Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3593 articles
Two former Air Force members received a combined 189 months in prison for phishing and BEC schemes that stole email credentials, harvested financial data, and diverted more than $2.4 million in wire transfers.
National Cyber Director Sean Cairncross says the U.S. is working with critical infrastructure operators to deploy AI for cyber defense. He urged visibility into AI agents’ permissions and supply-chain access and highlighted outdated systems and regulatory debates.
Trump said major AI firms signed a voluntary accord committing to internal controls, independent audits and board review. Experts questioned whether self-policing is adequate, while OpenAI said it paused a model rollout over safety concerns.
Signal 8.30 completes encrypted backup support across its platforms, adding local backups for iOS and desktop, cross-device improvements, and storage controls. Both hosted and local backups require a recovery key.
Microsoft has made WSL Containers generally available, adding tools for managing Linux containers on Windows. Defender for Endpoint provides container activity visibility, while Intune can disable the feature or restrict image sources to approved registries.
Microsoft says Russia-linked Star Blizzard has expanded its phishing campaigns since January and adopted RedFlick, a delivery technique that uses scheduled tasks to deploy its CosmicPulse backdoor with less victim interaction.
Six AI companies signed a voluntary White House accord calling for internal safety controls, independent audits, and board oversight of frontier AI systems, including risks such as cyberattacks. The agreement has no deadlines or binding enforcement.
Recorded Future announced an autonomous defense capability that uses its threat intelligence to trigger security workflows, including threat hunting, blocking, takedowns, and third-party remediation. General availability is planned for early next year.
Two former U.S. Air Force members received a combined 189 months in prison for BEC and phishing schemes that stole credentials and diverted corporate payments, including wires of $1.68 million and $720,000.
Dutch police arrested a 24-year-old alleged ShinyHunters leader. The FBI says the group and alleged co-conspirators breached over 140 organizations and collected at least $70 million; the group’s claimed FBI data theft remains attributed to the attackers.
Sam Altman introduced OpenAI’s Dots AI agents at its developer conference but did not discuss the company’s decision to delay a model release over researchers’ security concerns. The event also featured product updates and debate over AI oversight.
LastPass expanded Business Max with tools to discover employees’ AI and website use, warn before sensitive data is shared with AI tools, log risky attempts, and block malicious sites.
Dutch police arrested a 24-year-old man accused of involvement in ShinyHunters; Brian Krebs identified him as Pepjin van der Stap. He is being held for at least 90 days as investigators pursue the group.
DARPA selected Xint to analyze source code and compiled binaries used in Department of War messaging apps, identify and prioritize vulnerabilities, and generate patches. Xint says its technology can also serve commercial customers.
U.S. authorities charged Trung Nguyen Van with money laundering, alleging he moved crypto from a victim defrauded through the Triangle platform. Court documents say his wallets received over $53 million tied to wire fraud schemes.
Kiteworks resumed operations after a precautionary shutdown prompted by federal threat intelligence. It patched a critical Advanced Forms vulnerability and said it had found no evidence of exploitation or abnormal activity.
Gen and AMTSO say the industry has adopted its first standard for independently testing AI-agent safety and protection products, with measures that distinguish blocked attacks, model refusals, missed threats and disruption to legitimate tasks.
Intrinsec cites reports of agents automating parts of cyberattacks, including a reported campaign against 27 firms, Android malware PROMPTSPY, LLM-based C2 malware CLOSEDQUORUM, and cloud privilege escalation; it calls for AI-assisted defense and resilience.
Reco raised $55 million in a strategic funding round, bringing its total funding to $140 million. The company says its platform maps AI agents’ identities, permissions, data access and integrations to help organizations manage risk.
Cloudflare is extending learned request-schema validation to web applications. Profiles flag requests that differ from observed structures; customers can review violations and create rules to block them. The feature is available to API Security customers and invited
Cloudflare added TLS 1.3 post-quantum key-exchange visibility to HTTP Traffic Analytics, Logpush and Log Explorer, giving customers domain-level and per-connection telemetry to assess adoption and identify migration gaps.
Cloudflare launched Threat Signals for all accounts, using agentic skills to summarize selected RSS reporting, extract and contextualize indicators, and store linked threat events in a private dataset for investigation and WAF use.
Cloudflare plans MTC issuance through its new CA, targeting Chrome’s Quantum-resistant Root Store in early 2027. A Chrome Beta experiment served billions of MTCs and found landmark-relative certificates 9% faster at median, using classical signatures.
Cloudflare plans to become a public certificate authority, has applied to major root programs, and agreed to acquire a trusted GlobalSign root. It plans to issue Merkle Tree Certificates in early 2027 but is not issuing certificates yet.
