https://sovereignsecurity.jp/ 世界のサイバーセキュリティ・ガバナンス・コンプライアンスニュースの集約フィード ja 2026-07-17T14:02:58Z https://www.elastic.co/security-labs/contagious-interview-malware-svg-steganography DPRK-aligned hackers hid malware inside SVG flag images to backdoor developer job interview coding tests. Not one antivirus vendor caught it. threat Elastic Security Labs 2026-07-18 https://therecord.media/dairy-company-fairlife-suspends-production-us-cyber-incident Fairlife’s U.S. operation includes plants in Michigan, New York and Arizona, and the company's retail sales passed $1 billion in 2022. regulation The Record 2026-07-17 https://www.gibsondunn.com/litigator-of-the-week-runner-up-and-shout-outs-2/ First up this week is a Gibson, Dunn & Crutcher team led by Barry Berke, Jordan Estes and Daniel Ketani. The post Litigator of the Week Runner-Up and Shout-Outs appeared first on Gibson Dunn . regulation Gibson Dunn (Cyber) 2026-07-17 https://www.darkreading.com/vulnerabilities-threats/gold-eagle-clearinghouse-targets-security-gap The White House launched Gold Eagle to coordinate vulnerability response in a new AI world, but multiple questions linger over how it's being implemented. threat Dark Reading 2026-07-17 https://therecord.media/ukraine-acting-defense-minister-yevhenii-khmara Yevhenii Khmara, a major general with deep experience in intelligence, counterterrorism and long-range strikes against Russia, is Ukraine's new acting defense minister. regulation The Record 2026-07-17 https://www.helpnetsecurity.com/2026/07/17/spirals-ransomware-south-asia/ A previously unknown ransomware strain called Spirals was used last month in an attack against an IT services company in South Asia, where attackers went from initial access to data theft and encrypting the network in less than 24 hours, according to Symantec’s Threat Hunter Team… threat Help Net Security 2026-07-17 https://www.csoonline.com/article/4186743/new-ciso-appointments-2026.html The upper ranks of corporate security are seeing a high rate of change as companies try to adapt to the evolving threat landscape. Many companies are hiring a chief security officer (CSO) or chief information security officer (CISO) for the first time to support a deeper commitme… governance CSO Online 2026-07-17 https://www.security-next.com/187476 島根県立大学は、公開講座の申込者にメールで資料を送信した際にミスがあり、メールアドレスが流出したことを明らかにした。 incident Security NEXT 2026-07-17 https://www.securityweek.com/podcast-broken-governance-agentic-ai-and-the-mindstone-agent-exclusive/ (Video) Artificial intelligence is transforming cybersecurity, but are governance, compliance, and security practices evolving fast enough to keep up? The post Podcast: Broken Governance, Agentic AI, and the MindStone Agent Exclusive appeared first on SecurityWeek . threat SecurityWeek 2026-07-17 https://www.darkreading.com/cloud-security/google-bets-agentic-defense-strategy-outpace-attackers Google Cloud incorporates key Wiz capabilities into an agentic defense platform to automate threat detection and remediation against AI attacks. threat Dark Reading 2026-07-17 https://thehackernews.com/2026/07/eu-orders-google-to-open-android-mic.html The European Commission on Thursday ordered Google to give rival AI assistants the same reach into Android that Gemini already has: the camera, the microphone, whatever is on screen, a wake word that fires with the display off, and the ability to drive other apps in the backgroun… threat The Hacker News 2026-07-17 https://www.securityweek.com/beacon-security-raises-13-million-for-security-data-platform/ The startup helps organizations detect, hunt, and protect their assets across environments at machine speed. The post Beacon Security Raises $13 Million for Security Data Platform appeared first on SecurityWeek . threat SecurityWeek 2026-07-17 https://thehackernews.com/2026/07/the-race-to-field-military-autonomy-is.html Military forces are under increasing pressure to field autonomous capabilities faster than ever before. Across the U.S., UK, and NATO, new investment, evolving defense strategies, and accelerated acquisition pathways are transforming how capability is delivered, rewarding program… threat The Hacker News 2026-07-17 https://www.securityweek.com/industry-reactions-to-pentagon-suspending-cmmc-phase-2-feedback-friday/ Industry professionals broadly agree that the suspension pauses third-party CMMC audits but not the underlying legal obligation to protect CUI. The post Industry Reactions to Pentagon Suspending CMMC Phase 2: Feedback Friday appeared first on SecurityWeek . threat SecurityWeek 2026-07-17 https://www.bleepingcomputer.com/news/security/new-windows-legacyhive-zero-day-exploit-grants-hackers-admin-access/ A security researcher using the "Nightmare Eclipse" handle has released a Windows zero-day exploit dubbed LegacyHive that allows attackers to escalate privileges on up-to-date Windows systems. [...] threat BleepingComputer 2026-07-17 https://thehackernews.com/2026/07/armenia-detains-russian-tourist-on-us.html Armenia has held a Russian tourist named Aleksandr Ermakov in a detention center since June 28, on a U.S. extradition request for a REvil ransomware suspect named Aleksandr Ermakov. His wife, Maria Yurova, told REN TV that border officers pulled him out of the departure hall at Y… threat The Hacker News 2026-07-17 https://blog.nsfocus.net/%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e4%ba%ae%e7%9b%b8%e5%8d%81%e4%b8%83%e5%b1%8a%e5%9b%bd%e9%99%85%e5%8f%af%e9%9d%a0%e6%80%a7%e7%bb%b4%e4%bf%ae%e6%80%a7%e5%ae%89%e5%85%a8%e6%80%a7%e4%bc%9a%e8%ae%ae/ 近日，第十七届国际可靠性、维修性、安全性会议（ICRMS2026）在广州圆满落幕。绿盟科技集团董事、高级副总裁 Read More threat 绿盟科技 (NSFOCUS) 2026-07-17 https://blog.nsfocus.net/%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e4%ba%ae%e7%9b%b82026%e4%b8%96%e7%95%8c%e4%ba%ba%e5%b7%a5%e6%99%ba%e8%83%bd%e5%a4%a7%e4%bc%9a-%e7%ad%91%e7%89%a2ai%e5%ae%89%e5%85%a8%e5%ba%95%e5%ba%a7%ef%bc%8c/ 7月17日，2026世界人工智能大会暨人工智能全球治理高级别会议（WAIC）在上海盛大召开，国家主席习近平出席 Read More threat 绿盟科技 (NSFOCUS) 2026-07-17 https://www.security-next.com/187519 化学メーカーの日産化学は、同社システムが第三者によりサイバー攻撃を受けた可能性があることを明らかにした。調査を進めている。 incident Security NEXT 2026-07-17 https://www.security-next.com/186819 大阪市は、市内小学校において、児童の個人情報を含む絵画作品を紛失したことを明らかにした。 incident Security NEXT 2026-07-17 https://cafe-dc.com/network/lumen-lights-up-network-upgrades-for-yankees-stadium/ タンパから2本の100ギガの光ファイバー回線を介してスタジアムを接続 Lumen Technologiesは、フロリダ州タンパに... The post Lumenがヤンキー・スタジアムのネットワークをアップグレード first appeared on Data Center Café . governance Data Center Cafe 2026-07-17 https://www.security-next.com/187392 農産物の国際検査会社である海外貨物検査は、契約している有機JAS認証審査員がサポート詐欺の被害に遭い、貸与したパソコンが遠隔操作される状態となったことを明らかにした。 incident Security NEXT 2026-07-17 https://www.security-next.com/187553 米サイバーセキュリティインフラストラクチャセキュリティ庁（CISA）は、「SharePoint Server」に関する複数の脆弱性が悪用されているとし、利用者にセキュリティ対策を呼びかけた。 incident Security NEXT 2026-07-17 https://www.helpnetsecurity.com/2026/07/17/apple-facetime-calls-scams/ Apple is warning iPhone and iPad users that scammers are using FaceTime calls to trick them into handing over money and account details. According to Apple, scammers pose as trusted organizations and use social engineering to convince people to hand over account credentials, secu… threat Help Net Security 2026-07-17 https://unit42.paloaltonetworks.com/siemens-rox-ii-zero-day-vulnerabilities/ A technical analysis of three chained zero-day vulnerabilities in Siemens ROX II OT switches that allow privilege escalation and persistent root access. The post Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy appeared first on Unit 42 . threat Palo Alto Unit 42 2026-07-17 https://www.wired.com/story/san-francisco-demands-apple-and-google-delete-ai-nudify-apps-from-app-stores/ The City Attorney’s Office sent the tech giants cease-and-desist letters this week telling them to stop profiting from 13 “face-swap” apps that are overwhelmingly used to target women and girls. threat WIRED Security 2026-07-17 https://cafe-dc.com/cloud/nebius-adds-on-prem-partner-offering-to-its-cloud-portfolio/ パートナー企業は自社のデータセンターにNebiusのクラウドを展開可能に Nebiusは、自社クラウドプラットフォームにオンプレ... The post Nebius、クラウドポートフォリオにオンプレミスサービスを追加 first appeared on Data Center Café . governance Data Center Cafe 2026-07-17 https://www.infosecurity-magazine.com/news/cisa-urgent-patch-fortinet/ US government agencies have until July 19 to patch two critical Fortinet vulnerabilities threat Infosecurity Magazine 2026-07-17 https://digital-strategy.ec.europa.eu/en/events/advanced-virtual-human-twins-vht-platform-annual-event Advanced Virtual Human Twins (VHT) Platform - Annual Event Anonymous (not verified) Fri, 07/17/2026 - 11:30 20 October 2026 - 21 October 2026 Brussels and online The first annual event for the Advanced Virtual Human Twins (VHT) Platform will provide an opportunity to take stock o… ai_governance EU Digital Strategy 2026-07-17 https://cafe-dc.com/hpc/nvidia-partners-with-noetra-for-140mw-vera-rubin-cluster-in-japan/ 「 AI Factory」は、日本政府のAIロボティクス戦略を支援する Nvidiaは、日本国内にVera Rubinベースの「A... The post Nvidia、Noetraと提携し、日本で140MWの「Vera Rubin」クラスターを構築 first appeared on Data Center Café . governance Data Center Cafe 2026-07-17 https://www.helpnetsecurity.com/2026/07/17/1password-anthropic-claude-integration/ 1Password has introduced 1Password for Claude, a beta integration that lets Anthropic’s AI assistant complete browser tasks requiring authentication without accessing users’ passwords or other secrets. The integration is available to paid Claude subscribers (Pro, Max, Team, and E… threat Help Net Security 2026-07-17 https://www.bleepingcomputer.com/news/microsoft/windows-server-2022-reach-end-of-mainstream-support-in-90-days/ Microsoft announced that Windows Server 2022 will reach the mainstream end date in October 2026, but will switch to extended support and continue receiving security updates for five more years. [...] threat BleepingComputer 2026-07-17 https://www.securityweek.com/cyberattack-disrupts-operations-of-japanese-frozen-food-giant-nichirei/ The company disconnected its systems on July 13 and is starting to gradually restore operations. The post Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei appeared first on SecurityWeek . threat SecurityWeek 2026-07-17 https://www.csoonline.com/article/4197923/the-saas-blind-spot-why-security-teams-cant-get-inside-their-own-apps.html Most organizations I work with have invested heavily in cloud security. They have endpoint detection tools, SIEM platforms, cloud security posture management, and skilled security teams running on a 24/7 shift. And yet, when I ask them a simple question — who has admin access in governance CSO Online 2026-07-17 https://www.infosecurity-magazine.com/news/the-gentlemen-most-prolific/ Analysis of ransomware incidents by ReliaQuest indicates a shift in the ransomware landscape threat Infosecurity Magazine 2026-07-17 https://thehackernews.com/2026/07/acr-stealer-uses-clickfix-lures-to.html ACR Stealer, an infostealer in circulation since 2024, is walking out of enterprise networks with saved browser passwords, live session tokens, PDFs, Microsoft 365 documents, and files from synced OneDrive and SharePoint folders. It gets in because someone pasted a command into a… threat The Hacker News 2026-07-17 https://thehackernews.com/2026/07/new-goserpent-malware-targets-southeast.html Cybersecurity researchers have discovered a previously undocumented malware called GoSerpent that has been put to use in cyber attacks targeting entities in Southeast Asia since late 2025 with a focus on long-term access and intelligence gathering. Russian cybersecurity company K… threat The Hacker News 2026-07-17 https://www.csoonline.com/article/4198165/fake-ttf-files-deliver-stealthy-malware-in-global-phishing-campaign.html Threat actors are now abusing an ordinary font file to deliver low-detection malware capable of stealing credentials and establishing persistence on compromised Windows systems. According to a new research from Fortinet’s FortiGuard Labs, a global phishing campaign is actively us… governance CSO Online 2026-07-17 https://www.securityweek.com/risk-ledger-raises-32-million-in-series-b-funding/ The British firm has built a collaborative platform to help organizations address supply chain security risks. The post Risk Ledger Raises $32 Million in Series B Funding appeared first on SecurityWeek . threat SecurityWeek 2026-07-17 https://www.bleepingcomputer.com/news/security/us-charges-two-over-laundering-43-million-from-investment-fraud/ U.S. prosecutors on Thursday charged a New York man and woman for their roles in a large-scale crime ring that laundered money stolen in cyber investment fraud scams. [...] threat BleepingComputer 2026-07-17 https://www.helpnetsecurity.com/2026/07/17/coca-cola-fairlife-ransomware-attack/ A ransomware attack has stopped milk production at Fairlife, the Coca-Cola dairy brand known for its high-protein milk, protein shakes, and nutrition drinks. Coca-Cola disclosed the incident on July 16, 2026, in a Form 8-K filed with the U.S. Securities and Exchange Commission (S… threat Help Net Security 2026-07-17 https://www.securityweek.com/fresh-sharepoint-vulnerability-exploited-soon-after-disclosure/ The critical-severity security defect allows remote, authenticated attackers to execute arbitrary code on the server. The post Fresh SharePoint Vulnerability Exploited Soon After Disclosure appeared first on SecurityWeek . threat SecurityWeek 2026-07-17 https://www.bleepingcomputer.com/news/security/cisa-warns-feds-to-patch-exploited-fortinet-fortisandbox-flaws-by-sunday/ CISA on Thursday ordered government agencies to prioritize patching two actively exploited vulnerabilities in the Fortinet FortiSandbox threat detection platform. [...] threat BleepingComputer 2026-07-17 https://www.csoonline.com/article/4198007/senior-executives-are-killing-your-shadow-ai-strategy.html Shadow IT has long been a major problem for CISOs, but the biggest problem may be coming from the executive suite’s hunger for unsanctioned AI. Nearly two-thirds of senior decision-makers admit to using unapproved AI tools , compared to just 31% of lower-level employees, accordin… governance CSO Online 2026-07-17 https://thehackernews.com/2026/07/cisa-adds-exploited-sharepoint-rce-zero.html The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fi… threat The Hacker News 2026-07-17 https://www.security-next.com/187544 Ivantiは現地時間2026年7月14日、セキュリティアドバイザリを公開し、データ分析可視化製品「Ivanti Xtraction」に関する脆弱性について明らかにした。 incident Security NEXT 2026-07-17 https://www.securityweek.com/coca-cola-suspends-us-fairlife-production-due-to-ransomware-attack/ The company has yet to determine the full scope, nature, and impact of the incident. The post Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack appeared first on SecurityWeek . threat SecurityWeek 2026-07-17 https://www.helpnetsecurity.com/2026/07/17/xss-web-agent-prompt-injection/ Autonomous web agents read whatever a page displays, and much of that content comes from strangers. Product reviews, seller listings, and advertisements sit beside trusted site menus on a single page. An agent that reads all of that text as instructions can be steered by any of i… threat Help Net Security 2026-07-17 https://www.digital.go.jp/resources/dashboard-guidebook governance デジタル庁 新着情報 2026-07-17 https://www.digital.go.jp/procurement governance デジタル庁 新着情報 2026-07-17