Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

Vulnerabilities & Exploits

Meta on Trial: Platform Safety Scrutinized Over Child Exploitation Allegations

Meta on Trial: Platform Safety Scrutinized Over Child Exploitation Allegations

A federal jury is hearing a lawsuit that accuses Meta’s family of apps—particularly Facebook and Instagram—of facilitating child sexual exploitation, grooming, and addictive usage patterns. Plaintiffs claim the company’s automated safety tools, reporting mechanisms, and age‑verification processes were insufficient, allowing predators to contact minors and

Threat Intelligence

VMware vDefend Lateral Security Boosts Zero‑Trust in Private Clouds

VMware vDefend Lateral Security Boosts Zero‑Trust in Private Clouds

VMware has introduced vDefend Lateral Security, an AI‑driven module that monitors and validates every inter‑workload communication within private cloud environments. By continuously profiling normal traffic patterns and applying zero‑trust verification to each connection, the solution can spot anomalous lateral movements—such as unauthorized service‑to‑service calls,

SOC & Automation

Falcon Fusion SOAR Accelerates SOC Automation and Cuts Response Time

Falcon Fusion SOAR Accelerates SOC Automation and Cuts Response Time

CrowdStrike unveiled Falcon Fusion SOAR, a low‑code platform that lets security operations centers stitch together alerts from disparate security tools into automated response playbooks. The solution provides a visual workflow builder, pre‑made integrations, and a shared library so analysts can orchestrate containment, remediation, and evidence‑gathering steps without

Security Culture & Human Factors

CrowdStrike’s Human‑AI Loop Accelerates Zero‑Day Detection and Response

CrowdStrike’s Human‑AI Loop Accelerates Zero‑Day Detection and Response

CrowdStrike disclosed a “human‑AI feedback loop” in which threat analysts continuously inject contextual insights—such as tactics, techniques, and procedures (TTPs) and emerging indicator patterns—into its machine‑learning models. This bidirectional flow lets the AI refine its detection algorithms in real time, while analysts benefit from increasingly precise

Malware & Ransomware

Nation‑State Hijacks Notepad++ Updates, Threatening Developer Supply Chains

Nation‑State Hijacks Notepad++ Updates, Threatening Developer Supply Chains

Palo Alto Networks’ Unit 42 uncovered a supply‑chain attack on the popular Notepad++ editor, where a nation‑state actor compromised the official build pipeline and injected malicious code into legitimate software updates. The compromised binaries were signed and distributed through the official download channels, reaching millions of developers worldwide.

Threat Intelligence

Conpet Oil Pipeline Hit by Cyberattack, Exposing Energy Critical Infrastructure Gaps

Conpet Oil Pipeline Hit by Cyberattack, Exposing Energy Critical Infrastructure Gaps

Romania’s national oil pipeline operator, Conpet, suffered a cyber intrusion that crippled its internal IT environment and rendered its public website offline. While investigators have not yet disclosed the attack vector, early indicators point to a sophisticated threat actor capable of bypassing existing defenses and disrupting both corporate and

Malware & Ransomware

AI‑Driven Prompt RCE and 0‑Click Claude Exploit Spark New Threat Wave

AI‑Driven Prompt RCE and 0‑Click Claude Exploit Spark New Threat Wave

The latest ThreatsDay Bulletin reports a coordinated surge of AI‑powered attacks. Researchers uncovered a prompt‑injection remote code execution (RCE) flaw that lets adversaries execute arbitrary code by crafting malicious inputs to AI models. In parallel, a zero‑click exploit was observed targeting the Claude AI system, allowing attackers

Malware & Ransomware

Amaranth-Dragon Leverages CVE‑2025‑8088 to Target Southeast Asian Networks

Amaranth-Dragon Leverages CVE‑2025‑8088 to Target Southeast Asian Networks

Checkpoint researchers have linked the state‑aligned threat group Amaranth‑Dragon to active exploitation of the newly disclosed CVE‑2025‑8088 flaw. The actors deployed a bespoke malware loader that chains the vulnerability to gain initial code execution on vulnerable enterprise servers, then installs a stealthy back‑door. Traffic generated