Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3801 articles
The EU sanctioned three Chinese and Iranian companies and two individuals over cyber operations, citing support for the Raptor Train botnet, i-Soon hacking-for-hire activity, and Emennet Pasargad influence campaigns. Measures include asset freezes and travel bans.
New York introduced statewide cybersecurity standards for water utilities and a $2.5 million SECURE grant program, offering funding for assessments and upgrades plus no-cost technical assistance.
The Linux Foundation says $12.5 million from seven major technology companies will fund Alpha-Omega and OpenSSF work with maintainers to strengthen open-source security and address growing vulnerability-management demands.
Microsoft and Samsung traced Windows 11 C: drive access and app failures on some Samsung PCs to Galaxy Connect. Samsung updated the app, and Microsoft published a 29-step procedure to restore default drive permissions.
LayerX demonstrated a proof of concept that uses custom fonts and CSS to make webpages show malicious commands to users while their DOM appears benign to AI assistants. Microsoft addressed the report; LayerX recommends comparing rendered pages with DOM text.
Surf AI launched with $57 million in funding. The company says its platform combines data from organizational systems to prioritize security risks by business impact and coordinate remediation through AI agents with human oversight.
ReliaQuest reports that LeakNet uses ClickFix to gain access, then runs malicious code through the legitimate Deno runtime. The reported attack chain includes DLL sideloading, PsExec, C2 beaconing and data exfiltration via Amazon S3.
The EU sanctioned three entities and two individuals from China and Iran over alleged cyber operations, including mass device compromise and disruptions tied to the 2024 Paris Olympics. Measures include asset freezes, economic restrictions and travel bans.
Clover Security describes an AI-agent platform for design-phase security reviews, code-to-design drift detection, and visibility into AI coding tools. The article also reports customer-reported gains in review coverage and speed.
Huntress announced early access to endpoint and identity posture management services. The company illustrated their purpose with incidents involving a rogue Datto RMM deployment and an account missing MFA that was used to send internal phishing emails.
Researchers say GlassWorm’s ForceMemo offshoot uses tokens stolen through malicious VS Code and Cursor extensions to force-push obfuscated payloads into Python repositories, retrieving further payload URLs from a Solana transaction memo.
A Luxembourg court overturned Amazon’s €746 million GDPR fine and sent the case back to the CNPD. It upheld findings on consent practices but said the regulator must reassess intent and penalty proportionality.
CIS says it maintained MS-ISAC services during the end of federal support, assisted public-sector organizations with incident response and threat monitoring, and expanded its security services and guidance in 2025.
Check Point Research links Handala Hack to Iranian threat actor Void Manticore and reports AI-assisted PowerShell wiping, NetBird tunneling, and layered destruction. The group has targeted Israel and U.S. organizations, including Stryker.
ThreatLabz reports a March 1, 2026 campaign targeting Persian Gulf countries with Arabic missile-attack lures and LNK/CHM droppers delivering PlugX. It assesses China-nexus attribution with high confidence and Mustang Panda linkage with medium confidence.
The EU Council proposed AI Act amendments banning AI-generated non-consensual sexual imagery, revising high-risk AI deadlines and registration rules, and restoring strict necessity for sensitive data used in bias detection.
Stryker confirmed global Microsoft-environment disruption after Handala claimed wiping 200,000+ devices and exfiltrating 50TB; reporting points to Intune misuse. The roundup also covers $235M in security startup funding, AI security tools and shrinking exploit timelines
Android 17 Beta 2 tests an Advanced Protection Mode restriction that blocks non-accessibility apps from using AccessibilityService and revokes existing permissions while the mode is active. Google also introduced an API for apps to detect the mode.
TrendAI says its integration with NVIDIA OpenShell will add policy governance, agent skill and tool analysis, runtime enforcement, AI threat protection, monitoring, and threat intelligence for autonomous AI agents.
A March 2026 roundup covers EU AI and data-protection proposals, national guidance on healthcare AI and automated hiring, Finland’s post-quantum transition, Canada’s lawful-access bill, and NIST’s AI-monitoring report.
Betterleaks, an open-source successor to Gitleaks, scans files, directories and Git repositories for exposed secrets. Features include CEL validation, encoded-secret decoding and parallel scanning; its BPE-based method is reported at 98.6% recall on CredData.
Anthropic’s limited research preview of Claude Code Security scans codebases for vulnerabilities, verifies findings, and suggests patches for human review. Developers must approve fixes before they are applied.
Researchers say GlassWorm abused Open VSX dependencies to deliver malicious extensions. Related reports describe Unicode-hidden payloads in GitHub and npm and 88 npm packages using remote dependencies; Endor Labs disputed claims they were legitimate research.
CNCERT warned that OpenClaw’s weak defaults and privileged access could expose systems to prompt injection. Researchers demonstrated link-preview data exfiltration, while Huntress reported malicious installers distributing stealers and GhostSocks.
