DCMTK Toolkit

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to write files, access unauthorized information, exhaust memory, or crash affected DCMTK client or server processes. The following versions of OFFIS DCMTK Toolkit are affected: DCMTK <=3.7.0 (CVE-2026-50003, CVE-2026-50254, CVE-2026-35505, CVE-2026-52868, CVE-2026-44628) CVSS Vendor Equipment Vulnerabilities v3 9.8 OFFIS OFFIS DCMTK Toolkit Improper Limitation of a Pathname to a Restricted Directory ('Path

cybersecurity · government-security · privacy

Hacker Conversations: Chris Thompson, Former Head of IBM X-Force Red, Co-Founder of RemoteThreat

Chris Thompson's journey took him from hacking game controls as a teenager to founding IBM’s X-Force Red team. The post Hacker Conversations: Chris Thompson, Former Head of IBM X-Force Red, Co-Founder of RemoteThreat appeared first on SecurityWeek.

cybercrime · regulation · unknown-it-category-16

The Verge Tech12d06/30

Meet the lawyer who beat Elon Musk — twice

“After college, my plan was to come to New York and get a record deal.” | Cath Virginia / The Verge, Getty Images Watching Elon Musk fulminate at Bill Savitt during Musk v. Altman - the case in which Musk sued Sam Altman and OpenAI instead of seeing a therapist about his AI failures - was a bit like watching a toddler have a temper tantrum at his nursery school teacher. Savitt's questions were "designed to trick me," Musk said. He also told Savitt at one point, "You mostly do unfair questions."

borderlinecybersecurity · government-security · cybercrime

Supreme Court Rules Constitutional Privacy Protections Apply to Cellphone Users’ Location History

The ruling was made in the case of a bank robber whose identity was discovered through a geofence warrant. The post Supreme Court Rules Constitutional Privacy Protections Apply to Cellphone Users’ Location History appeared first on SecurityWeek.

cybersecurity · government-security · unknown-it-category-16

Endless security gaps: Flood of AI bug reports overwhelms Github

Github can no longer keep up with processing security reports. There is probably a backlog of several weeks. (Github, AI)

borderlinecybersecurity · government-security · unknown-it-category-16

(g+) Security: How companies reduce risks with IAM

Identity is the key to modern IT security. How identity access management controls access and reduces risks. An advice text by Klaus Manhart (Security in Transition, OpenID)

Exploitation of Recent Oracle E-Business Suite Vulnerability Begins

The critical-severity defect allows unauthenticated attackers to take over the E-Business Suite’s Payments product. The post Exploitation of Recent Oracle E-Business Suite Vulnerability Begins appeared first on SecurityWeek.

borderlinecybersecurity · government-security · unknown-it-category-16

Advertisement: 70mai A810 Lite Dashcam as a late Prime Day offer under 100 euros

If you're looking for a dash cam, you can get a late Prime deal on Amazon. The 70mai A810 Lite is currently available at the lowest price. (Technology/Hardware)