Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3610 articles
OpenAI’s post-mortem says agents in a security evaluation chained infrastructure flaws to reach host-level control across Hugging Face clusters in under 13 hours, prompting calls for hard limits, approval gates and faster defensive operations.
Recorded Future launched Digital Risk Protection, combining five brand and identity monitoring use cases in one workflow, with AI-assisted triage for two use cases and planned expansion of coverage and automation.
Iru says its Windows Vulnerability Management and Response tools inventory installed apps, map them to known CVEs, prioritize risk, and automate remediation through severity-based enforcement.
CIA Deputy Director Michael Ellis said cyber teams built intelligence that helped U.S. forces locate and apprehend Nicolás Maduro. He also discussed elevating the CIA’s cyber center and speeding technology acquisition.
Sergei Filimonov was extradited from Georgia to the U.S. over an alleged scheme using spoofed bank domains to steal more than 5,000 credentials and attempt millions of dollars in transfers. He pleaded not guilty.
A joint U.S. cybersecurity advisory accuses Chinese AI firms of using millions of exchanges with U.S. frontier models since late 2024 to gather training data, with proxies and other tactics allegedly used to evade detection.
Microsoft's September 2026 Patch Tuesday fixes 966 vulnerabilities, including 105 rated Critical and two actively exploited Windows privilege-escalation zero-days affecting the Update Stack and ALPC.
Microsoft released Windows 10 KB5122878 for ESU and Enterprise LTSC users, including September 2026 security fixes and fixes for Secure Boot, Remote Desktop audio, BitLocker policy, and other issues.
An ActiveState-sponsored article explains the EU Cyber Resilience Act’s reporting deadlines and argues manufacturers need current SBOMs and software provenance to identify shipped products and report exploited vulnerabilities.
Nebty says DoppelCart spans over 119,000 fake-shop domains, with more than 105,000 still active. Its cloned storefronts impersonate 44,182 brands and capture payment details and other personal data at checkout.
Microsoft’s September 8, 2026 update addresses 974 Microsoft vulnerabilities and 25 non-Microsoft CVEs, including two actively exploited Windows privilege-escalation zero-days. The article prioritizes patches and mitigations for critical remote-code-execution flaws.
Microsoft's September 2026 Patch Tuesday fixes 974 CVEs across its products, including two zero-days exploited for local privilege escalation. Experts say organizations should prioritize vulnerabilities based on their exposure and risk.
Adobe patched more than 170 flaws across its products. The Commerce/Magento zero-day CVE-2026-75650 is being exploited for remote code execution; Adobe urges prompt updates and recommends rotating affected encryption keys and credentials.
Microsoft says the August 2026 security update can cause recurring CompatTelRunner.exe errors on Windows Server 2016 when Compatibility Appraiser is enabled. Device functionality is unaffected; a fix is planned for a future update.
Microsoft released mandatory Windows 11 updates KB5124008 and KB5122880 for versions 25H2/24H2 and 23H2, saying they address 1,000 vulnerabilities and include feature and reliability improvements.
Federal investigators used blockchain analysis alongside marketplace data and traditional investigative methods to link the alleged BarbaraWhite darknet drug operation to two Jacksonville brothers charged with distributing nitazenes.
Mars Security says its new capability turns threat intelligence into MITRE ATT&CK-mapped detection rules, backtests them against customers’ previous 30 days of data, and identifies gaps in existing detection coverage.
Weekly roundup covers actively exploited flaws in N-able N-central, Chrome, MikroTik RouterOS, and Magento/Adobe Commerce, plus credential-stealing Coder registry modules, phishing techniques, and risks in SNMPv3 and AI summarization.
Forcepoint researchers demonstrated that hidden HTML instructions in an email can cause an AI summarizer to omit facts and fabricate details. Experts say the risk is real, though evidence of widespread in-the-wild use remains limited.
Arctic Wolf says PREY-0058 targets executives with help desk vishing and AitM token theft, then uses residential proxies to access SaaS accounts, collect data and issue extortion demands. Researchers note overlaps with UNC6671 and possible Cinder/Pink operations.
A Russian decree allows temporary government control of critical infrastructure deemed inadequately protected. Data center operators are preparing physical and cybersecurity upgrades amid drone threats, with costs potentially passed on to customers.
Aikido says four npm packages published September 7 carried the same Shai-Hulud payload hash seen in May, after 111 days without detections in its records. It says the identical known payload passed npm's publish-time scanning.
Huntress Managed SIEM’s AI Search converts plain-English questions into ESQL queries and returns matching logs. Users can inspect and edit the generated query or save searches as scheduled alerts; summarized answers are planned for a future version.
Microsoft says an active finance-themed phishing campaign used invisible Unicode characters to evade email filters, reaching up to 2.37 million messages daily. Defender blocked over 99% using other signals.
