Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3600 articles
Microsoft and partners disrupted EvilTokens infrastructure after Microsoft reported the phishing service compromised over 12,000 accounts across more than 10,000 organizations. Two suspected administrators were arrested in the U.K.; the service remains active.
Data security firm Cyera raised an additional $400 million from Goldman Sachs Alternatives, taking its valuation above $12 billion. The funding extends its Series G round and will support platform development and expansion.
Wiz announced agent integrations that let partner AI agents retrieve live security context from customer tenants, and made its WIN partners endpoint in Wiz MCP generally available to help partners build integrations.
Forrester named ReliaQuest a Strong Performer in its Q3 2026 external threat intelligence evaluation, citing its security-data correlation, AI agent controls, and fit for enterprises with limited security staff.
Malwarebytes found more than 100 sites built with a shared toolkit that imitate products and sell unverified subscriptions. They use genuine Google sign-in pages, which do not verify the service; researchers advise checking the site and developer details before paying.
A joint advisory from Japan, the US, Australia and Germany attributes a hiring and cybercrime scheme to WaterPlum. It details the group’s reported scale and methods, and Japan’s first confirmed takedown of a North Korean laptop farm.
Treasury Secretary Scott Bessent said the U.S. proposed a notification mechanism for AI incidents that could affect national security during talks with Chinese officials ahead of a Trump-Xi meeting.
Huntress describes Athena, an AI orchestrator for SOC investigations, alongside a new investigation timeline, expanded APIs and security integrations. In a monthlong test of bounded ITDR cases, Athena reached correct outcomes 97% of the time versus analysts’ 95%.
Analysis of Manic, an Android malware family, finds it combines banking fraud with surveillance by abusing accessibility services and device permissions to capture credentials, intercept communications, monitor users, and control devices remotely.
EclecticIQ’s Intelligence Center 3.9 adds connections to Azure, Claude and Mistral, supports MITRE ATT&CK v19.1, and includes workflow improvements for analysts.
Darktrace says its generally available SECURE AI platform uses behavioral analysis to monitor enterprise AI prompts, agents, and services, detect risks such as sensitive-data exposure and prompt injection, and support policy enforcement.
Ireland’s DPC fined Google €403 million over GDPR violations in its handling of location data from May 2018 to February 2020 and ordered compliance within six months. The fine is not payable until confirmed by an Irish court.
A joint advisory says the Contagious Interview campaign compromised at least 30,000 devices and affected over 7,000 crypto wallets. Fake job offers deliver malware to developers; related IT-worker schemes use proxies for hiring.
Ireland’s DPC fined Google €403 million over GDPR violations involving location data, citing transparency failures and excessive retention. Google must bring its processing into compliance within six months and says it has updated its practices.
Ireland’s Data Protection Commission fined Google €403 million for unlawfully or unfairly processing location data and for lacking transparency. The investigation covered practices from 2018 to February 2020; Google said it has since updated them.
Fastly introduced AI Runtime Control, AI Firewall, and expanded API Security to govern model access and spending, mitigate prompt injection, and enforce API rules for AI agents.
House Democrats introduced a bill requiring CISA to assess whether its workforce, training and certifications are sufficient after about 1,000 employees departed during President Trump’s second term. The review would cover key agency security missions.
LastPass reports that a months-long impersonation campaign used fake LastPass apps to deliver Rapuncel, an infostealer, and a kernel driver designed to terminate 145 security products. The observed driver lacked configuration to activate its features.
Microsoft says September 2026 Windows security updates may stop File History backups from creating or updating on some Windows 10 and 11 systems, with crashes, false reconnect prompts, and missing previous versions reported.
Microsoft says it will retire SMS first-factor sign-in for Entra ID workforce tenants in February 2027 and urges admins to move users to alternatives such as passkeys, QR code authentication, or FIDO2 security keys.
Dragos completed its acquisitions of NetRise and runZero after Accenture’s majority investment closed. The companies add firmware-level device exposure, software supply chain security, asset discovery and attack surface intelligence to Dragos’ OT cybersecurity platform.
CIS says its Community Defense Model v3.0 maps real-world attack data to prioritized CIS Controls Safeguards, finding that foundational cyber hygiene can protect against many prevalent attack techniques.
The FBI says police and federal-agent impersonation scams caused over $1.6 billion in losses from January 2025 to July 2026. Scammers threaten arrest or penalties to demand payment, and officials advise verifying callers through publicly listed contacts.
Ireland’s DPC fined Google €403 million over location-data processing practices from 2018 to 2020, citing GDPR violations in lawfulness, fairness, transparency, accountability, and data retention. Google must bring its processing into compliance within six months.
