Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3613 articles
Huntress says its API now supports write operations for agents, organizations and user access, offers additional security and external-recon data, and replaces account-level API keys with user-based keys tied to user permissions.
Datadog observed failed AWS root-account login attempts at more than 150 organizations from July 24 to August 23, 2026. No successful logins were observed, and the attacker’s intent remains unknown.
Validin expanded Advanced Search with more registration filters and regex domain matching, and added a beta behavioral scan that captures rendered screenshots, request logs, and other page artifacts for investigations.
Socket found 16 malicious modules delivered through Chrome and Edge extensions, some after legitimate add-ons were acquired and updated. They stole crypto and account data, exfiltrated browser history, and injected ClickFix lures; one Edge listing remained available at報
Brave 1.94 adds disposable email aliases that forward messages while hiding users’ primary addresses. Brave says aliases are stored encrypted, and its accounts use OPAQUE authentication; the company notes OPAQUE does not prevent phishing or weak passwords.
The Trump administration ordered a ban on acquiring or installing foreign-made bulk-power system equipment, citing backdoor, remote-access and supply-chain risks. Agencies must assess existing equipment and develop rules.
Android 17 adds OS-wide Encrypted Client Hello with ECH GREASE, requires permission for local network access, enables Certificate Transparency by default, and lets participating carriers disable 2G.
Barracuda describes five blocked callback-phishing attacks using fake invoices, image-based lures, branded emails and calendar invites to prompt calls to scammers, and outlines how OCR, phone-number intelligence and other signals help detect them.
The roundup covers debate over a Log4j alert, exposed cloud credentials, mobile banking malware, data breaches and ransomware claims, a Russian cyber training program, and U.S. sanctions against Iranian cyber actors.
ReliaQuest says it has signed an open letter with more than 100 industry leaders urging stronger cyber defenses and wider access to AI capabilities for defenders.
Nearly 130 organizations signed an OpenAI-led letter urging coordinated cyber defense as AI advances. OpenAI pledged subsidized access to Daybreak Cyber models, authorized defense testing, and continued publication of security tools and findings.
Cisco and VAIL researchers found that Nemotron models built from Qwen base weights remained substantially similar to Qwen models. They say country labels alone cannot reveal model lineage or potential inherited security risks.
The show covers arrests of two TeamPCP-linked suspects in Australia and PolinRider’s ongoing reinfection of developers through persistent malware, compromised npm tooling and poisoned package releases.
Action1 argues NIST’s NVD shift—about 30,000 pre-March 1, 2026 vulnerabilities marked “Not Scheduled”—could leave defenders with incomplete context, and recommends correlating multiple intelligence sources with asset data.
A class action alleges xAI trained Grok on real CSAM and generated sexualized deepfakes of an FBI-tracked victim. Plaintiffs cite weak safeguards and X integration and seek damages and an injunction.
More than 100 organizations signed an open letter urging governments, companies and AI firms to strengthen cyber defenses, fix major weaknesses and support critical infrastructure as AI advances.
Unit 42 says AI is accelerating attacks across the attack chain. It is investigating an attack in which an agentic framework reportedly exploited 50 applications and other enterprise weaknesses in under 10 hours.
Silent Push describes integrations that deliver infrastructure reputation and enrichment to Google SecOps, add IOFA context to Abstract Security data pipelines, and provide STIX-formatted threat intelligence to OpenCTI.
Australian authorities arrested and charged two men over alleged TeamPCP ties. The group is linked to malicious releases in Trivy and other open-source software; the campaign reportedly affected more than 1,000 organizations.
Australian authorities arrested and charged two men accused of TeamPCP ties. Police say the supply-chain campaign may have compromised more than 1,000 organizations; investigators seized devices, and the suspects face computer-related charges.
Google says Android 17 will enable ECH for compatible apps, require permission for local-network access, enable Certificate Transparency by default, and let participating operators disable 2G.
Executive Order 14420 restricts certain foreign-produced equipment for the U.S. bulk-power system, citing risks including backdoors and sabotage. The Energy Department may also require security controls for some equipment already installed.
Australian authorities arrested and charged two men suspected of TeamPCP involvement. Police say the group exfiltrated at least 300 GB of data from over 1,000 organizations; seized devices are under forensic examination.
Okta reported 11% revenue growth for its fiscal second quarter and raised its fiscal 2027 outlook. It also said its Permiso Security acquisition had closed, extending identity threat detection capabilities as it expands security offerings for AI agents.
