Aggregator

These are the top threats you should know about this week.

OpenAI has reportedly received approval from the U.S. Department of Commerce for a broad public launch of its advanced GPT-5.6 model, marking a significant moment in how Washington regulates access to frontier AI systems. A source familiar with the matter confirmed the development to Axios on Tuesday, and OpenAI is expected to move forward with […]

The post OpenAI Reportedly Secures US Government Clearance to Launch GPT-5.6 Model appeared first on Cyber Security News.

Anthropic has extended promotional access to its newest AI model, Claude Fable 5, allowing subscribers on paid plans to use it at no additional cost through July 12, 2026, at 11:59:59 PM PT. The company confirmed the extension in an official announcement, stating it is “extending access to Claude Fable 5 on all paid plans […]

The post Anthropic Extends Free Access to Claude Fable 5 on All Paid Plans appeared first on Cyber Security News.

A threat actor operating under the alias “888” has posted a listing on a cybercrime forum claiming to sell data allegedly stolen from the IT services and consulting giant Accenture, with the stated haul totaling roughly 35 GB of source code and associated credentials. The forum post, dated July 6, 2026, states that “In July […]

The post Accenture Data Breach – Hackers Allegedly Claim to Have Stolen 35 GB of Source Code appeared first on Cyber Security News.

2026年6月、JPCERT/CCは、サイバーセキュリティ対策活動に特に顕著なご貢献をいただいた方に感謝の意を表して感謝状を贈呈しました。JPCERT/CCは、多くの関係者の方々に日々ご協力いただいております。JPCERT/CCに報告をくださったすべての方々に、この場を借りて感謝申し上げます。引き続きJPCERT/CCの活動にご協力いただければと存じます。

Name: CyberSibir2026 (an SibirCTF event.)
Date: June 9, 2026, 3:30 a.m. — 09 June 2026, 12:30 UTC  [add to calendar]
Format: Attack-Defense
On-site
Location: Russia, Tomsk
Offical URL: https://masksafe.ru/cyberv/2026/ctf
Rating weight: 0
Event organizers: keva

Name: LYKNCTF (an LYKN Team event.)
Date: July 6, 2026, midnight — 08 July 2026, 00:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.itzdenkii.me/
Rating weight: 0
Event organizers: FolodyCTF

2026年07月07日（現地時間）、米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。

IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company. [...]

Attackers are exploiting a critical Gitea flaw (CVE-2026-20896) that bypasses authentication with a single HTTP header, exposing repositories and sensitive data. Sysdig researchers warn that attackers are actively exploiting a critical authentication bypass flaw, tracked as CVE-2026-20896 (CVSS score of 9.8), which affects Gitea official Docker images before version 1.26.3. “CVE-2026-20896 exploited 13 days after […]

Varonis reported the flaw to Google in late 2025 and it has been addressed, but it reminds defenders to take a fresh look at their AI Infrastructure security.

Currently trending CVE - Hype Score: 6 - Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, an Insecure Direct Object Reference (IDOR) vulnerability in /api/v1/responses endpoint allows an authenticated attacker to execute any flow belonging to another user by specifying the ...

Currently trending CVE - Hype Score: 6 - A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

Currently trending CVE - Hype Score: 15 - In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct file UAF ep_remove() (via ep_remove_file()) cleared file->f_ep under file->f_lock but then kept using @file inside the critical section (is_file_epoll(), ...

Currently trending CVE - Hype Score: 19 - ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation of this issue does not ...

Currently trending CVE - Hype Score: 15 - In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for skb_ensure_writable() once before the key loop using tcfp_off_max_hint, but the hint does not ...

Currently trending CVE - Hype Score: 15 - In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail to propagate the SKBFL_SHARED_FRAG bit in skb_shinfo()->flags ...

Currently trending CVE - Hype Score: 15 - In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuse_add_dirent_to_cache() computes a serialized dirent size from the server-controlled namelen field and copies the dirent into a single page-cache page. The ...