Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3793 articles
StepSecurity says its 500 maintained GitHub Actions are now free for public repositories. The replacements undergo code review and controlled releases, addressing supply-chain risks highlighted by the tj-actions/changed-files compromise.
Huntress says investigations found no evidence of illegal conduct, unauthorized access, or exposed data after allegations involving employee communications with threat actors. The company says its investigation is ongoing and it strengthened researcher policies.
Validin says it improved collection of short-lived infrastructure, increased several DNS record scans from weekly to daily, added bulk search for up to 1,000 indicators, and redesigned Threat Profiles.
A June 2026 roundup covers GDPR evidence rules, Portugal’s NIS2 regime, post-quantum migration deadlines, agency guidance on AI-driven cyber risks, and other privacy and AI regulatory developments.
OpenAI’s Trusted Access for Cyber vets defenders for lower-friction access to cybersecurity models. The article outlines the tiers, account-security risks, and recommended precautions, and reports that OpenAI patched a jailbreak found by an independent red team.
Mozilla 0DIN researchers demonstrated a conceptual attack in which Claude Code may respond to a setup error by running a command that retrieves and executes attacker-controlled data from a DNS TXT record, potentially giving an attacker a developer-privileged shell.
OpenAI is previewing GPT-5.6 Sol, Terra, and Luna to approved partners, citing stronger safeguards for high-risk cyber use. Its evaluations found vulnerability-research capabilities but no autonomous end-to-end attacks against hardened targets.
Infoblox reports that more than 200,000 websites use Uni-App-built scam templates, identifying over 236,000 related second-level domains across investment scams, phishing, fake crypto services and other fraud.
Ukraine’s SBU, working with the FBI, says a long-running Russian campaign targeted messaging accounts across several countries using fake support messages to steal credentials and verification codes. The number of affected victims is unknown.
Google says Turla developed StockStay since at least December 2022, mainly targeting Ukrainian government and defense organizations. The malware shares code with Kazuar and was delivered through phishing emails with malicious RDP configuration files.
Cobalt’s report says organizations relying on fully autonomous AI penetration testing fell from 29% in 2025 to 9% in 2026. False positives, missed vulnerabilities, validation demands and unpredictable costs favor human-in-the-loop testing.
Qihoo 360 CEO Zhou Hongyi says its Tulongfeng system nearly matches Anthropic’s Mythos and has found 3,000+ vulnerabilities. The capability claim is unverified; the article frames AI vulnerability discovery as a dual-use arms race.
FBI and CISA warn that Russian intelligence-linked operators are phishing for Signal Backup Recovery Keys to access backup messages and potentially take over accounts. They advise exposed users to generate a new key and remove unknown linked devices.
FBI and CISA say Russian intelligence-linked actors are impersonating Signal support to steal backup recovery keys, which could expose historical messages. Users who shared a key should generate a new one; this cannot block access to backups already downloaded.
ATF canceled its Penlink Webloc pilot after scrutiny of its use of ad-tech geolocation data. Sen. Ron Wyden said the agency had conducted more than 340 searches; the agency said the tool no longer met its needs.
Push Security says attackers created fake OpenAI workspaces impersonating cybersecurity and technology firms, then sent legitimate platform invitations to employees. It suspects the goal was to collect sensitive data entered into ChatGPT; no data theft was reported.
Robinhood says its passkey-based SERA platform enables remote access approvals from managed and unmanaged devices without VPNs, cutting approval time by 20%. The company is expanding it for other internal uses.
SecurityWeek’s roundup covers Citizen Lab’s findings on Cellebrite use against an activist’s iPhone, a reported 630-GB Tata Electronics leak, Scattered Spider-related guilty pleas, AI security concerns, Android developer checks and macOS malware.
Cybersecurity startup Nebulock raised $25 million in a Series A led by FirstMark. It plans to expand its platform for threat hunting, detection engineering and behavioral security analytics.
The Linux Foundation announced Akrites, a shared team to coordinate discovery, disclosure and patching of open-source vulnerabilities, help critical infrastructure deploy fixes, and support packages without maintainers.
Akamai says the MCP 2026-07-28 specification reduces protocol-level risks but shifts security responsibility to server implementers, who must address potential workflow hijacking, cross-tenant access, header leaks, XSS and DoS.
Uber has appointed Philip Martin as CISO. He joins from Coinbase, where he led security and related teams, and previously built incident response and security engineering teams at Palantir.
Homeland Security Secretary Markwayne Mullin said CISA needs about 600 hires and could take a year to rebuild. He cited China-related cyber threats, counter-drone technology and AI as priorities.
The FCC approved rules requiring stronger authentication, passwords, patching and firewalls for emergency alert systems, while updating undersea cable licensing, oversight and supply-chain security requirements.
