Microsoft said exploitation was 'less likely' ... but CISA just added SharePoint RCE to KEV list

US cyber agency warns over forgotten SharePoint flaw

An RCE vulnerability in Microsoft SharePoint that was mistakenly omitted from the May Patch Tuesday bulletin is being exploited in the wild, says Cisa.

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

A critical security flaw impacting Oracle E-Business Suite has come under active exploitation in the wild, according to Defused Cyber. The vulnerability, tracked as CVE-2026-46817 (CVSS score: 9.8), refers to an improper privilege management and authentication flaw in Oracle Payments that could be abused to take over susceptible instances. Easily exploitable vulnerability allows

Millions of Driver’s License Numbers Exposed in Massive Data Breach

AssuranceAmerica recently disclosed that the breach stemmed from malicious activity targeting one of its employees.

Pemandu saman stesen minyak, didakwa guna AI manipulasi harga

WASHINGTON: Beberapa pengendali stesen minyak terkemuka berdepan tindakan saman pada Isnin oleh sekumpulan pemandu di California yang mendakwa syarikat-syarikat terbabit menggunakan teknologi kecerdasan buatan (AI) untuk menaikkan harga bahan api. Menurut cadangan tuntutan saman tindakan tersebut, kesemua defendan didakwa melanggar undang-undang antimonopoli utama California, Akta Cartwright. Pengendali itu didakwa menggunakan aplikasi berasaskan AI yang mengumpul ... Read more The post Pemandu saman stesen minyak, didakwa guna AI manipulasi harga appeared first on Utusan Malaysia.

A single config file in a cloned repository could steal your AWS credentials through Amazon Q Developer

A high-severity flaw in Amazon Q Developer allowed a malicious code repository to silently execute commands on a developer’s machine and steal their AWS credentials. Wiz Research discovered the vulnerability, tracked as CVE-2026-12957, and reported it to Amazon on April 20. Amazon patched the issue on May 12, and the disclosure went public today. The [] This story continues at The Next Web

Oracle E-Business Suite was under attack via critical flaw before the public exploit code was even released

Attackers appear to have reverse-engineered Big Red's patch

Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap

A password spray campaign targeting Azure CLI sign-ins exposed how narrow Conditional Access policies can leave Microsoft 365 accounts vulnerable even when MFA is enabled. The post Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap appeared first on TechRepublic.

Gas giants use AI to raise prices, lawsuit says, another algorithmic hit to the cost of living

A federal lawsuit alleging that gas companies in California are colluding to keep prices high through their use of AI-powered software will test the state's antitrust law at a time of growing concerns about the effects of technology on the high ...

Another Company Identified in Latvijas valsts meži Cyberattack Investigation

The cybercriminal responsible for the attack on Latvijas valsts meži (LVM) also compromised a server belonging to pharmaceutical manufacturer Olpha, Latvia’s national cybersecurity incident response institution Cert.lv informed the LETA news agency. According to Cert.lv, investigators discovered the breach of Olpha’s server while analysing the cyberattack against Latvijas valsts meži. The institution stressed that the [] The post Another Company Identified in Latvijas valsts meži Cyberattack Investigation appeared first on Baltic News Network.

Russia Accuses Apple of Political Motives After Several Popular Apps Vanish From App Store

Russia's Ministry of Digital Development has described Apple's removal of VK Holding applications from the App Store as a politically motivated decision, arguing that the US-based technology giant failed to provide a valid legal basis for the action. According to the ministry, Apple has not presented any substantiated explanation linking the affected applications to sanctions restrictions. Officials stated that legal assessments, including reviews conducted by American law firms, found no grounds that would justify blocking VK services. The ministry also accused Apple of ignoring the social importance of the removed applications, many of which provide communication tools and public information services used by millions of people.

Texas Joins 16 States Filing Suit Against California

(WBAP/KLIF) -- RICHMOND, Va. (AP) - A coalition of 17 states and a trade association representing U.S. wholesalers and distributors have sued Californ...

Koach Kavanaugh targets U.S. v. Virginia

Alexis Romero has a good piece about the latest anti-trans opinion from the Supreme Court. One thing worth emphasizing about West Virginia v. B.P.J. is that the lawsuit was advanced on narrow grounds, seeking only an exemption from West Virginia’s total ban on participating by trans athletes only if it could be demonstrated that their [] The post Koach Kavanaugh targets U.S. v. Virginia appeared first on Lawyers, Guns Money.

'Questionable practices': Global AI industry falls short on safety, think tank warns

The Future of Life Institute report criticised Anthropic and other AI companies for reversing bans on military uses.

EU Lawmaker Who Probed Spyware Abuse Was Targeted With Pegasus, Researchers Say

A former EU lawmaker who investigated spyware abuse was secretly targeted with Pegasus spyware, according to researchers at Citizen Lab.

Transmed Enhances Security Operations for the AI Era with Palo Alto Networks

Transmed, one of the region’s largest and fastest growing FMCG companies, has transformed its security operations centre (SOC) with a fully managed deployment of Palo Alto Networks AI-driven Cortex platform through the Unit 42 Managed XSIAM (MSIAM) service. The deployment enables Transmed to neutralize an increasingly complex threat landscape with industry-leading AI and automation, while [] The post Transmed Enhances Security Operations for the AI Era with Palo Alto Networks appeared first on Middle East News 247.

Anthropic Customer Sues US Government After AI Ban Cuts Off Access to Fable 5 and Mythos 5

A legal technology startup has launched a fresh challenge against the US government after losing access to Anthropic’s most advanced artificial intelligence models, escalating a growing dispute that now spans export controls, national security concerns, and the future of frontier AI development. Legion LegalTech Corp., a California-based company that builds AI-powered legal software, filed a lawsuit against federal officials after a June 12 directive forced Anthropic to restrict access to its flagship Fable 5 and Mythos 5 models. The order, issued by the Bureau of Industry and Security, required Anthropic to prevent foreign nationals from accessing the systems, triggering widespread

Azerbaijan mentions 'deepfake' and AI-based disinformation among multiple hybrid threats

Azerbaijan mentions 'deepfake' and AI-based disinformation among multiple hybrid threats

Rubrik Is A Cybersecurity Standout (Rating Upgrade)

Rubrik Is A Cybersecurity Standout (Rating Upgrade)