Posts of last 24 hours

The Business Cost of Alert Fatigue: How to Reduce Delays, Escalations for Your SOC as 70% Alerts are Uninvestigated

Alert fatigue is no longer just an analyst problem. It has become a business problem.  Every unnecessary investigation, delayed escalation, or manual validation consumes valuable SOC resources and extends the time real threats remain active. As organizations face growing alert volumes without proportional team growth, reducing investigation time has become just as important as improving detection.  Let’s find […]

The post The Business Cost of Alert Fatigue: How to Reduce Delays, Escalations for Your SOC as 70% Alerts are Uninvestigated appeared first on Cyber Security News.

https://cybersecuritynews.com/the-business-cost-of-alert-fatigue/
Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and run any command on a developer's computer. There is no click to fall for and no approval box to ignore. Cato AI Labs found the pair and named them DuneSlide. They are tracked as CVE-2026-50548 and CVE-2026-50549, both rated 9.8 out of 10 (or 9.3
https://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.html
Неизвестные слили данные Центробанка Ливии и заминировали их. Каждый скачанный файл может стать новой атакой
Внутри документов спрятали вирус — для тех, кто попытается их скачать.
https://www.securitylab.ru/news/574341.php
Fileless Malware Abuses Google Blogspot to Deploy Infostealer in Memory
Securonix said the Veil#Drop campaign abuses Google Blogspot to deliver PureLog Stealer in memory
https://www.infosecurity-magazine.com/news/veil-drop-blogspot-purelog-stealer/
Fake Interpol Investigation Emails Push Ransomware at Small Businesses Globally
Fake Interpol investigation emails are targeting small businesses with Proton Drive links that deliver ransomware, encrypt files, and route victims to Tox chat.
https://hackread.com/fake-interpol-investigation-emails-ransomware-small-businesses/
索尼 PS 从 2028 年 1 月起不再发售新游戏的光盘版
数字游戏是未来，索尼正式宣布其 PS 游戏机从 2028 年 1 月起不再发售新游戏的实体光盘版本。这也意味着未来的的 PS 游戏机不会再发售包含蓝光光驱的型号。索尼称 2028 年 1 月之前已发售或即将发售的游戏实体光盘版不受影响。消费者普遍偏爱数字媒介而不是实体光盘，索尼表示它只是顺应这一趋势罢了。

https://www.solidot.org/story?sid=84733
Apple ‘Hide My Email’ Vulnerability Exposes Users’ Real Email Addresses

Apple’s “Hide My Email” feature is currently affected by an unpatched vulnerability that allows attackers to discover the real email address behind an anonymized alias, according to researcher Tyler Murphy and independent tests by 404 Media. Apple’s Hide My Email, part of iCloud+, generates unique relay addresses intended to keep a user’s primary inbox private […]

The post Apple ‘Hide My Email’ Vulnerability Exposes Users’ Real Email Addresses appeared first on Cyber Security News.

https://cybersecuritynews.com/apple-hide-my-email-vulnerability/
Год назад 29% экспертов были готовы полностью довериться автономному пентесту — теперь таких лишь 9%
Cobalt зафиксировала кризис автопентеста.
https://www.securitylab.ru/news/574340.php
Turning Indicators into Intelligence in OpenCTI with Criminal IP
Threat intelligence is only as useful as the context behind it. Criminal IP explains how its integration enriches threat indicators in OpenCTI with risk scoring, infrastructure intelligence, and phishing analysis. [...]
https://www.bleepingcomputer.com/news/security/turning-indicators-into-intelligence-in-opencti-with-criminal-ip/
Turning Indicators into Intelligence in OpenCTI with Criminal IP
Torrance, California, USA, 1st July 2026, CyberNewswire
https://hackread.com/turning-indicators-into-intelligence-in-opencti-with-criminal-ip/

Managed ad