The fresh security update resolves six critical and high-severity use-after-free vulnerabilities.

The post Chrome 150 Update Patches Severe Memory Safety Bugs appeared first on SecurityWeek.

The company disconnected its systems on July 13 and is starting to gradually restore operations.

The post Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei appeared first on SecurityWeek.

Thalha Jubair and Owen Flowers were prosecuted over a 2024 cyberattack targeting Transport for London (TfL).

The post Two Scattered Spider Hackers Sentenced to Jail in UK appeared first on SecurityWeek.

The suspects and their companies were previously sanctioned by the United States and its allies.

The post US Charges Russian Individuals and Firms for Running Cybercrime Services appeared first on SecurityWeek.

Public exploit code targeting the Firefox flaws exists, but no in-the-wild exploitation has been observed.

The post Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates appeared first on SecurityWeek.

The D1R cybercrime group claimed to have stolen valuable data from Synopsys and Bosch, threatening to leak it unless a ransom is paid. 

The post Synopsys Finds No Evidence of Data Breach Amid Bosch Hack Claims appeared first on SecurityWeek.

Other noteworthy stories that might have slipped under the radar: Abnormal AI sued by Anthropic, AssuranceAmerica data breach affects 7 million people, NSA brings back TAO.

The post In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Disrupts Ransomware Ops appeared first on SecurityWeek.

Angelo Martino, a former ransomware negotiator, was sentenced to 70 months for helping the BlackCat/Alphv group.

The post Third US Security Expert Sentenced to Prison for Helping Ransomware Gang appeared first on SecurityWeek.

The security refresh resolves 13 use-after-free bugs, including two critical-severity flaws found by Google.

The post Chrome 150 Update Patches 27 Vulnerabilities appeared first on SecurityWeek.

The alleged victim, believed to be a small Ohio county, reportedly paid the extortion group to prevent the public release of sensitive stolen data.

The post County Government Reportedly Paid $1 Million to Cyber Extortion Group appeared first on SecurityWeek.

The threat actor uses modular RATs and information stealers in financially motivated and cyber espionage campaigns.

The post Armored Likho APT Targeting Government, Electric Power Entities appeared first on SecurityWeek.

Researchers uncovered two campaigns embedding indirect prompt injections in malicious websites to exploit autonomous AI agents browsing the web.

The post Prompt Injection Attacks Trick AI Agents Into Making Crypto Payments appeared first on SecurityWeek.

Noteworthy stories that might have slipped under the radar: Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the US over ATM jackpotting.

The post In Other News: Canadian Hacker Jailed, Open Source Zero-Days, Two Sentenced for ATM Jackpotting appeared first on SecurityWeek.

In April, ShinyHunters accessed the company’s corporate IT systems and stole patients’ personal and medical information.

The post Medtronic Data Breach Impacts 3.8 Million People appeared first on SecurityWeek.

Prosecutors say 19-year-old Peter Stokes was a member of Scattered Spider, the hacking group linked to more than 100 network intrusions and over $100 million in ransom payments.

The post Alleged Scattered Spider Hacker Extradited to US appeared first on SecurityWeek.

NetNut rented access to millions of compromised devices, allowing cybercriminals and nation-state actors to mask their identities during attacks.

The post Google, FBI Disrupt NetNut Residential Proxy Network Powered by Millions of Devices appeared first on SecurityWeek.

Microsoft's new Teams admin policy requires organizer approval for external AI bots, giving organizations greater visibility and control over automated participants in sensitive meetings.

The post Microsoft Adds New Teams Controls to Block Unauthorized AI Bots From Meetings appeared first on SecurityWeek.

Fifteen of the newly patched flaws have been rated ‘critical’ and 67 have been rated ‘high severity’.

The post Google Patches 382 Chrome Vulnerabilities appeared first on SecurityWeek.

Curated by Sherpa Intelligence: Your Guide Up a Mountain of Information

Summary:

• WhatsApp users may begin to register a “claim” for their preferred username.
• Can only be done via app, will not work on web/desktop versions.
• Meta will need your permission to add your new WhatsApp username claim to their Accounts Center.
• Eligibility to register your claim is on a rolling basis, although some users may already be able to claim. Look for Settings > Account > Username.
• Users should expect an in-app notification when the usernames go live.

Resources:

(1) It’s time to reserve your WhatsApp username

(2) How to create and manage your username

(3) WhatsApp to let people chat by swapping usernames instead of phone numbers BBC News, June 29th

If you enjoy what I create, you can support me at:
https://ko-fi.com/infosecsherpa