Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3785 articles
Huntress CEO Kyle Hanslovan reflects on the company reaching $250 million in ARR, its mission to make cybersecurity accessible to underserved businesses, and its growth to more than 270,000 organizations.
Trend Micro says it is an inaugural partner in Nvidia’s Open Secure AI Alliance, which will share research and develop open models, agent tools, security techniques, and evaluation frameworks for cyber defense.
Health-ISAC warns of rising ShinyHunters attacks on healthcare and medtech organizations, involving vishing, phishing and SSO account takeover to access cloud data. It recommends stronger helpdesk checks, phishing-resistant MFA and cloud activity monitoring.
The roundup covers a free guide to AI-tool logging, Wiz’s claim that its Atlas system found over 200 vulnerabilities, a lawsuit alleging an MCP gateway clone, and developments in agent identity, data security, and SecOps.
Six months after joining Google, Wiz says it has expanded its AI security products, integrations, and research, including autonomous security agents and investigations into vulnerabilities and supply-chain threats.
The FCC is restricting new imports of foreign-made humanoid and quadruped robots and power inverters, citing cybersecurity, national security and supply-chain risks. The measures target China; existing devices and previously approved models are not affected.
Wiz says its Red Agent is generally available for continuous AI-assisted testing of applications and APIs. The company reports finding exploitable risks and describes examples involving exposed credentials, passenger data, and unauthorized flight-booking changes.
Mate Security raised $35 million in a Series A, bringing its total funding to over $50 million. The company says its agentic SOC uses organization-specific context graphs to support detection, investigation, threat hunting and response.
ThreatLocker announced a $190 million Series F round to fund product enhancements and international expansion. Its platform uses a zero-trust approach to block unauthorized software and offers endpoint, network, and cloud security capabilities.
Spur Intelligence received a $200 million investment from Insight Partners to scale its IP intelligence and bot detection operations, which help organizations identify anonymized, proxied and obfuscated web traffic.
Anthropic says Claude Mythos Preview helped identify a HAWK key-strength weakness and a faster theoretical attack on seven-round AES. The findings do not affect full AES or systems currently in use.
Step Security says Dev Machine Guard now inventories AI agent skills across developer machines, flagging executable content and showing provenance, installation details, and version differences to help security teams review and respond to risky skills.
The article outlines revised EU AI Act deadlines for high-risk AI systems and highlights unchanged transparency requirements, AI literacy duties and steps organizations can take to manage compliance and shadow AI risks.
Huntress has made Webhooks available to all accounts, pushing selected events such as incidents and escalations to configured endpoints for integrations with SIEMs, ticketing systems, and other tools.
Hong Kong’s SFC reprimanded and fined Luk Fook Securities HK$2.1 million over inadequate cybersecurity monitoring after a September 2022 ransomware attack disrupted key systems; full recovery took until October 7.
An FBI official said AI models such as Anthropic’s Mythos could help adversaries find and exploit vulnerabilities, though such activity has not been seen at scale. The FBI also uses AI internally, with high-impact use cases still lacking completed risk reviews.
Cyera agreed to acquire Oasis Security in a deal it confirmed is worth $1 billion. The companies say the acquisition will combine data security with tools for governing non-human identities and AI-agent access.
Apple released security updates fixing 87 vulnerabilities in iOS and iPadOS 26.6 and 155 in macOS Tahoe 26.6, with additional fixes for other Apple platforms and Safari. The advisories do not mention in-the-wild exploitation.
Lava researchers found 24,650 internet-exposed servers leaking authentication material through CVE-2013-4786. They also found weak credentials and an exposed HPE iLO 4 page displaying a ransom note, but said this does not prove widespread exploitation.
OT security startup Frenos raised $1.52 million in a seed extension, bringing total funding to $6.4 million, and launched SAIRA Co-Work, an AI reasoning agent for complex investigations.
Lasso describes a platform that inventories AI agents, assesses configurations, red teams agent behavior, and applies runtime guardrails. The vendor says its Intent Security Engine detects intent misalignment and behavioral anomalies.
Microsoft says MAI-Cyber-1-Flash, integrated with its MDASH vulnerability-finding system, performed strongly in CyberGym testing. The model will be offered through Project Perception, scheduled to enter public preview on August 3.
CISA BOD 26-04 sets risk-based vulnerability remediation timelines and forensic-triage requirements for federal agencies. Wiz describes how its cloud security platform can help assess exposure, prioritize findings, remediate issues, and investigate compromise.
Netskope says AI security risks are shifting toward downstream policy violations, agentic coding execution vectors, and attacks involving trojanized developer tools and fake AI installers.
