Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

Attackers Exploit AI Hallucinations to Send Users to Phishing Sites

Jul 22, 2026 By KnowBe4 Team In KnowBe4
Threat actors are using a new technique called “phantom squatting” to trick AI tools into directing users to phishing sites, according to researchers at Palo Alto Networks’ Unit 42. Since AI models frequently hallucinate phony information, they sometimes point users to websites that don’t exist. Threat actors are now registering these AI-hallucinated domains and using them to host phishing sites.
Read Post
bluevoyant

When the Breach Isn't Yours, But the Risk Still Might Be

Jul 22, 2026 By Matt Watson In BlueVoyant
Every time a cyber breach breaks headlines, leadership teams pose the same urgent question: Does this affect us? But a third-party risk team is likely already asking: Was one of our vendors, suppliers, partners, or other third parties involved? And increasingly: What if it was not our direct vendor, but one of theirs?
Read Post
vista infosec

EU CRA Gap Assessment: Are You Ready for 2026?

Jul 22, 2026 By Narendra Sahoo In VISTA InfoSec
Most compliance teams have filed the EU Cyber Resilience Act under “2027” — the date the regulation becomes fully applicable. That’s the wrong filing date. From 11 September 2026, manufacturers must already report actively exploited vulnerabilities and severe incidents affecting products with digital elements, more than a year before the rest of the regulation takes effect.
Read Post
upguard

Oracle Just Shipped 1,449 Security Patches in One Quarter. We Checked How Much of It Is Actually New.

Jul 22, 2026 By Greg Pollock In UpGuard
Oracle's July 2026 Critical Patch Update (CPU) is nearly three times larger than any release in the company's history. To understand it, we parsed all 23 of Oracle's quarterly advisories going back to 2021, matched them against the official CVE record, and compared Oracle against eight other major vendors. We set out to answer three questions: How much of this is genuinely new? Does it really reflect AI-accelerated patching? And how unusual is it?
Read Post
aikido

Finding eight high-severity vulnerabilities in NodeBB in six hours

Jul 22, 2026 By Jorian Woltjer In Aikido
TL;DR While improving our AI Pentest, we ran a whitebox assessment on NodeBB, a forum software powered by NodeJS. The result? Eight high-severity vulnerabilities that would all be exploitable on default instances of NodeBB. This includes Cross-Site Scripting (XSS), two of which require interaction with a custom Federation server that the AI agent had to set up itself. Another affects practically every input on NodeBB due to a template injection.
Read Post
knowbe4

The New Face of AI Risk

Jul 22, 2026 By Javvad Malik In KnowBe4
Cybercrime used to have a ‘"tell." It was the digital equivalent of a villain stroking their cat - clunky grammar, misspelt links and suspicious attachments that screamed ‘phishing’. But the arrival of AI has changed everything. Typos have been replaced by perfect prose. Generic lures have evolved into highly personalized attacks that mimic your internal language and align with your project timelines.
Read Post

Enabling Massive-File Collaboration in the Cloud With Adaptive Block Caching

Jul 22, 2026 By Abhishek Kesanupalli In Egnyte
When it comes to massive files, many organizations still rely on old-fashioned, on-premises file servers and filers. They’re hesitant to work on these projects in the cloud because the inherent network latency makes working with massive files difficult. So they stick to an on-premises approach—even though it typically requires wired access and stable VPN connections, which makes sharing and collaborating especially challenging for people working from home, in the field, or on the road.
Read Post
How to Convert OST To PST When The Outlook Profile Is Deleted

How to Convert OST To PST When The Outlook Profile Is Deleted

Jul 22, 2026 By SecuritySenses In SecuritySenses
Outlook profiles are extremely important part of Outlook. It not only contains the account configuration but also mailbox settings. Also, it includes the data file associations required for mailbox content access. Now the question arises what if something went wrong with this Outlook profile? What if the profile is deleted? In such a scenario, Outlook loses its connection to the associated OST file. It means OST file can become orphaned. In such a case, users are unable to access the mailbox folders. What's next? The solution is to convert this encrypted OST to any portable data file format like PST.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.