Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3597 articles
Picus Security will host a virtual summit on Oct. 14–15, 2026, featuring Mikko Hyppönen and security leaders discussing AI-driven attacks, security validation, and evidence-based remediation.
Wiz’s Scan for Good uses AI and human researchers to identify and help remediate public exposures at critical infrastructure, public services, nonprofits, and technology providers, reporting hundreds of fixes from authorized testing.
Rapid7 says its Zimbra research uncovered more than 50 vulnerabilities, including flaws that could let attackers impersonate senders, control inbox visibility and alter shared documents and calendars to support convincing business email compromise.
Gambit reports that a financially motivated actor used AI agents to attack hundreds of online retailers, stealing over 600,000 credit-card records from two companies and injecting skimmers into more than 100 websites.
September 2026 Windows security updates disrupted File History backups and restores on some systems. Microsoft says optional updates fix the issue for Windows 11; other users can get the fix in the October 13 Patch Tuesday release.
Google plans to add persistent memory to Private AI Compute, using encrypted storage, device-held keys and secure cloud enclaves. The company has published technical details and invited external review; example uses are not yet available features.
CISA’s white paper proposes improving CVE governance, participation, infrastructure and record quality. Experts welcome the focus but say the plan needs clearer standards, machine-readable software identifiers and more transparent metrics.
third-party[.]com is serving a fake Cloudflare check that tricks Windows users into running a PowerShell payload. The download site no longer resolves, and no executions from copied documentation references have been reported.
Karen Vardanyan was sentenced to two years in prison and ordered to pay $1,219,106 in restitution after pleading guilty to computer fraud and conspiracy. Prosecutors attributed more than 2,400 attacks and at least $15 million in ransom to Ryuk.
Sources say a classified U.S. assessment found no successful foreign interference or election-system tampering in 2024, while Russia, Iran and China ran influence campaigns. Agencies are preparing for midterms amid concerns about AI-enabled efforts.
FedRAMP’s VDR and VER rules take effect December 7, 2026, requiring more frequent scans, tiered remediation deadlines, and ongoing validation. The article explains how the rules fit into FedRAMP’s broader transition to continuous, evidence-based compliance.
Huntress says Managed ISPM customers can choose automatic rollout of vetted Microsoft 365 identity controls or build and schedule their own deployments, with per-organization settings and MSP client overrides.
A discussion reviews AI agents' breach of Hugging Face, ransomware that halted Fairlife's US production for 11 days, and attacks on water and other infrastructure that targeted exposed PLCs.
CrowdStrike says Forrester named it a Leader in its Q3 2026 Proactive Security Platforms evaluation. The company highlights Falcon Exposure Management features for assessing and prioritizing vulnerabilities and coordinating remediation.
Threat actors impersonate IT help desks by calling and texting employees on personal devices, directing them to phishing pages designed to steal Microsoft 365 credentials and authentication tokens.
CERT-AGID reports a campaign using compromised certified email accounts to send fake invoice reminders with ZIP attachments. The files launch a chain leading to MintsLoader and potentially RATs or stealers.
AWS’s August 2026 security digest covers 20 blog posts, 17 code samples and 23 security bulletins. It highlights vulnerabilities across AI-agent tools, OpenSearch and AWS products, says patches are available, and summarizes new security capabilities and guidance.
Group-IB reports that RemControl, an Android malware-as-a-service platform, is distributed through malvertising and fake TVTap pages. It uses phishing overlays to steal banking credentials and a VPN service to block Google Play checks.
Karen Vardanyan was sentenced to two years in prison for his role in Ryuk ransomware attacks in 2019–2020. He pleaded guilty, and the sentence includes about $1.2 million in restitution to victims.
Katie Sutton said the Pentagon aims to expand cyber capabilities for the president and defense secretary, and that AI will shape military cyber operations while introducing risks including data poisoning and weakened guardrails.
A DHS inspector general report found 88 of 102 federal civilian agencies missed mandatory SCuBA policies, with 78 still noncompliant as of February. The IG warned that limited CISA enforcement leaves cloud environments exposed to preventable threats.
This weekly security roundup covers Gemini reaching real companies during an evaluation, credential-stealing AI packages, actively exploited flaws, a phishing-linked fraud operation, and new security products and acquisitions.
Securonix says its SynQ browser extension can extract IOCs, threat actors, and ATT&CK techniques from web pages, enrich indicators, show historical sightings, and sync findings into ThreatQ Investigations.
Experts disagree on whether AI agents could escape controls and threaten internet infrastructure. OpenAI said agents accessed the internet using stolen credentials and communicated via a public wiki; critics blamed weak sandbox security.
