Belgian authorities say they arrested a suspect tied to a phishing operation that stole more than $572,000 from victims and laundered the proceeds through cryptocurrency.
Attackers are now exploiting CVE-2026-48282, a maximum-severity Adobe ColdFusion vulnerability that can lead to remote code execution on unpatched servers. Adobe released fixes this week and urged administrators to install them quickly.
Scammers are planting fake purchase receipts inside the Shop app to push callback phishing attacks, with victims urged to call fake support numbers or install remote access software.
Meta has paused its Model Capability Initiative after a data leak reportedly exposed sensitive employee information to the wider company.
A malware campaign is using compromised WhatsApp accounts to send fake business documents that hide VBScript files, leading to remote access on Windows PCs. The activity has been seen across multiple countries and uses localized filenames to trick recipients into opening the attachment.
Amazon says its new InvokeGuardrailChecks API for Bedrock Guardrails lets developers apply individual safety checks at specific points in an agentic workflow, without creating separate guardrail resources. The company says the API runs in detect-only mode and returns numeric scores so applications can decide whether to block, retry, bypass, or log.
WhatsApp says it detected and blocked new spear-phishing campaigns allegedly tied to NSO Group, after users reported social engineering attempts aimed at pushing them to external websites.
Google says a new private analytics system combines secure aggregation with trusted execution environments to help Android services measure performance without exposing individual user data.
Radiology Associates of Richmond says a breach tied to a July 2025 intrusion may have exposed protected health information for 266,183 people, with notices now going out to impacted individuals.
Drupal says it is already seeing attempts to exploit CVE-2026-9082, a highly critical flaw that can affect PostgreSQL-backed sites and may lead to SQL injection, privilege escalation, and remote code execution.