CYBER ATTACK

An Australian man's AI assistant has become the center of what is being described as Australia's first known autonomous AI cyberattack. Instead of waiting.

Sophia Antipolis, France, August 7th, 2026, CyberNewswire At DEF CON 34 in Las Vegas, security researcher Jonathan Brossard, known as endrazine, unveiled.

Discover how Cyber espionage operations are meticulously planned to ensure success well before any malware is deployed. They frequently employ.

A newly disclosed Linux kernel vulnerability called SCTPhantom has been identified This article explores kernel sctp. . This flaw allows attackers to.

Vulnerability management remains critical amidst the digital chaos of 2026. The proliferation of options in IT environments can be overwhelming, making.

Shai-Hulud returns in the npm ecosystem, this time spreading much more widely than before This article explores mjs sha 256. . An expansive package set of.

Levi Strauss & Co., a denim powerhouse, revealed a cybersecurity incident where an unauthorized third party breached the company’s internal systems.

Patchwork, also known as Dropping Elephant, employs fake documents and chat apps to spy on computer and phone users This article explores chat apps spy.

A recently disclosed vulnerability in Anthropic’s Claude Code could enable an attacker to execute their commands on a developer's workstation by opening.

Zbtlink routers sold globally have been identified with a covert remote-control implant that initiates when activated. Indicators of Compromise (IoCs): -.

A compromised Windows Server Update Services (WSUS) deployment could be exploited to distribute attacker-controlled software through an organization’s.

A newly discovered CVE-2026-64638, a pre-authentication cross-site scripting vulnerability in WordPress Core’s login screen that can be escalated to full.

A newly discovered technique reveals how attackers can exploit Windows Hello for Business (WHFB) cryptographic keys without needing the victim's PIN or.

UNC6671 employs data theft campaigns that start with a phone call This article explores passkeycenter com phishing. . Indicators of Compromise (IoCs): -.

Microsoft Threat Intelligence has identified a financially driven threat actor, known as Storm-1175, deploying a previously unreported ransomware family.

SilverFox has expanded its malware toolkit by targeting a Japanese industrial manufacturer through an email campaign disguised as a fake invoice This.

A newly discovered Linux kernel vulnerability, known as SCTPhantom, enables local attackers to elevate privileges to root and escape container.

A massive supply chain attack involving a suspected Russian threat actor has compromised the npm registry within just 48 hours This article explores.

Discover how A public proof-of-concept has been released for a use-after-free vulnerability in the Linux kernel's bridge subsystem, specifically impacting.

Papyrus is a sophisticated ad fraud operation operating through apps designed for serial fiction reading on smartphones This article explores papyrus.

OpenAI has slowed down development of its next-generation AI model, Astra, due to internal evaluations revealing advancements in agentic coding and.

A newly disclosed NatJack attack class reveals a fundamental vulnerability in network address translation (NAT) infrastructure, allowing attackers to.

Enterprise Java platforms remain vulnerable targets due to middleware often exposing paths developers previously thought were internal This article.

Meta revealed that one of its AI models inadvertently gained unauthorized internet access during a cybersecurity evaluation conducted with Irregular This.

A malware campaign used a fake Zoom installer to deploy Overlord, an open-source remote access trojan (RAT), across both macOS and Windows systems.

Apple has released emergency macOS patches for a critical vulnerability in Screen Sharing, which allows unauthenticated attackers to execute code remotely.

A critical vulnerability in Jenkins, identified as SECURITY-3911 and CVE-2026-70426, allows malicious Jenkins agents or attackers with Agent/Connect.

A recurring vulnerability across AI coding platforms from Anthropic, Google, and OpenAI that enables attackers to remotely execute commands, steal API.

Cisco has released a critical security update for its Cisco IOS XE software, addressing several serious vulnerabilities that could expose enterprise.

The U.S This article explores vulnerabilities teamcity. . Cybersecurity and Infrastructure Security Agency has issued a warning about a critical.