Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3789 articles
The Senate Intelligence Committee approved Jay Clayton’s DNI nomination in a 9-8 vote. His confirmation could help revive bipartisan efforts to renew FISA Section 702, which collects foreign intelligence but also intercepts Americans’ data.
Google DeepMind introduced Gemini 3.5 Flash Cyber, a vulnerability discovery and patching model available to governments and trusted partners through CodeMender. Google reports strong evaluation results and plans to expand its defensive capabilities.
DTEX says data from 390 North Korean IT worker accounts shows payments flowing through front companies and sanctioned entities, including $1.97 million via Korea Ryonbong General Corp. The report says funds support regime programs and Russia’s war effort.
The House Intelligence Committee approved a fiscal 2027 bill proposing a state cyberthreat-briefing pilot, assessments of federal information sharing, election-security measures, expanded AI use for intelligence and cyber missions, and a review of threats to energy.
An executive order directs the Department of War to develop rules requiring defense contractors to map suppliers and software dependencies, vet suppliers, and report significant supply-chain risks. The resulting maps could themselves become security targets.
Cisco announced open-weight Antares models for locating known vulnerabilities in codebases and released a 500-entry benchmark. Cisco says the models cost less than GPT-5.5 and GLM-5.2 in its tests.
U.S. and international authorities seized over 1,000 websites and blocked 1,970 domains used for unauthorized World Cup streaming. Officials warned of malware and data risks; a Colombia operation also led to four arrests.
Wiz says its agentless workload detection uncovered exploitation and suspicious activity across virtual appliances, Redis, npm packages, MongoDB, Zabbix, and WordPress, giving security teams visibility into workloads that do not support traditional EDR agents.
Cybersecurity startup Empirical raised $25 million in Series A funding to develop products for predicting and identifying threats, bringing its total funding to $37 million.
Wiz says its integration network has reached 300 partners across developer tools, CI/CD, threat intelligence, SaaS, and collaboration platforms, linking security findings with workloads, owners, and runtime context.
Microsoft shared manual cleanup steps for existing WSUS servers affected by metadata buildup that caused sync delays and Windows Update scan failures or timeouts, disrupting update deployment through WSUS and Configuration Manager.
CERT-AGID reports smishing pages impersonating INPS that request personal and payment-card data. Two designs demand €385.40 or €6.60; the differences may reflect A/B testing, affiliate use, or separate SMS lists.
Hudson Rock says Cavalier now offers feeds for phishing-as-a-service hosts, ClickFix pages and infostealer C2 infrastructure, with indicators and host details available through REST APIs for security-team ingestion.
Hudson Rock says Cavalier’s new C2, ClickFix, and phishing-as-a-service feeds help teams monitor malicious infrastructure, inspect ClickFix payloads, and identify infostealer-linked credentials associated with compromised sites.
The DOJ says it seized more than 1,000 domains used to stream World Cup matches illegally. Officials warned of malware and payment-data risks; Colombian authorities arrested four suspected Los Ciberinfiltrados members accused of accessing telecom systems.
ThreatFabric says the EPO granted it a patent for technology that analyzes user behavior during web and mobile banking sessions to detect suspicious activity, including authorized payment scams, while avoiding stored biometric identifiers.
Flock Safety dropped its planned acoustic gunshot and human-distress detection feature after privacy concerns and community backlash. The company said it was tested with a small number of customers and never broadly released.
Researchers say FakeGit used nearly 7,600 malicious GitHub repositories to spread SmartLoader and StealC. Island also found that AI agents could be lured into discovering fake repositories through the AgentBaiting technique.
Chris Fall is stepping down as director of the Center for AI Standards and Innovation. NIST Director Arvind Raman will serve as acting director; the center tests frontier AI systems for cybersecurity and other national security risks.
Neo emerged from stealth with $100 million in seed and Series A funding for a platform that inventories enterprise AI agents and software, identifies excessive privileges and configuration risks, traces actions to identities, and enforces policies.
A WSUS issue has caused synchronization failures, delays and timeouts, preventing some organizations from deploying Windows updates through WSUS or Configuration Manager. Mitigations cover new or rebuilt servers; Microsoft is working on steps for previously affected WS
Richard Bird’s HIH Index tracks material cyber incidents using SEC filings and news or company statements. It grades entries by source strength and avoids adding loss figures that are often missing or based on different evidence.
Kaspersky says HelloNet abuses the ViPNet update mechanism to deploy malware against Russian organizations, including government agencies. The campaign’s possible link to a Chinese-speaking APT is low confidence; initial access is unknown.
Huntress says its Athena system uses more than 40 specialized agents to group and investigate security signals, prioritize suspected live threats for human analysts, and deliver reports for some confirmed malicious activity without analyst review.
