News Archives

New Avalon Malware Framework Packs CrownX Ransomware Capabilities

Researchers uncovered Avalon, a modular malware framework delivering the CrownX ransomware via a multi-stage phishing chain that evades detection, harvests credentials, moves laterally, and sabotages recovery. The report also touches on AI-assisted and agentic ransomware trends.

July 3, 2026

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

Two high-severity vulnerabilities in the Cursor AI code editor - tracked as CVE-2026-50548 and CVE-2026-50549 and dubbed

July 2, 2026

Anthropic Restores Claude Fable 5 After U.S. Commerce Department Lifts Export Controls

Anthropic has reactivated Claude Fable 5 globally after U.S. export controls tied to a jailbreak were removed. Here’s what happened, how Anthropic addressed the vulnerability, and what this episode means for model governance and competition.

July 1, 2026

Apple fixes 30+ flaws across iOS, macOS and Safari, including AI-discovered WebKit bugs

Apple has pushed security updates for iOS, macOS and Safari that close more than 30 vulnerabilities, including four WebKit defects found with the help of AI tools such as Anthropic Claude and OpenAI Codex Security.

June 30, 2026

WhatsApp rolls out username reservations to shield phone numbers

WhatsApp has begun allowing users worldwide to reserve usernames to keep phone numbers private. The optional feature, rolling out now, lets people connect via usernames and includes an optional username key for extra control.

June 29, 2026

Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials

The Security Service of Ukraine and the FBI uncovered a prolonged Russian intelligence campaign using fake support SMS to harvest messaging credentials from officials, military personnel, politicians, activists and private citizens across Ukraine, Europe and the U.S. Guidance and recent attributions are summarized.

June 28, 2026