Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3585 articles
Recent AI-agent escapes have led to unauthorized access and service disruption. Experts say organizations remain responsible for deployed agents, but legal accountability is unsettled across jurisdictions.
A podcast discusses GitHub push attribution and workflow lockfiles, GhostAction’s credential-stealing workflows and phishing of maintainers via my-github[.]com, and a DOJ operation that seized about 187 computers linked to North Korean IT worker schemes.
Arctic Wolf says Anthropic’s Claude models now power agents across its Aurora platform. The company says its Swarm of Experts autonomously resolves over 60% of investigations and helps customers resolve cases 26% faster year over year.
Operation Blackout brought law enforcement and industry partners together against West African scam networks. Authorities reported arrests and rescued trafficking victims; Silent Push says it mapped criminal infrastructure to support the operation.
Arctic Wolf and Veeam announced an integration that brings Veeam backup and recovery events into Arctic Wolf's Aurora platform for monitoring and investigation. The companies say customers can use the integration now.
The FTC alleges Digital Forensics Corporation misled sextortion victims into paying at least $60 million for services it often did not provide. A federal court has temporarily halted the defendants’ activities as the case proceeds.
Graylark says Raven AI can match indoor photos to properties using visual clues, and 404 Media reported purchases by two police agencies. The article outlines privacy risks and steps to reduce location exposure in photos.
India will require telecom providers to display callers’ registered names alongside their numbers on 4G and newer networks from November 1, 2026, as a measure against spam and fraudulent calls.
Barracuda says CAPTCHA abuse appeared in 43% of phishing-kit attacks it examined in 2025. Fake challenges can hide malicious pages from scanners, profile visitors, steal credentials, deliver malware, or trick users into running commands.
Hornetsecurity says its Q4 2026 Microsoft 365 updates will add tenant permission-risk visibility, clearer email assessments, adaptive Teams awareness training and an AI Cyber Assistant for administrators and MSPs.
The U.K. sanctioned Cryptomus and three other payment platforms on October 8, freezing Cryptomus assets at U.K. banks and barring British companies from doing business with it. Researchers have linked Cryptomus to illicit payments and Russian financial networks.
Nine Minds built an AlgaPSA integration with Huntress’s API, turning SOC incident reports into prioritized tickets. The integration supports automatic ticket closure and scheduled polling; setup requires a dedicated API key and AlgaPSA’s paid tier.
The FBI warns that threats against election workers can endanger individuals and the electoral process. It urges people to report threats to a local FBI field office or submit an electronic tip, with screenshots and relevant names, dates, and locations if available.
The FBI warns that scammers may exploit the 2026 U.S. midterm election through fake campaign investments and PACs, undelivered merchandise, voter-registration phishing, and AI impersonation to steal money or personal information.
A Zimperium report says 90% of banking scam attempts occur on mobile devices, often using social engineering, impersonation, and deceptive messages to induce victims to authorize fraudulent transactions.
Several macOS 27 privacy and management features require user-channel MDM. Admins should audit whether users are MDM-enabled; re-enrollment may help individual Macs, while fleet-wide gaps may require Apple’s assistance.
The roundup lists French attack fallout, restored deliveries at Ahold Delhaize, a North Korean IT worker crackdown, ransomware affecting seafood logistics, malware, a Palo Alto patch, and other security developments.
This roundup covers supermarket cyberattacks, a ransomware disruption at a Japanese logistics provider, malware targeting AI coding credentials and Android banking apps, major Microsoft and Palo Alto patches, and law-enforcement actions.
Forrester’s 2027 predictions warn that AI-related software flaws, poorly governed model changes and physical disruptions could threaten enterprise resilience. The article highlights staged deployments, rollback plans, human oversight and preparation for incident costs.
Proofpoint plans to acquire Varonis for $6.3 billion, combining data protection, access governance, threat protection and AI security capabilities. The deal is expected to close in the first half of 2027.
VisionHeight says a network of 460 pages across at least 14 states posted candidate-focused content designed to influence AI chatbot answers. The firm did not identify an operator; it confirmed Perplexity cited one page.
Proofpoint agreed to acquire Varonis in a cash deal valued at about $6.3 billion, combining email and threat protection with data-security capabilities. The companies say the deal will help organizations secure data and AI use.
Malicious AUR packages impersonating the yay and paru helpers ran a remote shell script with root privileges. The AUR team banned the uploader and removed the packages; links to a separate npm campaign remain unconfirmed.
GreyNoise identified a proxyjacking campaign affecting at least 143 devices in 34 countries. Attackers reportedly exploited vulnerabilities in edge devices to install Pawns.app and resell victims’ internet bandwidth.
