Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3800 articles
NIST is prioritizing NVD enrichment for vulnerabilities posing clearer risks, including those in CISA’s KEV catalog and critical software. The article argues teams should prioritize vulnerabilities by environmental context and exposure, not severity scores alone.
Aptori added autonomous offensive testing to its Runtime-Driven Validation Platform, simulating attacks against running applications to validate vulnerabilities and generate AI-assisted fixes. Early deployments reportedly reduced remediation backlogs and manual triage.
GMO GlobalSign launched TLS Connect, an on-premises certificate lifecycle management tool for SMBs that automates TLS certificate discovery, deployment and renewal, with ACME and GlobalSign integrations.
A roundup of 25 open-source tools for security automation, AI-agent governance, secrets scanning, cloud and pipeline audits, monitoring, forensics, and incident response.
At RSAC, advocates urged banks, law enforcement, telecoms and regulators to pair empathy-first victim support with stronger fraud prevention against romance and pig-butchering scams, citing underreported losses and cases where intervention prevented transfers.
A ToxSec analysis links Claude Desktop’s browser Native Messaging setup, an MCP STDIO command-execution flaw reported by Ox Security, and alleged month-long access to Anthropic’s Mythos model; it says mass data exfiltration has not been proven.
Huntress says its new EDR/ITDR capability links Windows endpoint detections to logged-in Microsoft 365 identities, enabling responders to disable accounts or revoke sessions. The company says it has stopped 64 incidents with zero false positives.
A 2026 roundup covers ENISA's cybersecurity technology-radar method, proposed biometric data-sharing, UK cross-domain guidance, privacy and AI rules, and an allied warning about China-linked covert networks of compromised devices.
A weekly cybersecurity roundup covers the Vercel breach, NGate malware in Brazil, ProxySmart-linked SIM farm networks, AI security developments, and significant vulnerability disclosures and defenses.
The NCSC and partners warn that China-linked actors use covert networks built from compromised SOHO routers and IoT devices. Their advisory recommends baselining edge-device traffic, monitoring remote access, and filtering against known indicators.
Google and Forcepoint researchers found indirect prompt injection on public websites, including attempts at data theft, destruction and payment fraud. Google reported a 32% rise in malicious activity from November 2025 to February 2026.
The NCSC recommends passkeys as consumers’ first choice where available, citing stronger protection against phishing and stolen credentials. Its guidance advises password managers and two-step verification as fallbacks and stresses secure storage and recovery.
US authorities sanctioned 29 people, charged two Shunda compound managers and seized a Telegram channel and 500+ domains tied to scam operations. Operation Level Up says it intervened in nearly 9,000 crypto-fraud cases, saving an estimated $562 million.
After two failed votes on an 18-month extension, Congress approved a 10-day Section 702 reauthorization. Critics say Speaker Mike Johnson’s proposed three-year extension does not require warrants for searches of U.S. persons’ communications.
Microsoft is rolling out Windows Update changes to Insiders, including date-based pauses of up to 35 days, optional OOBE update skipping, clearer driver labels, and consolidated monthly restarts. The features are planned for all users.
U.S. military leaders say AI autonomy will expand across battlefield operations, but warn that commercial software, supply-chain risks and outdated procurement frameworks complicate security. The Anthropic Mythos dispute highlights unresolved questions about trust and控制
At a Nashville security summit, Tim Haugh and Kevin Mandia said Iranian-linked actors are more likely to exploit basic security gaps and valid credentials, then amplify intrusions with information operations, than launch novel, large-scale attacks.
Microsoft plans to begin rolling out Entra passkeys on Windows in late April, with general availability expected by mid-June 2026. The device-bound FIDO2 credentials will use Windows Hello and support unmanaged devices.
RH-ISAC and Unit 42 report that BlackFile has used vishing since February 2026 to steal credentials and exfiltrate Salesforce and SharePoint data from retail and hospitality organizations, then demand ransoms. Recommended defenses include caller verification and staff
CISA says a federal agency’s Cisco Firepower/ASA device was compromised in September 2025 using patched flaws to install FIRESTARTER, which survives normal reboots and firmware updates. LINE VIPER enabled post-exploitation actions; Cisco recommends reimaging or a cold,
Toronto police arrested three men in a case involving a mobile SMS blaster used to send phishing texts and disrupt cellular networks. Police recorded more than 13 million disruptions; the investigation is ongoing.
SecurityWeek’s roundup covers a Lovable BOLA exposure, France Titres’ confirmed portal breach, reported unauthorized access to Claude Mythos, a new UK NCSC display-link guard, and other security, policy and infrastructure developments.
The weekly roundup covers Vercel’s OAuth-based compromise, unconfirmed claims of Mythos access, Lovable’s BOLA exposure, three Defender zero-days, agent security, and new detection guidance.
UK, US and allied agencies warn that China-nexus actors use dynamic botnets of compromised SOHO routers and other edge devices for reconnaissance, malware activity and data exfiltration, and recommend stronger edge-device visibility and threat hunting.
