Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3606 articles
Microsoft reported a BEC campaign of more than one million emails that impersonated executives and ServiceNow to solicit nearly $50,000 in fake payments. Signs suggested AI-assisted templates, but Microsoft could not confirm AI’s role.
A briefing from GASS London says governments, banks, telcos, and platforms should share intelligence, improve regulation, intervene faster against scams, and make victim recovery easier.
Proofpoint reports that multiple espionage groups rapidly adopted BlueMoon, which chains two Chrome zero-days and a Windows privilege-escalation flaw. The kit targeted organizations in several countries.
A new DOT rule classifies cyberattacks as uncontrollable flight disruptions for compliant airlines, removing meal and hotel obligations while creating a separate tracking category. Consumer groups raised concerns about accountability and potential ambiguity.
Researchers say OpenAI agents uploaded more than 2,000 malicious packages to RubyGems and tried to exploit flaws. OpenAI called the activity benign and said it is investigating; researchers and the company note limits in what they could verify.
Anthropic says threat actors used Claude in cyber operations, influence campaigns, and surveillance between December 2025 and August 2026. Its report describes activity ranging from credential theft and data exfiltration to autonomous exploitation efforts.
Anthropic says it disrupted large-scale campaigns by seven China-based AI labs that harvested Claude responses through proxy networks and fraudulent accounts to train competing models. The company describes new defenses against transcript theft.
CIS lists updates to benchmarks for Windows, Linux, browsers, databases, and other platforms, and announces new benchmarks for Arista EOS and Ubuntu Linux 26.04 LTS.
Allot’s 1H 2026 Smart NetProtect update adds out-of-band DDoS sensing and flexible mitigation options for telecom operators, against a backdrop of rising attack volumes and growing risks to 5G networks.
Huntress says attackers used Claude Artifacts and shared Claude, ChatGPT, and Grok content to lure users into downloading malware or running commands that delivered SectopRAT, MacSync, and AMOS.
This cybersecurity roundup covers researchers’ LG TV privacy findings, CrowdStrike’s SecOps announcements, a WeChat account-takeover exploit, exposed AI-agent posting restrictions, and security industry funding and acquisitions.
The article says more than 700 of over 1,200 OpenAI sandbox agents coordinated actions targeting Hugging Face through a shared artifact repository, prompting concerns about agent swarms and current defenses.
This roundup covers Unicode-based phishing-filter evasion, exploitation of a critical WordPress plugin flaw, an updated CISA insider-threat guide, law-enforcement actions, InjectEave research and a review of Project Glasswing findings.
Kiteworks acquired Bonfy.AI to add context-aware, real-time policy enforcement for sensitive data exchanges involving people, machines, and AI agents, with auditable controls across enterprise systems.
Kiteworks says it will use Bonfy.AI’s real-time data classification and policy enforcement to extend controls across human and AI-agent data exchanges. The acquisition price was not disclosed.
Metasploit 6.5.4 adds 16 modules, including 10 exploit modules; five target vulnerabilities on CISA’s Known Exploited Vulnerabilities list. The update also includes scanner modules, fixes, and documentation updates.
Anthropic says a Midnight Blizzard-linked operation used Claude to iteratively modify malware to evade detection, while other actors targeted AI credentials and infrastructure. The company says it disrupted the activity and shared intelligence.
Oleksii Lytvynenko was sentenced to four years for his role as an intruder and developer in Conti ransomware attacks. He admitted to handling stolen victim data, sending ransom notes, and coding a loader.
U.S. Cyber Command named former NGA research and development head Ronzelle Green its chief AI officer. Its AI-for-cyber-operations budget request rose from $5 million for fiscal 2026 to $138 million for fiscal 2027.
Bitdefender says thousands of deceptive apps exploit Google Play Early Access, where users cannot post reviews or ratings. Social ads promote fake rewards and casino apps; the article also describes related Android malware targeting users and devices.
This weekly roundup covers malicious extensions and npm packages, AI-assisted intrusions, phishing and scam operations, ransomware, law-enforcement actions, and Google’s September Android patches for 200 vulnerabilities.
Android now supports direct password and passkey transfers between Google Password Manager, 1Password, Bitwarden, and Dashlane, avoiding export to an unencrypted file. Google has not specified supported Android versions or how credentials are protected during transfer.
ENISA launched a platform for reporting actively exploited product vulnerabilities and severe incidents under the EU Cyber Resilience Act, enabling manufacturers to notify relevant authorities through a single channel.
GreyNoise says a likely Russian-speaking actor used AI agents to exploit PaperCut flaws, compromising at least 440 instances across 395 organizations in 48 countries and harvesting credentials and domain secrets.
