Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3593 articles
Citrix patched two NetScaler zero-days after exploitation was reported, while Kiteworks urged customers to take systems offline before releasing a patch. Their differing responses illustrate the operational trade-offs of acting on early threat intelligence.
RemoteThreat emerged from stealth with $7 million in pre-seed funding. Its platform helps enterprise and government teams conduct red-team assessments, including testing how defenses perform after attackers bypass security controls.
Chainalysis says custom AI automation helped investigators trace $387 million stolen from Bitget across multiple blockchains, cutting one bridge-reconciliation task from over 20 hours to under 10 minutes.
This week’s cybersecurity roundup covers ATM jackpotting sanctions, blockchain-based malware concealment, 543,699 valid exposed credentials, code execution in Unsloth model inspection, and zero-days used in an attack on DIVD.
Police across six countries arrested three people and seized KillSec’s leak site, servers and data. Investigators link the suspected ransomware group to more than 280 victims and about 1,000 suspected attacks; the investigation continues.
Exabeam announced Agentic SOC updates for AI-assisted investigations, AI-agent activity monitoring, and on-premises LogRhythm SIEM operations, including generative AI data collectors and a local-model MCP server.
Securonix Policy Agent uses governed AI to generate review-ready, Securonix-native detection content from supported threat research and rules, with analysts retaining control over review and deployment.
A 25-year-old man in Manchester was arrested on suspicion of acting as a negotiator for the KillSec ransomware group. The international Operation KillSwitch also led to arrests and seizures across four countries.
Osavul raised $10 million in Series A funding to enhance its AI platform for identifying hostile intent across cyber, physical, and information domains, and expand its work with enterprises, critical infrastructure, government, and defense.
DeepKeep launched AI Lens for Developers, a tool that monitors coding-agent activity, flags potential data leaks and insecure code, and routes destructive commands for approval. It currently supports Cursor and Claude Code.
A multinational operation arrested three suspects linked to KillSec, which Eurojust says carried out nearly 1,000 attacks. Authorities seized five servers, domains, and at least 110 terabytes of stolen data.
Proofpoint says China-aligned group TA419 used impersonation and fake Microsoft OneDrive sign-in pages to target U.S. AI policy experts and steal credentials and browser sessions. The report did not confirm account compromises.
Microsoft’s 2026 Digital Defense Report discusses AI use by threat actors, security considerations for enterprise agents, AI-assisted vulnerability discovery, and the value of connecting signals across systems to understand threats and support defense.
Cloudflare says EuroLLM and Apertus are coming to Workers AI and is launching workshops for government and critical-infrastructure teams to build model-agnostic AI defenses, including a multi-model harness for vulnerability hunting, verification and prioritization.
Arctic Wolf launched two AI-security training modules on safe AI use and detecting AI-enabled fraud. The company reports that organizations fully deploying its awareness training saw 36% fewer phishing-related incident tickets in four months.
Genesis claimed an attack on VPNE. The post says the claim is based on public statements by the ransomware group and has not been independently confirmed.
A polished phishing campaign impersonates Free Mobile, claiming customers owe €9.99 and directing them through redirects to fake payment pages that collect card details. The article describes several campaign domains and offers safety advice.
ReliaQuest describes GreyMatter Attack, a platform feature that runs approved attack campaigns against an organization's environment, scores detection and response, and helps teams address and revalidate security gaps.
Malwarebytes says it earned AV-TEST’s Top Product award, Level 1 certification from MRG Effitas, and blocked all threats before execution in AVLab’s May and July 2026 tests.
Thales says Sentinel Envelope Plus adds layered protection to compiled applications without source-code changes. In a company test, an AI agent found no vulnerabilities in a protected app, though the vulnerabilities remain in the code.
Truffle Security found 543,699 active credentials among 1.1 million exposed in public GitHub repositories. Many remained valid for years, despite GitHub protections and alerts, because providers did not revoke them.
Google is gradually giving vetted defenders access to Gemini 4 Argon, a model it says can find and patch vulnerabilities. Google also reported a flaw found in hospital software but did not identify the software or say if it was fixed.
BioCatch reports employment scam victims rose 258% across more than 370 financial institutions in 21 countries. Most scam sessions start on mobile; investment scams cause the highest average losses, while sextortion poses severe risks.
OpenAI says it disrupted a campaign that used a cross-conversation method to reproduce protected model reasoning. It linked a core activity cluster to people working for Moonshot AI and says it fixed the bug and strengthened controls.
