Latest from todayAI tools help hacker break in for $25 per targetMajor retailers were hit by sophisticated attacks performed on the cheap.By Maxwell CooterSep 25, 20262 minsCyberattacksCybercrimeRetail Industry Documentation placeholder domain used in ClickFix attacksBy Maxwell CooterSep 25, 20262 minsCybercrimeMalwareSecurity GitLab issue email’s only security is obscurityBy Shweta SharmaSep 25, 20265 minsCode SecurityCommunications SecurityEmail SecurityWordPress patches a critical severity security vulnerabilityBy Evan Schuman Sep 24, 20267 minsInternet SecurityNetwork SecurityVulnerabilities Microsoft integrates SOC capabilities with Defender for enterprisesBy Gyana Swain Sep 24, 20265 minsEndpoint ProtectionSecurity Operations CenterWindows Security On-prem VeloCloud Orchestrator under attack, only some versions patchedBy Shweta Sharma Sep 24, 20264 minsNetwork SecuritySecurity Check Point hacked: The security software protecting your network has become a prime attack targetBy Taryn Plumb Sep 23, 20267 minsNetwork SecuritySecurityVulnerabilities F5 fixes actively exploited zero-day flaw in BIG-IP APMBy Lucian Constantin Sep 23, 20263 minsNetwork SecurityVulnerabilitiesZero-Day Vulnerabilities GitHub App keys can still enable takeovers long after they are forgottenBy Shweta Sharma Sep 23, 20265 minsCode SecurityIdentity and Access ManagementSecurity SonicWall reports two major security holes under active exploit The company said there are no defensive workarounds for the flaws that include one enabling unauthenticated remote attacks; it has issued patches. By Evan Schuman Sep 2, 2026 5 mins Network Security Security Vulnerabilities Anthropic introduces zero-retention AI safety monitoring for enterprises The new solution stores detection data in customer-controlled cloud environments instead of vendor systems. By Gyana Swain Sep 2, 2026 5 mins Artificial Intelligence Data Privacy Privacy Exploited JFrog Artifactory bug puts software supply chain on alert The bug is already being exploited in the wild, allowing attackers to generate admin tokens and gain access to Artifactory, the platform that powers many organization’s software supply chains. By Shweta Sharma Sep 2, 2026 3 mins Access Control Authentication Vulnerabilities How China industrialized the infrastructure behind state hacking The FBI’s takedown of QTFY exposes how China’s reliance on private cyber contractors gives state hackers scale and stealth. It also underscores why CISOs can no longer trust IP reputation alone. By Cynthia Brumfield Sep 2, 2026 8 mins Advanced Persistent Threats Cyberattacks Cybercrime Anthropic makes changes to stop AI agents running amok again Following three recent security incidents involving Claude, Anthropic is moving to more isolated environments, continuous monitoring, explicit instructions, and proactive human intervention. By Taryn Plumb Sep 1, 2026 7 mins Artificial Intelligence Data and Information Security Security What happens when AI models take aim at ICS exploits Security researchers anticipate a rise in deep-level industrial device attacking capabilities as AI models improve, opening PLCs to more impactful vulnerabilities. By Lucian Constantin Sep 1, 2026 6 mins Artificial Intelligence Critical Infrastructure Vulnerabilities CrowdStrike launches cyber frontier AI models, agentic security system The company’s SafeMind red-team/blue-team feedback approach aims to help enterprises autonomously block potential attack paths, based on Falcon telemetry and digital twins of their IT environments. By Jason Snyder Sep 1, 2026 3 mins Intrusion Detection Software Security Monitoring Software Security Operations Center OpenClaw rolls out system-wide overhaul, updates security controls across agent platform The release spans runtime, plugins, and secret handling as the project describes an evolution into ‘OpenClaw 2.0.’ By Gyana Swain Sep 1, 2026 4 mins Artificial Intelligence Development Tools Security Fake Cloudflare CAPTCHA tricks victims into opening a tunnel for attackers TerminalFix tricks victims into running malicious PowerShell commands, launching a multi-stage attack that ends with a reverse tunnel into the compromised network. By Shweta Sharma Sep 1, 2026 3 mins Cyberattacks Cybercrime Security China-linked hackers turn Cisco routers into covert attack infrastructure Fire Ant’s compromise of TACACS servers and manipulation of router telemetry shows how control of core network systems can leave defenders with incomplete evidence while exposing paths toward sensitive connected networks. By Prasanth Aby Thomas Sep 1, 2026 5 mins Cyberattacks Cybercrime Network Security Windows bug incorrectly tells users that Microsoft Defender Antivirus is turned off The glitch, which Microsoft says it working to fix, creates an attacker opportunity by convincing users to ignore critical cybersecurity alerts. By Evan Schuman Aug 31, 2026 6 mins Anti Malware Endpoint Protection Windows Security OpenAI-led coalition warns AI will compress cyberattack timelines, expose enterprise weaknesses More than 100 firms, including rivals, say enterprises must fix systemic gaps before AI scales exploitation beyond current defenses. By Gyana Swain Aug 31, 2026 5 mins Artificial Intelligence Cyberattacks Cybercrime Trusted Chrome, Edge extensions weaponized in supply chain campaign The findings raise questions over whether existing endpoint and network controls provide enough visibility into malicious activity happening inside the browser. By Prasanth Aby Thomas Aug 31, 2026 5 mins Browser Security Endpoint Protection Malware ServiceNow patches three maximum severity flaws that could put enterprise data at risk The vulnerabilities can be exploited remotely without user interaction; security teams should also look beyond ServiceNow to the credentials, APIs and workflows the platform can access. By Taryn Plumb Aug 28, 2026 7 mins Artificial Intelligence Security Vulnerabilities GPUThor hardware attack can root Nvidia GPU systems The new attack bypasses ECC protection on systems running Nvidia GPUs and can produce double- and triple-bit errors, researchers show. By Lucian Constantin Aug 28, 2026 5 mins Cyberattacks Security AI can be made to read an email much differently than you do Researchers show how invisible HTML can inject hidden instructions into an AI email summarizer and silently manipulate the summary it gives users. By Shweta Sharma Aug 27, 2026 4 mins Artificial Intelligence Security Vulnerabilities Critical infrastructure’s long, undefended tail exposed by UK energy attack Disruption of a tiny UK generator and attacks on US water systems point to a growing wartime cyber tactic — exploiting internet-connected industrial equipment at small facilities that lack the money and staff to defend it. By Cynthia Brumfield Aug 27, 2026 9 mins Critical Infrastructure Security NemoClaw’s AI can be poisoned through a browser tab A DNS rebinding flaw could give attackers unauthenticated access to NemoClaw’s local Ollama server and let them plant instructions that persist across future conversations. By Shweta Sharma Aug 26, 2026 4 mins Artificial Intelligence Security Vulnerabilities Microsoft warns patch window is collapsing, urges shift to network-level containment Azure networking executive Igor Sakhnov says enterprises must reduce exposure before patches are deployed as attackers outpace remediation. By Gyana Swain Aug 26, 2026 5 mins Security Vulnerabilities Nucleus wants to get ahead of scanners on new vulnerabilities Nucleus Security is adding AI-driven exposure discovery and an agentic AI interface to help security teams investigate newly disclosed vulnerabilities and build remediation workflows before traditional scanner coverage is available. By Shweta Sharma Aug 25, 2026 4 mins Artificial Intelligence Security Software Vulnerabilities New attack lets hackers plant hidden instructions in AI memory with a single prompt InjecMEM technique shows how a single input can persistently influence AI agent responses. By Gyana Swain Aug 25, 2026 5 mins Artificial Intelligence Security Vulnerabilities AI helps Chinese-speaking hackers speed up attacks on exposed servers The campaign highlights why internet exposure, exploit availability, and faster containment are becoming more important factors in how CISOs prioritize risk. By Prasanth Aby Thomas Aug 25, 2026 5 mins Artificial Intelligence Cyberattacks Cybercrime Windows Defender’s own driver can leave systems defenseless Check Point researchers found that Microsoft’s legitimate remediation driver can be weaponized for kernel-level file and registry operations, potentially allowing attackers to tamper with security controls. By Shweta Sharma Aug 24, 2026 4 mins Endpoint Protection Vulnerabilities Windows Security OpenAI adds an AI safety layer to detect misuse without retaining enterprise data The new system is designed to detect AI misuse across interactions without exposing prompts or responses. By Gyana Swain Aug 21, 2026 5 mins Artificial Intelligence Data Privacy Privacy Backdoored Rust packages hit crates.io, exposing developers to malware at build time Researchers found significant infrastructure overlap between the attack on three Rust crates and recent North Korea-linked campaigns. By Shweta Sharma Aug 21, 2026 4 mins Cyberattacks Cybercrime Security Critical flaw patched in popular JavaScript sandbox used in AI projects The type confusion vulnerability allows a guest-to-host sandbox escape which can lead to remote code execution By Lucian Constantin Aug 20, 2026 2 mins JavaScript Security Vulnerabilities Citrix issues critical security updates for its NetScaler devices A memory overflow vulnerability and an authentication bypass both require urgent attention. By Evan Schuman Aug 20, 2026 5 mins Access Control Authentication Identity and Access Management Kriminal breaks out of Grok, Claude guardrails at $12.99 The criminal AI service uses jailbreaks to bypass safeguards on legitimate AI models and offers capabilities including exploit development, OSINT, and social engineering. By Shweta Sharma Aug 20, 2026 4 mins Artificial Intelligence Cybercrime Security OpenAI ‘temporarily slows’ scaling efforts, also promises zero data retention for select frontier model customers Analysts said the moves may be nothing more than positioning the company for its IPO, but that both changes are welcome news nonetheless. By Evan Schuman Aug 19, 2026 6 mins Artificial Intelligence Privacy Security Snowflake flaw slips past AI checks, gets exploited by another AI Wiz’s Red Agent exploited a vulnerable GitHub Actions workflow in a Snowflake repository, ultimately compromising Jira credentials. By Shweta Sharma Aug 19, 2026 4 mins Artificial Intelligence Security Vulnerabilities Microsoft finally patches critical one-click Copilot vulnerability, almost eight months after learning of it Dubbed CoSnitch by the security researcher who discovered it, the flaw executes an attack chain that exfiltrates data from enterprises without any obvious red flags. By Evan Schuman Aug 18, 2026 7 mins Artificial Intelligence Security Vulnerabilities Critical GitLab flaw allows attackers to delete and modify public repos Attackers don’t need credentials or user interaction to exploit the flaw which could enable supply chain attacks in self-hosted code repositories. By Lucian Constantin Aug 18, 2026 3 mins Security Software Development Vulnerabilities New Malware turns Microsoft cloud into its control center TWINLOOT uses SharePoint, Teams, Azure and the victim’s own Edge browser to hide command-and-control traffic inside trusted Microsoft infrastructure. By Shweta Sharma Aug 18, 2026 4 mins Cybercrime Malware Security OpenAI president’s blog pushing agentic AI most notable for what it did not say Given the urgency, analysts and consultants want to hear more about what to do when agents go rogue, as well as how to better control all agent actions. By Evan Schuman Aug 17, 2026 6 mins Artificial Intelligence Security Zhipu says new coding AI developed advanced cyber skills faster than expected China’s AI developer claims GLM-5.3 rivals leading Western models in vulnerability discovery and has identified thousands of security flaws across real-world software. By Gyana Swain Aug 17, 2026 5 mins Artificial Intelligence Development Tools Security New macOS malware turns stolen browsers into attacker-controlled sessions AmnesiaStealer tricks users into pasting Terminal commands from a fake GitHub page before harvesting credentials, cookies and documents. By Shweta Sharma Aug 17, 2026 4 mins Endpoint Protection MacOS Security Malware Salesforce, ServiceNow data targeted in ‘City-Forum’ attacks Reco has identified a new attack vector that is similar to ShinyHunters’ methods. By Maxwell Cooter Aug 14, 2026 2 mins Application Security Cyberattacks Data Breach Oracle’s new database security tool is free — for six months The company is looking to address security threats posed by AI models. By Maxwell Cooter Aug 14, 2026 1 min Security Security Software Akira ransomware reboots into Windows Safe Mode to knock EDR offline The tactic disabled endpoint defenses as intended, but also accidentally broke the ransomware’s encryption process. By Shweta Sharma Aug 14, 2026 4 mins Cybercrime Malware Ransomware 5 key takeaways from Black Hat USA 2026 AI has become both a tool and a significant threat, highlighting the need to keep enterprise security teams on high alert. By John Leyden Aug 13, 2026 5 mins Black Hat Events Vulnerabilities Attackers target zero-day vulnerability in geospatial data platform GeoServer The unauthenticated SQL injection flaw could lead to remote code execution on certain server configurations. By Lucian Constantin Aug 13, 2026 2 mins Security Vulnerabilities Zero-Day Vulnerabilities AI agents wage near-autonomous cyberattack on Asian government networks A multi-agent attack using open-source AI frameworks executed a coordinated intrusion over four days. By Gyana Swain Aug 13, 2026 5 mins Artificial Intelligence Cyberattacks Cybercrime Trump administration opens door to private-sector cyber offensives The program could allow vetted private US companies to access targeted systems without the owner’s authorization and, in more disruptive operations, damage or destroy systems or infrastructure. By Prasanth Aby Thomas Aug 13, 2026 4 mins Cybercrime Government Laws and Regulations It took $58 to break Microsoft’s SCCM, but a patch made it harder One of the vulnerabilities in a newly disclosed SCCM exploit chain was patched by Microsoft but the fix, allegedly, does not close the path to complete control on the Configuration Manager site server. By Shweta Sharma Aug 13, 2026 4 mins Security Vulnerabilities Microsoft wants you to rethink your approach to cyber defense When finding vulnerabilities and generating targeted exploits is a 21-minute job that costs just $3.61, it’s time to scrap outdated best practices and ‘hand-to-hand combat with attackers,’ warns Redmond’s AI security lead. By John Leyden Aug 13, 2026 7 mins Security Security Practices Threat and Vulnerability Management Researcher bypasses Microsoft Defender security patch, seizing control The PoC posted by Nightmare Eclipse, who has been feuding with Microsoft for months, enables an attacker with any level of access to gain system-level privileges. By Evan Schuman Aug 12, 2026 6 mins Cybercrime Hacking Vulnerabilities Fake CCleaner downloads turn Chrome into a credential-stealing surveillance tool A spoofed CCleaner download site is spreading a multi-stage malware that hijacks Chrome to steal credentials, cookies and authentication tokens while recording keystrokes and screenshots. By Shweta Sharma Aug 12, 2026 3 mins Browser Security Endpoint Protection Security Metabase SQLi exploit grants attackers total access The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data. By Taryn Plumb Aug 11, 2026 5 mins Security Vulnerabilities Zero-Day Vulnerabilities Patch Tuesday August 2026: A zero-day WinSock driver hole under exploit, and a maximum severity SAP vulnerability The WinSock fix is one of the 398 patches issued today by Microsoft, and SAP’s fix for a vulnerability in Commerce Cloud is one of 29 patches this month. By Howard Solomon Aug 11, 2026 7 mins Security Vulnerabilities Zero-Day Vulnerabilities Zoom zero-click RCE flaws allow attackers to compromise meeting participants A single AI-assisted researcher discovered the massive blast-radius vulnerabilities using fewer than 20 prompts on publicly available models in less than 24 hours. By Lucian Constantin Aug 11, 2026 4 mins Application Security Security Vulnerabilities 12345678910…433 Show me morePopularArticlesPodcastsVideos news Google makes Gemini 4 AI model available to a trusted few By Nidhi SingalOct 1, 20265 mins Artificial IntelligenceSecurity news Cisco SD-WAN Manager hit by zero-day admin access attack By Shweta SharmaOct 1, 20264 mins Network SecurityVulnerabilitiesZero-Day Vulnerabilities opinion Why AI agents are like the dog that pushed kids into the Seine By Etay MaorOct 1, 20266 mins Access ControlData and Information SecurityIT Governance podcast Why Email Still Works for Attackers By Joan GoodchildSep 30, 20266 mins Email Security podcast The Evolving CISO: AI, Leadership and the Future of Cybersecurity By Joan GoodchildSep 24, 20266 mins CSO and CISO podcast Why Security Debt May Be a Bigger Risk Than Security Spend By Joan GoodchildSep 10, 202616 mins Cybercrime video Why Email Still Works for Attackers By Joan GoodchildSep 30, 20266 mins Email Security video The Evolving CISO: AI, Leadership and the Future of Cybersecurity By Joan GoodchildSep 24, 20266 mins CSO and CISO video Why Security Debt May Be a Bigger Risk Than Security Spend By Joan GoodchildSep 10, 202616 mins Cyberattacks
