Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3607 articles
GreyNoise says a likely Russian-speaking actor used AI agents to exploit PaperCut flaws, compromising at least 440 instances across 395 organizations in 48 countries and harvesting credentials and domain secrets.
Users report that Microsoft’s KB5002914 Office security update disrupts Excel copy-and-paste, formula dragging, and autofill across versions 2016–2024. Removing or rolling back the update reportedly restores functionality; Microsoft has been contacted.
Admins report that September 2026 cumulative updates cause Remote Desktop Services failures on Windows Server 2019, 2022, and 2025. Rolling back restores access but removes the updates’ security fixes; Microsoft has not confirmed a cause or provided a response.
Zimperium reports that Mantax Otax, distributed through malicious APKs and phishing, encrypts files on Android 9 and older, steals sensitive data, and harasses victims. Up-to-date Android devices with active Play Protect detect and block it.
Anthropic says its report documents Claude misuse in cyber operations and other harms, including espionage, token theft and model distillation. The company says it disrupted the activity and shared intelligence with partners.
Sen. Josh Hawley is investigating OpenAI over the Hugging Face breach, requesting internal communications and technical records by Oct. 1. OpenAI says it investigated the incident and published a report; Hawley disputes its completeness.
Oleksii Lytvynenko was sentenced to four years for his role in Conti. Prosecutors said he developed malware, stored stolen victim data and helped extort victims, including two Tennessee organizations.
Amazon appointed cybersecurity veteran Kevin Mandia to its board. The Mandiant founder brings more than 30 years of experience responding to cyber threats, including work in government and the private sector.
The roundup covers 33 cybersecurity-related M&A deals announced in August 2026, including acquisitions involving AI security, threat exposure management, fraud prevention, and secure data transfer.
National Cyber Director Sean Cairncross said the U.S. and allies are trying to secure systems as AI advances, warning that AI exposes longstanding cyber hygiene weaknesses. He cited recent allegations involving Chinese AI firms and an Anthropic-disclosed incident.
Sekoia describes a multi-level agent model for MSSPs and large organisations: shared investigation standards are inherited from higher levels, while customer- or unit-specific context stays local to reduce duplication and cross-tenant confusion.
Cyble says its Executive Monitoring upgrade unifies executive mentions, impersonations, and exposures; adds AI-generated verdicts, risk scoring, expanded alerts, integrations, and PDF reports. It is live for existing customers with no action required.
WordPress now uses AI models and Jetpack Scan during a six-hour cooldown to review plugin releases and block those deemed high risk. The change followed detection of a backdoor in a plugin release before it reached the update API.
Scytale added AI-powered vendor discovery, profile enrichment, dynamic risk scoring, and continuous monitoring for breaches, data exposures, and vulnerabilities to its Vendors module.
Wiz says its U.S. Government cloud security platform received GovRAMP High authorization, validating it against NIST SP 800-53 Rev. 5 controls for protecting sensitive state data and critical infrastructure.
Microsoft says KB5124008 and later updates fix a Windows 11 24H2 and 25H2 bug triggered by KB5120998 that reset desktop and mouse settings, including turning wallpapers black.
Barracuda reports a phishing campaign that uses a DocuSign-themed email and genuine Microsoft OAuth and Teams infrastructure to load a fake login page assembled in victims’ browsers with a blob URL.
Grindr agreed to pay £26 million to settle a UK lawsuit alleging it shared users’ sensitive data, including HIV status, with advertisers before early 2020. The company disputes the allegations and says the settlement admits no liability.
The U.S. sanctioned Telegram-based marketplace Xinbi Guarantee, seized $52.8 million from connected crypto wallets, and targeted two alleged support businesses. Elliptic says Xinbi processed at least $24 billion in transactions.
CISA Acting Director Nick Andersen warned that technical debt, outdated technology and AI could intensify cybersecurity risks. The agency lost about a third of its staff and is working to refill roughly 600 jobs.
Okta analyzed a 7 GB infostealer dump containing AI-service tokens and API keys, including unexpired credentials that could enable account access by replaying tokens. Stolen AI access is also being sold for LLMjacking and other abuse.
U.S. authorities seized Xinbi Guarantee Telegram channels, froze $52.8 million across 52 linked crypto wallets, and expanded the Scam Center Strike Force, which disrupted 13 scam compounds in Madagascar.
OpenSSL 4.1.0 alpha1 adds DTLS 1.3, post-quantum cryptography optimizations, and other protocol and architecture support. The release also changes dependencies and drops support for Windows-on-Itanium and Windows CE.
Rubrik’s Threat Monitoring and Threat Hunting now use ReversingLabs’ ransomware feed to scan backup snapshots for indicators, including across historical backups, helping identify threats and clean recovery points.
