Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3591 articles
Google temporarily paused product vulnerability submissions to its Open Source Software Vulnerability Reward Program, citing a rise in mostly invalid automated reports. Supply-chain and pending reports are unaffected.
Two proposed US bills would either regulate license-plate reader networks or bar federal agencies from using them, citing privacy, misuse, and accuracy concerns. Neither proposal has become law.
Apple plans to require clearer user action before apps receive macOS Full Disk Access, citing risks to private data from AI agents. The timing of the new controls is unknown.
Google paused new product vulnerability submissions to its OSS Vulnerability Reward Program from October 1, 2026, after a surge of mostly invalid automated reports. Earlier submissions remain valid; Google plans an update in Q1 2027.
doxx.net opened the public beta of its private networking platform, which offers DNS-level protection against malicious destinations for users and AI agents. The company also announced a $38 million Series A.
Apple plans to require explicit user action before apps receive Full Disk Access in macOS, citing privacy risks. The announcement follows disclosures of AI systems accessing external systems and files during testing and portal activity.
SOCRadar identified dark-web posts claiming French residential data and IUT Paris Seine records were leaked, U.S. manufacturing access was auctioned, SMTP credentials were dumped, and Apache Struts-compromised server access was for sale. The claims remain unverified.
A teenager believed to lead ShinyHunters was reportedly arrested in Jordan and is helping the FBI identify group members. The report follows a Dutch arrest tied to the investigation and a hack of the FBI jobs site.
Malwarebytes’ weekly roundup covers crypto scams, phishing after a data breach, breaches affecting government and court records, an Apple flaw that could let attackers run code, and risks involving AI.
A Bitdefender-sponsored article warns that untracked employee AI use can widen organizational exposure and describes GravityZone AI Visibility and Control for discovering, prioritizing and managing AI activity.
Ransomware.live lists Cotesma in Chile as a Qilin target, with claims of encryption and operational disruption. The site says the information is based on the group’s public claim and is unconfirmed.
tenfold’s free Community Edition added recurring access reviews for shared Microsoft 365 content and event auditing to help organizations track identity activity and spot suspicious behavior.
Security teams at Black Hat USA 2026 identified AI-driven attacks and defenses as a leading concern. Experts say AI is accelerating vulnerability exploitation and automating attacks, while organizations consider proactive security and controlled patching.
Proofpoint says China-aligned actor TA419 impersonated US officials to build trust with AI experts before directing them to fake OneDrive pages designed to steal credentials and authenticated sessions.
FortiGuard researchers identified ClingSTUN, Linux malware that exploits known IoT vulnerabilities, uses public STUN servers to map network reachability, and can spread to other vulnerable devices. Its operators’ control method remains unverified.
A new eco case study describes how ams OSRAM deployed SPF, DKIM and DMARC to improve visibility into email sources and protect its domains against spoofing and phishing.
Italy’s data protection authority fined IQVIA €7 million after finding its health-data practices could enable re-identification of about one million patients, and ordered the company to comply within 120 days.
A roundup of privacy and cybersecurity developments covers an AI-agent incident affecting OpenAI and Hugging Face, warnings about AI-accelerated attacks, regulatory guidance on AI and data protection, and new policy and legal measures.
Greek police searched an 18-year-old’s Athens home in an international operation targeting KillSec. Authorities took control of the group’s leak site and five servers, securing at least 110 terabytes of stolen data.
A weekly roundup covers exploited zero-days in NetScaler, Apple, Cisco SD-WAN and FortiMail, a confirmed OpenInfra Europe breach, a reported FBI portal compromise, and security risks involving AI systems and coding agents.
A suspected ShinyHunters member known as Rey was reportedly detained in Jordan on September 29, 2026, and is said to be helping the FBI identify other group members.
A suspected ShinyHunters member identified as Saif al-Din Khader was reportedly detained in Jordan and is helping the FBI identify group members. The group’s leak site went offline before a new site appeared.
MI5 says more than 100 U.K.-linked academics may have contributed to research funded by CGTRI, which it assesses is an MSS front. The agency urges institutions to review collaborations and trace funding sources.
doxx.net raised $38 million and announced an open beta of its Agentic Defined Networking platform, which aims to protect AI agents and users by blocking malicious destinations and providing private peer-to-peer networking.
