Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs
by info@thehackernews.com (The Hacker News) on July 21, 2026 at 6:46 pm
Apple has moved to address a security flaw in its Hide My Email service that enabled users' real email addresses to be unmasked, effectively undermining the feature's privacy guarantees. 404 Media reported Tuesday that a fix for the issue was deployed by Apple on July 3, 2026, after more than a year, when it was disclosed to the company by Tyler Murphy, co-founder of EasyOptOuts. Hide My Email
AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code
by info@thehackernews.com (The Hacker News) on July 21, 2026 at 4:06 pm
Hidden text on a web page was enough to make Kiro, AWS's agentic coding IDE, rewrite its own configuration file and run an attacker's code on a developer's machine, with no approval step able to stop it. Intezer, in research with Kodem Security, found that a request as ordinary as asking Kiro to summarize a page could end in remote code execution. AWS has patched the issue, and no CVE has been
Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities
by info@thehackernews.com (The Hacker News) on July 21, 2026 at 3:09 pm
Google's DeepMind on Tuesday announced the release of Gemini 3.5 Flash Cyber, a specialized artificial intelligence (AI) model built atop 3.5 Flash that's designed to discover, validate, and patch vulnerabilities quickly and efficiently. According to the tech giant, the model will be exclusively available to governments and trusted partners via CodeMender as part of a limited-access pilot
Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC
by info@thehackernews.com (The Hacker News) on July 21, 2026 at 2:57 pm
A third SharePoint Server flaw patched by Microsoft as part of its Patch Tuesday update for July 2026 has come under active exploitation, per watchTowr. The vulnerability in question is CVE-2026-50522 (CVSS score: 9.8), a critical deserialization of untrusted data in Microsoft Office SharePoint that could allow an unauthorized attacker to execute code over a network. Microsoft credited DEVCORE
Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access
by info@thehackernews.com (The Hacker News) on July 21, 2026 at 2:04 pm
Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) ransomware on victim environments. Arctic Wolf Labs said it investigated multiple intrusions in June 2026 that began with the exploitation of CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw affecting the portal and gateway