VulnHub

Real-time Cybersecurity News

DHS revives critical infrastructure cybersecurity information sharing program

SCM feed for Latest
Critical

Overview

The Department of Homeland Security (DHS) is reinstating a program called ANCHOR-CI, aimed at enhancing cybersecurity information sharing among various government levels and private sector companies. This initiative will create a platform for federal, state, local, tribal, and territorial representatives to collaborate with critical infrastructure owners and operators. The goal is to improve communication and response to cyber threats that could impact vital services. By fostering these connections, the DHS hopes to strengthen the overall security posture of the nation's critical infrastructure, which includes everything from power grids to transportation systems. This move comes as cyberattacks on essential services continue to rise, making it crucial for stakeholders to work together effectively.

Key Takeaways

  • Timeline: Newly disclosed

Original Article Summary

ANCHOR-CI will serve as a forum for federal, state, local, tribal, and territorial government representatives to engage with private sector entities and critical infrastructure owners and operators.

Impact

Not specified

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Newly disclosed

Remediation

Not specified

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Critical.

Read Original Article

Related Coverage

ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories

The Hacker News

This week's security updates reveal a series of vulnerabilities across various systems, including browsers, AI tools, and email services. Researchers discovered that many of these weaknesses stem from small permission gaps and inadequate security checks, which attackers can exploit. Notably, the article mentions the BlueHammer ransomware, which targets businesses by leveraging these types of vulnerabilities. This situation underscores the need for organizations to regularly assess their security measures and patch any identified weaknesses to prevent potential breaches. Overall, the findings serve as a reminder that even seemingly secure systems can harbor significant risks if not properly maintained.

Jul 2, 2026

New CitrixBleed Vulnerability Exploited Immediately After Public Disclosure

SecurityWeek

Hackers have begun exploiting a newly disclosed vulnerability known as CitrixBleed, targeting NetScaler appliances. This vulnerability allows attackers to access arbitrary memory content through HTTP responses, putting sensitive information at risk. The exploitation started almost immediately after the vulnerability was publicly disclosed, indicating a rapid response from malicious actors. Organizations using affected NetScaler devices need to be vigilant, as this could lead to significant data breaches or unauthorized access. It's crucial for companies to take immediate action to safeguard their systems and protect sensitive information from being compromised.

Jul 2, 2026

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

The Hacker News

A new malware called Umbrij, linked to the cyber group ToddyCat, is targeting corporate Gmail accounts by exploiting the Google API. According to Kaspersky's recent report, the malware allows attackers to gain stealthy access to email communications, raising significant concerns for businesses that rely on Gmail for their operations. This tactic of compromising access through APIs highlights potential vulnerabilities in how companies manage their email systems. As email remains a primary communication tool for organizations, the implications of such breaches could be severe, resulting in sensitive information leaks and potential financial losses. Companies using Gmail should enhance their security measures to safeguard against this type of attack.

Jul 2, 2026

Researcher Behind 'Exploitarium' Explains Release of Undisclosed Zero-Day Exploits

Infosecurity Magazine

A cybersecurity researcher has released over 30 proof-of-concept exploits without revealing the underlying vulnerabilities first. This action, known as 'Exploitarium,' raises significant concerns within the cybersecurity community as it could enable malicious actors to exploit these vulnerabilities before they are patched. The researcher argues that this approach can pressure vendors to address security flaws more quickly. However, this practice may also put many users and organizations at risk, as they might not be aware of the potential threats posed by these exploits. The implications of this release emphasize the ongoing tension between security research and responsible disclosure, highlighting the need for better communication between researchers and vendors.

Jul 2, 2026

FortiBleed Campaign Linked to INC, Lynx Ransomware Attacks

SecurityWeek

Researchers have identified that credentials stolen from FortiGate firewalls are being misused in ransomware attacks linked to the INC and Lynx groups. This breach, known as the FortiBleed campaign, has compromised hundreds of thousands of firewall credentials, allowing attackers to launch targeted ransomware operations. This situation poses a significant risk, as organizations relying on FortiGate firewalls may find themselves vulnerable to further exploitation. Companies should take immediate action to secure their devices and monitor for unusual activity. The findings underscore the importance of maintaining strong security practices and regularly updating credentials to mitigate these risks.

Jul 2, 2026

Anthropic's AI Finds Bugs. IBM Bets $5B It Can Fix Them.

darkreading

IBM and Red Hat are launching a new initiative called Project Lightwell, which involves deploying 20,000 engineers to address vulnerabilities identified by Anthropic's AI tool, Mythos. This comes amid growing concerns about the security of the open-source software supply chain, particularly as more companies rely on open-source components. The findings from Mythos have sparked discussions in the tech community about how to better secure these systems and prevent potential exploitation. This investment reflects a significant commitment to improving software security, especially in light of increasing cyber threats targeting open-source software. As organizations continue to adopt open-source solutions, ensuring their safety becomes crucial to protecting sensitive data and maintaining system integrity.

Jul 2, 2026