Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3768 articles
CISA warns of increased targeting of water-sector PLCs and urges operators to secure internet-exposed OT. Minnesota officials reported attacks affecting more than 30 community water systems; no actor has been formally identified.
Bank of America plans to acquire UK-based information security consultancy MDSec, which has about 65 employees. The deal is expected to close in Q4 2026, subject to regulatory approval; financial terms were not disclosed.
Google is piloting twice-weekly Chrome updates and has introduced a macOS mechanism that can complete updates without restarting the browser. It is also exploring dynamic patching to install updates without a restart.
Okta plans to acquire Permiso Security, expanding into identity threat detection and response. It expects to integrate Permiso’s technology and P0 Labs research team; the deal is expected to close in fiscal 2027’s third quarter.
Amazon linked compromises of typo-crypto, debug, chalk and axios to North Korean actor Sapphire Sleet with medium confidence, citing shared tactics, C2 infrastructure and operational similarities.
Derrick Van Yeboah was sentenced to 85 months after pleading guilty to wire-fraud conspiracy involving more than $10 million in romance-scam proceeds. Officials linked his Ghana-based organization to over $100 million in losses.
Wiz describes a layered application-security system combining rule-based scans, continuous AI analysis and targeted agentic testing, using cloud and runtime context to prioritize deeper investigation. AI SAST is in private preview.
DataBahn raised $40 million in a Series B round, bringing its total funding to $59 million. The company plans to invest in R&D and expand its data control plane, which includes SIEM and data-storage optimization.
Cybersecurity startup Cantina emerged from stealth with $8 million in funding for a platform that uses autonomous security agents to identify, prioritize, investigate, and remediate vulnerabilities, and verify fixes.
Discern Security raised $13 million in a Series A round, bringing its total funding to $16 million. The company plans to expand its teams and develop its AI-driven security posture and remediation platform.
A White House quantum official cited fragmented, internationally distributed supply chains, limited funding and difficulty benchmarking progress as hurdles, and warned that future quantum computers could pose encryption risks.
CERT-AGID says sextortion emails impersonating ShinyHunters, circulating internationally since April 2026, were seen in Italy for the first time. The emails demand $2,000 in Bitcoin within 48 hours; ShinyHunters denies involvement.
Huntress reported that credential stuffing compromised 92 accounts across 30 SonicWall customer organizations in 41 hours. The attackers are unidentified; no post-compromise activity has been observed, and SonicWall is investigating.
Amazon researchers linked the March 2025 typo-crypto attack and September 2025 debug and chalk compromises to the North Korea-linked group also tied to the axios compromise, describing maintainer trust abuse and staged malicious code.
Huntress CEO Kyle Hanslovan reflects on the company reaching $250 million in ARR, its mission to make cybersecurity accessible to underserved businesses, and its growth to more than 270,000 organizations.
Trend Micro says it is an inaugural partner in Nvidia’s Open Secure AI Alliance, which will share research and develop open models, agent tools, security techniques, and evaluation frameworks for cyber defense.
Health-ISAC warns of rising ShinyHunters attacks on healthcare and medtech organizations, involving vishing, phishing and SSO account takeover to access cloud data. It recommends stronger helpdesk checks, phishing-resistant MFA and cloud activity monitoring.
The roundup covers a free guide to AI-tool logging, Wiz’s claim that its Atlas system found over 200 vulnerabilities, a lawsuit alleging an MCP gateway clone, and developments in agent identity, data security, and SecOps.
Six months after joining Google, Wiz says it has expanded its AI security products, integrations, and research, including autonomous security agents and investigations into vulnerabilities and supply-chain threats.
The FCC is restricting new imports of foreign-made humanoid and quadruped robots and power inverters, citing cybersecurity, national security and supply-chain risks. The measures target China; existing devices and previously approved models are not affected.
Wiz says its Red Agent is generally available for continuous AI-assisted testing of applications and APIs. The company reports finding exploitable risks and describes examples involving exposed credentials, passenger data, and unauthorized flight-booking changes.
Mate Security raised $35 million in a Series A, bringing its total funding to over $50 million. The company says its agentic SOC uses organization-specific context graphs to support detection, investigation, threat hunting and response.
ThreatLocker announced a $190 million Series F round to fund product enhancements and international expansion. Its platform uses a zero-trust approach to block unauthorized software and offers endpoint, network, and cloud security capabilities.
Spur Intelligence received a $200 million investment from Insight Partners to scale its IP intelligence and bot detection operations, which help organizations identify anonymized, proxied and obfuscated web traffic.
