Latest from todayNucleus wants to get ahead of scanners on new vulnerabilitiesNucleus Security is adding AI-driven exposure discovery and an agentic AI interface to help security teams investigate newly disclosed vulnerabilities and build remediation workflows before traditional scanner coverage is available. By Shweta SharmaAug 25, 20264 minsArtificial IntelligenceSecurity SoftwareVulnerabilities New attack lets hackers plant hidden instructions in AI memory with a single promptBy Gyana SwainAug 25, 20265 minsArtificial IntelligenceSecurityVulnerabilities AI helps Chinese-speaking hackers speed up attacks on exposed serversBy Prasanth Aby ThomasAug 25, 20265 minsArtificial IntelligenceCyberattacksCybercrimeWindows Defender’s own driver can leave systems defenselessBy Shweta Sharma Aug 24, 20264 minsEndpoint ProtectionVulnerabilitiesWindows Security OpenAI adds an AI safety layer to detect misuse without retaining enterprise dataBy Gyana Swain Aug 21, 20265 minsArtificial IntelligenceData PrivacyPrivacy Backdoored Rust packages hit crates.io, exposing developers to malware at build timeBy Shweta Sharma Aug 21, 20264 minsCyberattacksCybercrimeSecurity Critical flaw patched in popular JavaScript sandbox used in AI projectsBy Lucian Constantin Aug 20, 20262 minsJavaScriptSecurityVulnerabilities Citrix issues critical security updates for its NetScaler devicesBy Evan Schuman Aug 20, 20265 minsAccess ControlAuthenticationIdentity and Access Management Kriminal breaks out of Grok, Claude guardrails at $12.99By Shweta Sharma Aug 20, 20264 minsArtificial IntelligenceCybercrimeSecurity Overly permissive ‘guest’ settings put Salesforce customers at risk Salesforce warns that a threat campaign is exploiting overly permissive Experience Cloud guest configurations to harvest data from public portals. By Shweta Sharma Mar 11, 2026 4 mins Cyberattacks Cybercrime Data Breach Critical flaw in HPE Aruba CX switches lets attackers seize admin control without credentials Unauthenticated password reset vulnerability in widely deployed enterprise switching hardware carries a near-maximum severity score. By Gyana Swain Mar 11, 2026 4 mins Security Vulnerabilities Jack & Jill went up the hill — and an AI tried to hack them In a red-team test, CodeWall’s autonomous agent chained together four small bugs in the Jack & Jill hiring platform to gain admin access and probe its AI’s defenses. By Taryn Plumb Mar 10, 2026 7 mins Artificial Intelligence Cybercrime Hacking March Patch Tuesday: Three high severity holes in Microsoft Office Good news: No zero days. But Azure admins should note nine holes to plug. By Howard Solomon Mar 10, 2026 8 mins Endpoint Protection Vulnerabilities Windows Security Devs looking for OpenClaw get served a GhostClaw RAT GhostClaw poses as an OpenClaw installer package, stealing system credentials and sensitive data before deploying a persistent RAT. By Shweta Sharma Mar 10, 2026 3 mins Cybercrime Malware Security OpenAI to acquire Promptfoo to strengthen AI agent security testing The acquisition points to rising demand for tools that test and secure LLMs before they are deployed in enterprise workflows. By Prasanth Aby Thomas Mar 10, 2026 3 mins App Testing Artificial Intelligence Devops Hacker abusing .arpa domain to evade phishing detection, says Infoblox The tactic combines IPv6 tunnelling and domain abuse to redirect victims to malicious websites. By Howard Solomon Mar 9, 2026 6 mins Cybercrime Phishing Social Engineering CVE program funding secured, easing fears of repeat crisis The funding crisis that nearly shut down the global vulnerability tracking system last year has quietly been resolved, easing fears of another abrupt disruption to a cornerstone of the cybersecurity ecosystem. By Cynthia Brumfield Mar 9, 2026 7 mins Government Security Software Threat and Vulnerability Management OpenAI says Codex Security found 11,000 high-impact bugs in a month The new AI-driven AppSec tool reportedly uncovered hundreds of critical flaws and thousands of high-severity issues during early testing. By Shweta Sharma Mar 9, 2026 4 mins Code Security Security Post-quantum cryptography: Vendors drive forward but roadmap is fuzzy As quantum risk gains urgency, security vendors are turning PQC readiness into a structured market offering centered on discovery, inventory, and migration planning. By Shweta Sharma Mar 9, 2026 9 mins Data and Information Security Encryption Security Trump’s cyber strategy emphasizes offensive operations, deregulation, AI The White House unveiled a cybersecurity strategy built around six pillars, prioritizing offensive operations, AI adoption, and deregulation, while leaving critics to question whether cutting red tape and hardening infrastructure can coexist. By Cynthia Brumfield Mar 6, 2026 6 mins Government Government IT Security ClickFix attackers using new tactic to evade detection, says Microsoft Unwitting victims are now being tricked into installing malware via Windows Terminal, but some experts say this is old news. Regardless, they agree that infosec leaders need to educate employees about the tactic. By Howard Solomon Mar 6, 2026 5 mins Malware Phishing Social Engineering Only 30 minutes per quarter on cyber risk: Why CISO-board conversations are falling short Research shows that both CISOs and boards need to change their approach. By Taryn Plumb Mar 6, 2026 6 mins Business CSO and CISO Enterprise FBI wiretap system tapped by hackers A system used to manage wiretaps is reportedly being investigated following suspicious activities. By Maxwell Cooter Mar 6, 2026 2 mins Communications Security Government Government IT OAuth vulnerability in n8n automation platform could lead to system compromise The configuration weakness shows the risk of centralizing credentials, says Imperva. By John E. Dunn Mar 6, 2026 3 mins Artificial Intelligence Security Vulnerabilities Targeted advertising is also targeting malware Cybersecurity should be as much about monitoring ad calls as securing fire-walls, according to a cybersecurity firm. By Maxwell Cooter Mar 6, 2026 2 mins Cybercrime Malware Marketing and Advertising Industry Teenage hacker myth primed for a middle-age criminal makeover Profit motive is reshaping cybercrime as a career ladder that rewards experience. By John Leyden Mar 6, 2026 5 mins Cybercrime Security Zero-day exploits hit enterprises faster and harder Chinese state hackers and spyware vendors are fueling a rise in zero-day attacks, which increasingly target enterprise software and devices — security and networking products in particular. By Lucian Constantin Mar 6, 2026 7 mins Advanced Persistent Threats Cyberattacks Zero-Day Vulnerabilities LeakBase marketplace unplugged by cops in 14 countries The action coordinated by Europol seized two of the group’s domains and captured the forum’s data, as well as making arrests. By Howard Solomon Mar 5, 2026 5 mins Cybercrime Security Cisco issues emergency patches for critical firewall vulnerabilities Flaws in the web management interface give unauthenticated attackers remote root access. By John E. Dunn Mar 5, 2026 4 mins Network Security Security Vulnerabilities Coruna iOS exploit kit moved from spy tool to mass criminal campaign in under a year Google and iVerify researchers say the case points to a thriving secondary market for high-end zero-day exploits. By Gyana Swain Mar 5, 2026 5 mins Endpoint Protection Mobile Security iOS Security State-affiliated hackers set up for critical OT attacks that operators may not detect Threat groups are weaponizing industrial control access they’ve gained over the years, but critical infrastructure operators remain unprepared for what comes next, research from Dragos suggests. By Lucian Constantin Mar 5, 2026 9 mins Critical Infrastructure Cyberattacks Government IT Microsoft leads takedown of Tycoon2FA phishing service infrastructure The SaaS operation was used to push millions of malicious emails a month. By Howard Solomon Mar 4, 2026 6 mins Cybercrime Phishing Social Engineering Iranian cyberattacks fail to materialize but threat remains acute US-Israeli military attacks on Iran have caused a lull in cyberactivity, but Iranian groups will turn to destructive wiper attacks at some point, experts warn. By John E. Dunn Mar 4, 2026 6 mins Cyberattacks Cybercrime DDoS AI-powered attack kits go open source, and CyberStrikeAI may be just the beginning CyberStrikeAI lowers the barrier to complex cyberattacks by combining AI orchestration, MCP integration, and more than 100 offensive tools into a single, public GitHub repository. By Taryn Plumb Mar 3, 2026 5 mins Cyberattacks Cybercrime Open Source OAuth phishers make ‘check where the link points’ advice ineffective Microsoft has identified a phishing campaign using malformed links to legitimate OAuth services to redirect to malware downloads. By Gyana Swain Mar 3, 2026 5 mins Access Control Authentication Phishing Vulnerability monitoring service secures public-sector websites faster The service cut DNS-specific fix times by 84% across 6,000 public bodies in the UK. By Gyana Swain Mar 2, 2026 5 mins Government Government IT Threat and Vulnerability Management Security hole could let hackers take over Juniper Networks PTX core routers The vulnerability is especially dangerous because this model sits in the network core, so attackers could intercept or redirect data, says an expert. By Howard Solomon Feb 27, 2026 4 mins Network Security Security Vulnerabilities ‘Silent’ Google API key change exposed Gemini AI data Billing ID keys were turned into Gemini authentication credentials without informing developers. By John E. Dunn Feb 27, 2026 4 mins APIs Access Control Authentication One of the ‘most influential cybersecurity’ roles will pay under $175,000 Would you be willing to take responsibility for protecting national IT security for that little? By Maxwell Cooter Feb 27, 2026 2 mins CSO and CISO Government Government IT Your personal OpenClaw agent may also be taking orders from malicious websites A critical OpenClaw flaw allowed malicious websites to connect to locally running agents, brute-force passwords without limits, and take full control by exploiting implicit trust in localhost connections. By Shweta Sharma Feb 27, 2026 4 mins Artificial Intelligence Security Vulnerabilities US authorities punish sellers of malware and spyware Prison for trading malware for crypto, sanctions for selling US cyberweapons to its enemies. By Maxwell Cooter Feb 27, 2026 2 mins Cybercrime Legal Vulnerabilities Ransomware groups switch to stealthy attacks and long-term access Attackers are shifting from smash-and-grab operations to “parasitic” residency. CISOs must emphasize identity controls, monitor trusted applications and integrations, and focused detection strategies on persistence. By John Leyden Feb 27, 2026 5 mins Cybercrime Malware Ransomware China-linked hackers used Google Sheets to spy on telecoms and governments across 42 countries The GRIDTIDE backdoor concealed its traffic within routine spreadsheet activity for years before Google shut down the operation last week. By Gyana Swain Feb 26, 2026 5 mins Cybercrime Hacker Groups Hacking Steaelite RAT combines data theft and ransomware management capability in one tool Researchers at BlackFog say the SaaS tool lowers the barrier to end-to-end ransomware campaigns. By Howard Solomon Feb 25, 2026 4 mins Cybercrime Malware Security Five Eyes issue emergency directive on exploited Cisco SD-WAN zero-day The Five Eyes cybersecurity agencies warn that a critical Cisco SD-WAN vulnerability is under active exploitation and should be patched immediately. By Cynthia Brumfield Feb 25, 2026 5 mins Network Security Security Zero-Day Vulnerabilities Microsoft warns of job‑themed repo lures targeting developers with multi‑stage backdoors Attackers used “technical assessment” projects with repeatable naming conventions to blend in cloning and build workflows, retrieving loader scripts from remote infrastructure, and minimizing on-disk traces. By Shweta Sharma Feb 25, 2026 3 mins Cybercrime Malware Security New Serv-U bugs extend SolarWinds’ run of high-severity disclosures Four newly disclosed critical CVEs could allow attackers to create privileged accounts and execute arbitrary code, and they reinforce SolarWinds’ status as a high-value target. By Taryn Plumb Feb 24, 2026 5 mins Security Vulnerabilities Fake Zoom meeting silently installs surveillance software, says Malwarebytes Employees are tricked by what looks like a popup fix for a bad meeting connection. By Howard Solomon Feb 24, 2026 7 mins Cyberattacks Cybercrime Malware VMware fixes command injection flaw in Aria Operations Two other flaws were patched by the virtualization vendor, impacting Cloud Foundation, Telco Cloud Platform, and Telco Cloud Infrastructure as well. By Lucian Constantin Feb 24, 2026 2 mins Security Vulnerabilities Shai-Hulud-style NPM worm hits CI pipelines and AI coding tools Researchers warn malicious packages can harvest secrets, weaponize CI systems, and spread across projects while carrying a dormant wipe mechanism. By Shweta Sharma Feb 24, 2026 3 mins Cybercrime Malware Security The rise of the evasive adversary CrowdStrike’s latest annual Global Threat Report finds AI-driven attacks up 89%, zero-day exploitation surging, and nation-state actors doubling down on cloud and edge device compromise. By Cynthia Brumfield Feb 24, 2026 8 mins Advanced Persistent Threats Cyberattacks Cybercrime Anthropic’s Claude Code Security rollout is an industry wakeup call When Anthropic announced the start of testing on Friday, security vendors, and the markets, sat up and took notice. But is the panic warranted? By Evan Schuman Feb 24, 2026 9 mins Artificial Intelligence Code Security Security Russian group uses AI to exploit weakly-protected Fortinet firewalls, says Amazon The report warns CSOs that while AI is helping unsophisticated threat actors, failure to implement cybersecurity basics is fatal regardless of the attacker’s skill. By Howard Solomon Feb 23, 2026 8 mins Artificial Intelligence Cybercrime Hacking New Arkanix stealer blends rapid Python harvesting with stealthier C++ payloads The Arkanix infostealer combines LLM-assisted development with a malware-as-a-service model, using dual language implementations to maximize reach and establish persistence. By Shweta Sharma Feb 23, 2026 3 mins Artificial Intelligence Cybercrime Malware Attackers exploit Ivanti EPMM zero-days to seize control of MDM servers Palo Alto Networks’ Unit 42 says two critical flaws are being actively abused to gain unauthenticated access, deploy persistent backdoors, and compromise entire enterprise mobile fleets even after patches are applied. By Gyana Swain Feb 23, 2026 4 mins Security Vulnerabilities Compromised npm package silently installs OpenClaw on developer machines While the AI itself wasn’t weaponized, the technique raises concerns about AI agents with broad system access. By Taryn Plumb Feb 20, 2026 5 mins Artificial Intelligence Open Source Vulnerabilities Don’t trust TrustConnect: This fake remote support tool only helps hackers A fake remote monitoring tool, supported by a subscription service and a website used to promote it, is used to manage compromised systems. By Shweta Sharma Feb 20, 2026 4 mins Malware Remote Access Security Social Engineering PayPal launches latest struggle to get rid of SMS for MFA Security experts have been nearly unanimous in their dislike of unencrypted SMS authentication for over a decade, but business executives — and customers — love its convenience. Cost-cutting may finally do it in for enterprise SMS usage. By Evan Schuman Feb 20, 2026 7 mins Access Control Authentication Multifactor Authentication New phishing campaign tricks employees into bypassing Microsoft 365 MFA Unwitting employees register a hacker’s device to their account; the crook then uses the resulting OAuth tokens to maintain persistent access. By Howard Solomon Feb 19, 2026 6 mins Authentication Multifactor Authentication Phishing 1…8910111213141516…433 Show me morePopularArticlesPodcastsVideos news analysis EU Cyber Resilience Act ‘completely kills’ manual vulnerability triage By John LeydenOct 2, 20266 mins Laws and RegulationsTechnology IndustryThreat and Vulnerability Management news Google makes Gemini 4 AI model available to a trusted few By Nidhi SingalOct 1, 20265 mins Artificial IntelligenceSecurity news Cisco SD-WAN Manager hit by zero-day admin access attack By Shweta SharmaOct 1, 20264 mins Network SecurityVulnerabilitiesZero-Day Vulnerabilities podcast Why Email Still Works for Attackers By Joan GoodchildSep 30, 20266 mins Email Security podcast The Evolving CISO: AI, Leadership and the Future of Cybersecurity By Joan GoodchildSep 24, 20266 mins CSO and CISO podcast Why Security Debt May Be a Bigger Risk Than Security Spend By Joan GoodchildSep 10, 202616 mins Cybercrime video Why Email Still Works for Attackers By Joan GoodchildSep 30, 20266 mins Email Security video The Evolving CISO: AI, Leadership and the Future of Cybersecurity By Joan GoodchildSep 24, 20266 mins CSO and CISO video Why Security Debt May Be a Bigger Risk Than Security Spend By Joan GoodchildSep 10, 202616 mins Cyberattacks
