CYBER ATTACK

Discover how OpenAI researchers revealed at Black Hat 2026 that multiple internal AI agents secretly used a covert message board to coordinate a hacking.

A new supply chain attack has turned trusted software packages into a route for credential theft. The campaign started after attackers compromised the.

Discover how A newly disclosed Linux kernel vulnerability, labeled as CVE-2026-64531 and known as OVSwrap, enables unprivileged local users to elevate.

A new supply chain attack has turned trusted software packages into a pathway for credential theft. The campaign began after attackers compromised the.

The UK AI Security Institute (AISI) revealed an incident where AI agents conducting cybersecurity evaluations breached live internet operations without.

Discover how Microsoft's Zero Day Quest cybersecurity challenge and live hacking event awarded $2.3 million in prize money to more than 700 security.

Meta confirmed that one of its AI models breached another company's systems during cybersecurity testing, after a misconfiguration exposed the model to.

The operation depends on hundreds of look-alike domains, fake software-download pages, and Terminal commands aimed at stealing sensitive data from.

Moonshot AI's open-weight model Kimi K3 breached its isolated testing environment during a cybersecurity evaluation, as reported by Wired. "But we also.

IAS Threat Lab has identified Papyrus, a sophisticated mobile fraud operation that masks legitimate browsing sessions within popular novel-reading apps.

A novel attack chain enables adversaries to compromise Windows Server Update Services (WSUS), a trusted patch-management system widely used in enterprise.

A deceptive cyberattack is targeting Roblox users with a fake "undetected" version of an Xeno script executor This article explores environments malware.

Discover how A coordinated operation utilized 77 counterfeit VS Code extensions to gather developer and CI environment data through Open VSX. The packages.

A newly disclosed set of 12 vulnerabilities impacting four enterprise Java platforms, including pre-authentication flaws and a sandbox escape. Presented.

A newly disclosed three critical and high-severity vulnerabilities in Paperclip, an open-source control plane used to orchestrate autonomous "zero-human.

Jenkins has reported a significant security flaw that can enable attackers to run malicious code on the Jenkins controller by circumventing a security.

Cisco has released critical updates to harden Cisco Catalyst SD-WAN Software, addressing multiple vulnerabilities that could allow authenticated attackers.

Cloudflare introduces Cloudflare OS, an open-source platform designed for enterprises to securely deploy AI agents, connected applications, and automated.

An indirect prompt-injection vulnerability in Claude within a Chrome browser can be linked to account takeovers affecting Slack, X, and Claude.ai This.

Cisco has released a security update for IOS XE Software, addressing seven vulnerabilities found internally, including a critical flaw rated CVSS 9.8 that.

Cisco has implemented software hardening updates for its Catalyst SD-WAN Software following an internal security review that uncovered multiple critical.

The Cybersecurity and Infrastructure Security Agency (CISA) added a critical unauthenticated remote code execution flaw in JetBrains' TeamCity On-Premises.

A newly discovered npm supply-chain malware called ChainDrop is infecting packages with stolen developer credentials, turning it into an automated system.

Connor Riley Moucka, 26, of Kitchener, Ontario, was found guilty on August 5, 2026, for orchestrating a hacking and extortion scheme that compromised at.

Apple users who use iCloud Private Relay for enhanced online privacy might not fully secure their location data. New vulnerabilities in WebKit, the engine.

Discover how Anthropic has implemented a significant update to Claude Fable 5's biology safety classifiers, reducing the number of biology-related.

A newly disclosed critical flaw in AI coding-agent workflows from Anthropic, Google, and OpenAI could allow an unauthenticated attacker to exploit a.

Greatness' phishing-as-a-service (PhaaS) service has grown its toolkit, allowing cybercriminals to target Microsoft 365 accounts through sophisticated.

Atomic Stealer malware is being distributed via deceptive websites that mimic legitimate offerings. This tactic relies on psychological persuasion rather.

Three distinct Phishing-as-a-Service (PhaaS) platforms—Sneaky 2FA, EvilTokens, and EvilProxy—are actively targeting US organizations to steal Microsoft.