Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3590 articles
OX Security analyzed 15,465 publicly indexed MCP servers across five registries and warns that marketplaces lack vetting and governance. The company calls for vetting, code signing, and origin verification.
A roundup reports 39 cybersecurity-related M&A deals announced in September 2026, including acquisitions and a merger spanning OT security, data protection, AI security, testing, and managed security services.
Silent Push 6.2 adds team-based module permissions and per-user API limits, and brings its IOFA and Traffic Origin intelligence checks to ThreatConnect, Microsoft Sentinel, and Palo Alto Cortex XSOAR.
Google temporarily stopped accepting product vulnerability reports for its open-source software bounty program on October 1, citing a surge in mostly invalid automated submissions. Supply-chain compromise reports and submissions filed earlier remain eligible.
Picus offers a Singapore-hosted deployment of its security validation platform, keeping sensitive validation data in Singapore while organizations test exposures, attack paths, and security controls.
A 28-year-old Russian man suspected of belonging to Qilin was arrested in Japan and extradited to Germany over a ransomware attack on a German logistics company. The article also describes Qilin’s activity and rising ransomware incidents in Japan.
Saif al-Din Khader was reportedly detained in Jordan and is cooperating with authorities investigating a ShinyHunters-linked FBI breach. The group’s leak site was taken down, but it resurfaced on Telegram.
Aikido Security says its platform helped it achieve FedRAMP Moderate authorization. It is offering federal agencies vulnerability triage and remediation capabilities, alongside a separate on-premises option for workloads kept within customer infrastructure.
BitSight describes threat actors using impersonation, denials and blame-shifting to confuse attribution. The article explains the risks for incident response and recommends verifying claims against preserved communications and technical evidence.
LevelBlue reproduced a PoC that repeatedly consumes free disk space during Microsoft Defender updates, preventing updates while Defender continues running. Microsoft says Defender includes detections and preventions; researchers recommend monitoring update failures and,
IANS research and an interview with its CISO research director indicate that security leaders are using AI to automate routine work and reskill teams, while facing higher vendor costs and new questions about returns and risk.
Google says its PageBreak security agent found more than 500 flaws in the company’s web apps. It uses separate validators to test potential vulnerabilities with real payloads before reporting confirmed findings.
Researchers describe two ClickFix campaigns that conceal later-stage payloads through DNS TXT records or scripts cached by compromised websites, and recommend user training and controls for PowerShell and command execution.
CrowdStrike’s generally available service discovers and classifies sensitive data in Microsoft 365’s SharePoint, OneDrive, and Copilot, and can apply protections such as sensitivity labels, access controls, and sharing restrictions.
A former infrastructure engineer was sentenced to 32 months in prison after pleading guilty to an extortion plot that locked thousands of devices on his employer’s network using unauthorized administrator access.
Researchers exploited 32 zero-days across devices and services on the first day of Pwn2Own Ireland 2026, earning $388,500. Vendors have 90 days to release security updates before ZDI publicly discloses exploited flaws.
A phishing campaign uses fake dance-contest votes sent from compromised contacts to trick victims into linking an attacker-controlled device to their WhatsApp account, enabling message access and further scam propagation.
Researchers report an ongoing npm supply-chain campaign using the malicious indexed-btree package, which activates when an application uses it, bypassing npm’s default blocking of dependency install scripts.
AWS reports that Continuum passed 819 of 920 CyberGym-E2E tasks within 90 minutes, finding vulnerabilities, demonstrating them, and producing tested repairs. The benchmark covers memory-safety issues in C and C++ projects.
LTM launched BlueVerse AgenTraceIQ, combining Rubrik Agent Cloud with governance and managed services to monitor AI agents, enforce policies, and restore systems, data, and configurations after unintended or destructive actions.
September’s security roundup covers a Revolut social-engineering incident, experimental OpenAI agents accessing government systems, a skilled human operator, ShinyHunters-linked activity, and exploitation of Oracle PeopleSoft and marimo vulnerabilities.
U.S. authorities arrested Anibal Alexander Canelon Aguirre, accused of developing Ploutus malware used in ATM jackpotting attacks that stole more than $5.4 million from U.S. banks and credit unions.
Wiz is expanding its Service Catalog with integrations, automated service discovery, posture policies, service-level threat and identity context, AI asset visibility, dashboards, and workflow templates to help teams govern and route cloud security risks.
Google has temporarily stopped accepting submissions to its open-source bug bounty program, citing a significant rise in mostly invalid automated reports. The company has promised an update in Q1 2027.
