SWN #596: FatFs bugs, Claude, PolinRider attacks, and robot rentals
Security Weekly News episode 596 dropped July 7, covering a packed week in infosec. Here’s what stood out. AI found…
Security
Cybersecurity, vulnerabilities, threats, and defense
Keyfactor lands $1B+ investment to tackle AI and post-quantum security
Keyfactor just raised over $1 billion. That’s not a typo. The company builds cryptographic security tools for managing machine identities,…
Critical Adobe ColdFusion Bug With CVSS 10 Already Being Exploited
Attackers are already exploiting a critical Adobe ColdFusion vulnerability — and it doesn’t get worse than this. CVE-2026-48282 carries a…
CISA Using Anthropic’s Mythos AI to Hunt Flaws in Government Code
CISA is reportedly using Anthropic’s Mythos — one of the most powerful AI models out there — to scan federal…
Accenture Confirms Breach After Hacker Claims 35 GB of Stolen Data
Accenture confirmed it was hit by a security breach after a threat actor started selling what they claim is 35…
Critical Gitea bug is being actively exploited — one header is all it takes
Thirteen days. That’s how long it took attackers to start exploiting a critical Gitea vulnerability after disclosure. No password needed….
Ohio county reportedly paid $1 million to a cyber extortion group
A US government entity paid a $1 million ransom. Not to encryptors — to prevent stolen data from being dumped…
Google Dialogflow CX had a flaw that let attackers hijack chatbots
Here’s one that didn’t need prompt injection or model tricks. Security firm Varonis found a critical flaw in Google’s Dialogflow…
RedWing malware turns Android bank fraud into a Telegram rental service
Anyone with a few hundred dollars and a Telegram account can now run a full-scale Android bank fraud operation. No…
Chinese hackers build LONGLEASH malware to grow their relay network through routers
A hacking group tracked as UAT-7810 is actively expanding a global relay network by infecting networking gear — mostly unpatched…