"Cyera acquiring Oasis Security in $1 billion deal."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 28 July 2026, 1513 UTC.

Content and Source:  "SecurityWeek" via email subscription from https://feedly.com.

https://feedly.com/i/subscription/content/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjouranal.net).

SecurityWeek

99K followers42 articles per week

#security#tech

116

Today

Cyera Acquiring Oasis Security in $1 Billion Deal

by Eduard Kovacs / 13min

Oasis Security recently raised $120 million in Series B funding for its agentic access management platform. The post appeared first on SecurityWeek .

Apple Patches 87 Vulnerabilities in iOS, 155 in macOS Tahoe

3 TTPs

•

by Eduard Kovacs / 48min

•

CVE-2026-43810 & 8 others

Apple announced that dozens of vulnerabilities have been patched in each of its operating systems. The post appeared first on SecurityWeek .

OT Security Startup Frenos Raises $1.52 Million

Frenos raises 1520000

•

by Ionut Arghire / 2h

The company will use the fresh investment to grow its customer success and AI R&D teams. The post appeared first on SecurityWeek .

Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model

Microsoft launches cybersecurity AI

•

by Eduard Kovacs / 3h

The company claims MAI-Cyber-1-Flash tops Anthropic’s Mythos and OpenAI’s GPT-5.6 Sol in CyberGym testing. The post appeared first on SecurityWeek .

Hacker Conversations: Tal Kollander’s Journey From Black Hat to Hack Blocker

by Kevin Townsend / 4h

Tal Kollander’s history divides neatly into two halves: first as an active hacker and then as the block that stops hacks. The post appeared first on SecurityWeek .

Hush Security Raises $30 Million for AI Agent Governance

by Ionut Arghire / 4h

The startup will invest in expanding engineering and sales teams, accelerating ecosystem support, and expanding corporate partnerships. The post appeared first on SecurityWeek .

Yesterday

Google Adopts New Threat Actor Naming System

Google unifies cyber threat names

•

by Ionut Arghire / 6h

The new two-word naming convention uses a memorable term utilized in public reporting and a cluster-categorization word. The post appeared first on SecurityWeek .

Unpatched Fastjson Vulnerability Exploited in Attacks

2 TTPs

•

by Ionut Arghire / 7h

•

CVE-2026-16723

The critical remote code execution bug can be exploited without authentication, under the library’s stock default configurations. The post appeared first on SecurityWeek .

Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day

2 TTPs

•

by Ionut Arghire / 8h

Impacting on-premises deployments, the OS command injection allows attackers to access privileged internal functionality. The post appeared first on SecurityWeek .

Origin Energy Data Breach Affects 900,000 Australians

2 TTPs

•

by Eduard Kovacs / 10h

•

Origin Energy probes data breach

The hacker claimed to have stolen the information of 2 million Origin Energy customers after breaching its systems. The post appeared first on SecurityWeek .

For Some, So-Called ‘Skynet Day’ Came too Close to Sci-Fi After a Rogue Agent Hacked Into a Startup

AI agent hacks startup

•

by Associated Press / 12h

Decades after it appeared in “The Terminator,” Skynet looks more like a forecast of the cyber incident in which a rogue AI system hacked into another AI company on its own. The post appeared first on SecurityWeek .

New GitHub, PyPI Policies Boost Supply Chain Security

GitHub PyPI add time defenses

•

by Ionut Arghire / 1d

Dependabot gets a three-day cooldown window before opening pull requests, and PyPI rejects file uploads to releases older than 14 days. The post appeared first on SecurityWeek .

PTC Windchill Vulnerability Exploited in Ransomware Campaign

7 TTPs

•

by Ionut Arghire / 1d

•

CVE-2026-12569

The critical unsafe deserialization flaw allows attackers to execute arbitrary code remotely, without authentication. The post appeared first on SecurityWeek .

MedusaHVNC Malware Uses Hidden Windows Desktops to Evade Detection

IoC > 1 IP

•

by Kevin Townsend / 1d

•

18 TTPs

The malware-as-a-service operation launches legitimate browsers on an invisible desktop, giving attackers persistent and covert remote access to compromised Windows systems. The post appeared first on SecurityWeek .

Nvidia and Tech Giants Launch AI Security Alliance

Open Secure AI Alliance launched

•

by Eduard Kovacs / 1d

The Nvidia-led coalition aims to give defenders more open tools for testing, auditing and protecting AI models and agents. The post appeared first on SecurityWeek .

Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack

by Eduard Kovacs / 1d

The Anubis cybercrime group has taken credit for the attack and is threatening to leak data. The post appeared first on SecurityWeek .

Beelzebub Raises $3.4 Million for Hacker-Trapping Platform

Beelzebub raises 3M euros

•

by Ionut Arghire / 1d

The company plans to expand its research team, open new offices in Rome and San Francisco, and acquire new clients. The post appeared first on SecurityWeek .

What’s Hiding in Your Mobile Apps? Lookout MSEC Aims to Find Out

by Kevin Townsend / 1d

The new Mobile Security Exposure Center creates SBOMs for enterprise mobile apps to uncover vulnerable components, dependencies and hidden risks. The post appeared first on SecurityWeek .

Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentials

6 TTPs

•

by Ionut Arghire / 1d

•

Hotel WiFi credential theft

A threat actor has been using the compromised appliances to target the Microsoft 365 accounts of traveling corporate employees. The post appeared first on SecurityWeek .

Anthropic’s Opus 5 Nears Mythos 5 on Finding Bugs, but Falls Short on Exploits

Anthropic launches Opus 5 cheaper

•

by Eduard Kovacs / 1d