Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3617 articles
CORCA passed the House 348-60, and Senate supporters are seeking its inclusion in the defense policy bill. Critics warn its broad data-sharing provisions could expand ICE surveillance; supporters say it targets organized retail and cyber-enabled crime.
Sekoia describes six integrations that bring identity, vulnerability, credential-abuse, incident-response, cloud-runtime, and network context into its AI SOC platform, alongside its claims about private AI infrastructure and analyst oversight.
This cybersecurity roundup covers an AI-assisted campaign against Taiwan agencies, OpenAI testing changes, proposed U.S. offensive cyber operations, active exploitation and patch updates, security product releases, and industry deals.
A report from Americans for Responsible Innovation urges the U.S. government to designate key AI models, companies, and supporting industries as critical infrastructure, with CISA leading cybersecurity coordination.
Cisco patched 15 vulnerabilities across its products, including critical flaws in Crosswork and Secure Workload and a remotely exploitable BroadWorks XML parser flaw. Cisco says it is unaware of exploitation in the wild.
Atalanta released Argo, an AI-assisted software analysis tool being used with Viasat to assess the resilience of its satellite communications network after the 2022 attack that disabled thousands of modems.
OpenAI says it is strengthening sandboxing and network isolation and adding token-level monitoring with a 30-minute response rule. It also paused some training after evaluations suggested its upcoming Astra model may meet a critical cybersecurity-capability threshold.
A joint US advisory says unidentified actors are scanning for exposed Siemens PLCs and using AI-assisted scripts and tools to prepare for attacks. Agencies report persistent reconnaissance, but no high-impact attacks observed in the wild.
U.S. agencies warn that threat actors are using AI-generated Python scripts to target exposed Siemens S7 PLCs across critical infrastructure sectors. They urge operators to patch systems, block internet access, strengthen controls and monitor for suspicious activity.
GRIT and Coveware say a suspected ransomware affiliate posing as Ransom Busters contacted victims before attacks became public, claiming it could provide decryption keys and delete stolen data for a fee.
U.S. agencies warn that hackers are actively targeting Siemens S7 PLCs in critical infrastructure, using AI-generated scripts disguised as monitoring tools. The activity could disrupt industrial processes, cause safety incidents or expose sensitive data.
Clop claims it stole data from dozens of organizations by exploiting CVE-2026-12569 in PTC Windchill and FlexPLM. Toast and Zebra said they detected and contained intrusions with limited impact; PTC issued a patch in June.
Shasta County Registrar Clint Curtis plans to hire Tina Peters as an assistant registrar. California senators urged state oversight, citing concerns about her possible access to election systems and voter information after her conviction for election-related crimes.
Matthew Rosenquist will give a keynote at HRMCon 2026 on how cybersecurity must adapt to AI-enabled threats, growing attack surfaces and attacker capabilities, while accountability remains unchanged.
Hunt.io says Operation CameraSwarm compromised 14,530+ Dahua devices using credential attacks, two authentication-bypass flaws and P2P relays. Public sources support the underlying mechanisms but do not independently verify the campaign totals.
Wiz says its platform can consolidate penetration-test findings from audits, bug bounties, red-team exercises, PDFs, and AI scanners, map them to cloud resources, and track ownership and remediation.
Microsoft fixed a Windows Defender issue that caused 0xc0000005 errors and scan failures on some Windows 10 and 11 systems. The fix is included in Defender signature update 1.457.236.0 or later.
Huntress reported password-spraying activity rose 155-fold in H1 2026, including an LSHIY campaign abusing Azure CLI’s legacy ROPC flow where Conditional Access left MFA gaps. It observed 78 compromised accounts but no post-login activity.
Prevalent AI raised $22 million from Integrity Growth Partners. The company says its platform connects enterprise security data to help teams identify risks and securely deploy AI agents; it plans to expand in the US and beyond cybersecurity.
The US charged 17 Mabna Institute members over alleged intrusions targeting hundreds of organizations. The indictment alleges theft of more than 31 TB of research data; the US offers up to $10 million for information leading to five defendants’ arrests.
Cl0p has named more than 40 alleged victims of a Windchill and FlexPLM campaign exploiting CVE-2026-12569. Several companies are investigating the claims; none has confirmed a significant data breach.
CISA, HHS, and the FBI reported that Medusa ransomware affected more than 500 U.S. critical infrastructure organizations since June 2021. They recommend patching vulnerabilities, segmenting networks, and restricting untrusted access to internal remote services.
Brazil’s data protection regulator ordered Discord to suspend Go Live nationwide until it demonstrates effective safeguards, citing risks to minors. The order follows a fatal livestream case; Discord says it is reviewing the decision and disputes the regulator’s account
GuidePoint says Ransom Busters has contacted ransomware victims claiming access to RaaS servers and offering to delete stolen data for $20,000–$60,000. The article also details UNC6671 extortion activity and a more fragmented ransomware ecosystem.
