Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3799 articles
Industry professionals say Anthropic's Claude Fable 5 pairs advanced capabilities with safeguards that route high-risk cybersecurity prompts to Opus 4.8. Reactions highlight dual-use risks, access limits, cost, false positives, retention and remediation speed.
OMB Memorandum M-26-14 replaces earlier federal logging requirements with a risk-based approach focused on real-time monitoring, threat investigation and forensics, with agency maturity milestones following CISA’s logging architecture.
Europol and partners disrupted AudiA6, a crypto-laundering service authorities estimate handled over €336 million since 2021. Two alleged administrators were arrested and charged in the U.S.; the operation seized servers, domains and crypto assets.
A researcher claimed to jailbreak Claude Fable 5 using multi-agent prompts. Anthropic disputed that the examples bypassed core safeguards, saying some outputs were not from the model and others offered no meaningful harmful capability.
Fraudulent notices naming VRChat and Discord appeared on Maine’s breach portal, which accepts filings without verification. VRChat denied compromise, and Maine officials said they would remove its notice, highlighting the need to verify public filings.
The article reports that attackers modified more than 400 AUR packages to install malicious npm dependencies. The malware targets developer and CI credentials; guidance includes rotating exposed secrets and rebuilding affected hosts.
Wiz outlines a layered application-security strategy combining traditional SAST, AI code analysis, and deeper scans, with runtime context and agents for validating vulnerabilities and guiding remediation. Its AI Code Scans are in private preview.
U.S. prosecutors charged Denis Nikolayevich Obrezko over alleged support for Void Blizzard espionage. The FBI says it verified intrusions at 11 U.S. companies; investigators describe stolen session tokens, proxies and typosquatted Microsoft domains.
Proofpoint announced it has joined Europol EC3’s Advisory Group on Internet Security. The company cites prior intelligence contributions to efforts against Tycoon 2FA and malware-delivery and botnet operations in Operation Endgame.
Authorities dismantled AudiA6, a crypto service Europol says was linked to more than 15 ransomware investigations. The service allegedly laundered over $380 million; two suspected administrators were arrested in Georgia.
CIS has reintroduced MCAP, a web-based sandbox for U.S. SLTT MS-ISAC members to analyze suspicious files and URLs, with automated behavior reports and optional expert support.
CISA’s BOD 26-04 directs FCEB agencies to prioritize vulnerability remediation using exposure, KEV status, exploit automation, and impact. Deadlines can be as short as three days; agencies have 180 days to follow the new timelines.
South Korea’s PIPC fined Coupang a record 624.6 billion won (about $409 million) after finding a breach exposed roughly 37.55 million customers’ personal data, citing weak authentication key management and access controls.
CISA’s BOD 26-04 requires federal agencies to prioritize vulnerability remediation using risk-based timelines, monitor the KEV catalog, and inventory externally accessible assets. CISA also plans to provide standardized asset-tagging requirements.
OnyxC2 is offered as a stealer-as-a-service from $250 per month. BlackFog analyzed samples and described its credential-theft capabilities and a delivery method using a signed app paired with a disguised malicious DLL.
The episode discusses a Miasma worm attack that disabled 73 Microsoft GitHub repositories, VS Code’s two-hour extension update delay, npm 12’s planned install restrictions, and package firewall tradeoffs.
Siemens says antivirus engines are incorrectly flagging Desigo CC versions 7–9 patch files. It suspects a compiled PowerShell script triggers detections and says file comparisons and signature checks found no signs of malicious modification.
Lithuania’s National Cyber Security Centre says there is no evidence of a coordinated cyberattack after personal data leaks affecting 62,000 doctors and more than 600,000 people. Prosecutors have opened a preliminary investigation.
Microsoft fixed an issue that could send some Windows Server 2025 and Windows 11 23H2 devices to BitLocker recovery after the April 2026 update. Admins can install the fixes or apply recommended mitigations.
A report describes AI browser extensions—including Urban VPN, Smart Sidebar and Chat AI—capturing conversations from services such as ChatGPT and DeepSeek through injected scripts, DOM monitoring or iframe communication.
A Group-IB investigation helped INTERPOL and Algerian authorities disrupt SniperDz, a phishing-as-a-service platform active since at least 2015. Its alleged developer was arrested, and hardware containing phishing software and scripts was seized.
Microsoft’s June Patch Tuesday listed 206 CVEs, with trackers counting up to 208. The release includes an actively exploited Defender flaw, a potentially wormable Windows vulnerability, and a BitLocker bypass.
CISA’s directive requires federal civilian agencies to patch vulnerabilities meeting three of four risk criteria within 72 hours. Agencies have 180 days to adopt the timeline and must assess possible compromise before patching in certain cases.
StepSecurity announced Suspicious Files for Dev Machine Guard, which detects files linked to the Miasma and Hades supply-chain campaigns on enrolled developer machines. The article says the worms can execute on project open or package import.
