Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3609 articles
Rubrik’s Threat Monitoring and Threat Hunting now use ReversingLabs’ ransomware feed to scan backup snapshots for indicators, including across historical backups, helping identify threats and clean recovery points.
Silent Push 6.1 adds scheduled detection of look-alike domains, investigation and search updates, integrations for security workflows and AI agents, and bidirectional STIX/TAXII intelligence exchange.
U.S. authorities sanctioned Xinbi, a major illicit marketplace, and seized or restrained more than $52 million in cryptocurrency. Chainalysis says DPRK-linked actors used its vendor network to launder tens of millions stolen from crypto hacks.
A bipartisan group of U.S. lawmakers urged Treasury to sanction Sunkissed Organic Farms, BellTroX and CyberRoot, citing alleged espionage against Americans and companies, efforts to suppress reporting, and ties to operations for Qatar.
The FTC unanimously rescinded a Biden-era policy that applied federal health data breach notification rules to health and fitness apps and connected devices, citing minimal benefit, superseding rulemaking and a deregulatory agenda.
CISA, NSA, and the FBI say six Chinese AI firms used fraudulent accounts, proxies, and API abuse to extract billions of tokens from U.S. frontier models. The agencies recommend stronger detection, response changes, and intelligence sharing.
Google says criminal and state-linked actors are using AI to accelerate and scale cyber operations, including credential theft, reconnaissance, social engineering and malware development. Its response includes disrupting accounts and hardening models.
Censys added 14 protocol and endpoint scanners, including for KNX/IP, Redshift, Tailscale DERP, and TVT camera controls, to help identify internet-exposed systems and prioritize security risks.
Akeyless says Agentic Runtime Authority evaluates AI agent actions against policy in real time and can block violations before execution. It builds on SecretlessAI and adds integrations for Claude Enterprise, OpenAI Codex, and Amazon Bedrock AgentCore.
FBI officials say AI is accelerating malicious activity and vulnerability discovery, prompting continuous, risk-based patching. The bureau’s strategy emphasizes AI-enabled analysis, victim support, intelligence sharing and disruption of adversaries.
FBI cyber chief Brett Leatherman said companies remain hesitant to share incident information due to misconceptions about its use. The bureau’s new strategy prioritizes helping victims and sharing actionable threat intelligence quickly.
InsightVM 8.58 can use existing host credentials to retrieve listening TCP and UDP ports instead of probing them. The feature may improve discovery on hardened hosts, but can report ports blocked from the scan engine and does not honor template port limits.
A HardenStance briefing on RSAC 2025 highlights vendor tools for securing generative AI and using agentic AI in security operations, alongside Unit 42 research describing nine AI-agent attack scenarios.
The NSA, CISA, and FBI say China-based AI companies have systematically distilled capabilities from US frontier models since at least late 2024. They recommend coordinated monitoring, information sharing, and technical safeguards.
A joint CISA, NSA and FBI advisory says China-based firms used millions of requests to extract capabilities from U.S. AI models, and recommends stronger verification, monitoring and output controls.
Schneider Electric, Siemens and Aveva issued September 2026 ICS security advisories covering critical and high-severity flaws. Siemens also began updating products for the Linux Copy Fail vulnerability; Rockwell Automation and CISA issued additional advisories.
NSA, CISA and the FBI say China-based AI companies have used large-scale, evasive access to extract capabilities from U.S. AI models since at least late 2024. They recommend behavioral monitoring, targeted response changes and cross-industry intelligence sharing.
Silent Push says its detection engine monitors for infrastructure impersonating an organization’s registered domains, IP ranges, ASNs, and TLDs, then scores and clusters candidates to help teams investigate and prepare takedowns.
Tencent’s Zhuque Lab released AI-Infra-Guard, which scans AI services for CVEs, inspects MCP servers and agent skills, and evaluates jailbreak resistance. Its open-source build lacks authentication and should be protected behind external access controls.
CIA Deputy Director Michael Ellis said cyber operations helped build intelligence that enabled U.S. forces to locate and capture Nicolás Maduro and his wife in Caracas during Operation Absolute Resolve. He also discussed AI’s expanding role at the CIA.
Malone Lam pleaded guilty to racketeering for leading a group that prosecutors say stole more than $245 million in cryptocurrency through support impersonation, remote access, and home burglaries.
Microsoft’s largest-ever Patch Tuesday fixed 974 vulnerabilities, including two actively exploited Windows privilege-escalation zero-days. Experts said AI-assisted discovery is increasing disclosures without a matching surge in exploitation and urged risk-based patching
Microsoft disclosed 973 vulnerabilities in its latest Patch Tuesday release. CISA confirmed active exploitation of CVE-2026-81963 and CVE-2026-85880; researchers also warned that more than 22,000 Exchange servers remain unpatched against weaponized exploit code.
Microsoft patched at least 974 security flaws, including two actively exploited Windows zero-days. Experts warn that the growing volume of fixes, partly linked to AI-assisted discovery, is straining organizations’ testing and prioritization efforts.
