Mate Security secures $35M in Series A funding after 500% growth, as Fortune 500 demand grows for its agentic AI security operations platform worldwide.

Read more →

Researchers uncovered the 200,000-device Dysphoria botnet, which uses Ethereum and Solana domains to hide its command servers. QiAnXin XLab, jointly with China’s CNCERT, disclosed Dysphoria, a botnet that has compromised roughly 200,000 devices worldwide and uses Ethereum and Solana blockchain domain names to hide its command infrastructure. The botnet evolved from jackskid and fbot malware…

Read more →

The post Coordinated cyberattack disrupts water utilities in 30+ Minnesota communities appeared first on CyberScoop.

Read more →

Anthropic says Claude Mythos Preview helped derive an end-to-end key-recovery attack against HAWK-256 and a 200- to 800-fold speedup for an attack on seven-round AES-128. The HAWK attack exploits a previously unused symmetry in the lattice behind the signature scheme. Anthropic’s released implementation gives an expected end-to-end runtime of about three hours and 42 minutes…

Read more →

The U.S. and Australian governments have released new guidance urging critical infrastructure organizations to prepare to isolate vital operational technology systems in the event of a cyberattack or other major disruptions. […]

Read more →

A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through template rendering. […]

Read more →

PhantomEnigma abuses Brazilian government websites and trusted email channels to spread malware, target banks, evade security checks, and maintain access.

Read more →

Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution. Adobe Bridge is a powerful asset management tool that allows creative professionals to preview, organize, edit, and publish multiple creative assets efficiently across the Creative Cloud ecosystem. Adobe Format Plugins are software add-ons used by Adobe…

Read more →

Phones today are coming with massive amounts of storage, but is it overkill? Let’s break it down.

Read more →

The post FBI sees Anthropic’s Mythos as a law enforcement challenge appeared first on CyberScoop.

Read more →

Amazon Web Services (AWS) is excited to announce that the latest version of Information Security Registered Assessors Program (IRAP) report (Phase 1a – full assessment) is now available through AWS Artifact. An independent Australian Signals Directorate (ASD) certified IRAP assessor completed the IRAP assessment of AWS in June 2026. The new IRAP report includes four…

Read more →

Microsoft patched a high-severity vulnerability earlier this month that allows a threat actor to escalate privileges and compromise an AD environment.

Read more →

LG Electronics USA has launched the LG Financing Referral Service, a new program that connects businesses and participating resellers with third-party financing and leasing options for eligible commercial display solutions.  The service is designed to help organizations deploy digital signage and other display technologies with lower upfront costs while giving channel partners greater flexibility to…

Read more →

EY confirmed the theft of client tax documents from its third-party support platform. ShinyHunters claims responsibility and is threatening to publish the data.

Read more →

Artificial intelligence is becoming a force multiplier for Apple security research. Apple’s latest 26.5.2 software update includes patches for a record number of bugs — many of them identified by security researchers using AI-assisted tools. A record haul of fixes The numbers tell the story. Apple fixed 87 security vulnerabilities in iOS and iPadOS 26.6, along with an…

Read more →

Plus, Nvidia considers an OpenAI guarantee, and young adults turn to AI to help them talk.

Read more →

AI is exposing hidden data sprawl, making governance a cybersecurity priority.

Read more →

Pressing the Copilot key on your laptop keyboard launches Copilot. But whether or not you use Microsoft’s AI, you can remap the key to trigger a different feature.

Read more →

The first publicly documented cyberattack run end-to-end by an autonomous AI was an OpenAI benchmark test that escaped its sandbox and breached Hugging Face. In an incident post-mortem compiled with the input from Hugging Face and several hundred members of Cloud Security Alliance’s CISO community, the nonprofit organization laid out the most salient points for…

Read more →

One of your smart TV’s apps could be relaying someone else’s internet traffic. Here’s how to check if you’re affected.

Read more →

Three CVEs in Hugging Face diffusers let a malicious model repo run code on any machine that loads it

Read more →

AI systems like Anthropic’s Project Glasswing and Microsoft’s MDASH are aiding in the discovery of vulnerabilities, filling the ever-growing pool of defects that defenders have to address before exploitation occurs. Yet, through the first half of 2026, these vulnerabilities were no more or less likely to be exploited than all vulnerabilities disclosed during that period,…

Read more →

A new Mirai-derived botnet called Tengu can use a compromised Linux device’s hardware watchdog to trigger a reboot when defenders kill its main process. If that happens, Tengu’s other persistence mechanisms get another chance to relaunch it. Nozomi Networks Labs observed the dropper reaching its honeypots through Telnet credential brute force. Tengu supports 25 distributed…

Read more →

The upcoming PCI SSC Europe Community Meeting in Edinburgh, Scotland, 20 – 22 October has a full agenda packed with exciting speakers, engaging keynotes, networking opportunities, updates on industry trends, and insights and strategies on best practices.

Read more →

Cybersecurity researchers have sounded an alert after finding more than 36,000 Baseboard Management Controller (BMC) management interfaces exposing Intelligent Platform Management Interface (IPMI) protocol to the public internet. Of the 36,872 internet-exposed server-management interfaces running IPMI, 24,650 have been found to disclose password-derived authentication hashes before login due to

Read more →

As small and midsize businesses move from experimenting with artificial intelligence to deploying it across everyday workflows, MSPs have an opportunity to become long-term advisors on the infrastructure, security and enablement required to make those investments work. Michael Day, vice president of global partner sales at GoTo, told Channel Insider that partners are increasingly helping…

Read more →

Did it look like the ransomware threat was receding last year? New research suggests it was more of a reshuffle – and recommends renewed vigilance.

Read more →

A compromised SSO login can provide attackers with access to multiple enterprise applications and services. Specops Software explains how stronger passwords, phishing-resistant MFA, and identity hardening help secure modern SSO environments and the applications they protect. […]

Read more →

Operating entirely offline, Kind Local Pro gives individuals local data sovereignty without sacrificing AI performance Synsira Software is addressing the biggest concern with AI: privacy. Today, the company introduced Kind Local Pro, an AI platform that operates independently of corporate cloud-based LLM models and is available to download onto desktops and laptops. Designed for people…

Read more →

JFrog has confirmed that OpenAI models exploited a zero-day in self-hosted Artifactory while trying to reach the open internet from a sealed evaluation environment. Artifactory is JFrog’s software repository manager. OpenAI says the models then escalated privileges and moved laterally until they reached an internet-connected node. JFrog says it has since developed and released fixes…

Read more →

Deepfakes have made one of our oldest assumptions unreliable: that you can trust a familiar face or voice. While the industry focuses mainly on building “in-line detection tools” that try to spot the fake, BlackCloak, the leader in Digital Executive Protection (DEP), built Impersonation Protection to focus on validating the authenticity of communications. Circle of…

Read more →

Bugcrowd unveils Savant Pathseeker, the first solution in its Agentic Offensive Testing line. Savant Pathseeker gives security teams the speed and scale to test every external web application and API continuously, not just the assets that make it onto the pentest schedule, while providing the evidence to prove that the findings are genuinely exploitable. Security…

Read more →

Cuts, mostly in technology and product teams, affect about 7% of the payment giant’s workforce.

Read more →

Prescient Security has announced a series of capability expansions to Cait (Cacilian AI), its continuous AI-assisted penetration testing service. The updates which will roll out through summer 2026 add attack surface management (ASM), new asset testing types and expanded environment support, extending Cait’s reach well beyond its initial web application focus. The announcements follow Cait’s…

Read more →

The Apple Upgrade program will allow customers to pay monthly for new products and then return, upgrade or buy the device.

Read more →

Cyberhaven has introduced Cyberhaven Flow, an AI-native data security platform built to protect data across human and AI workflows. Flow connects lineage, identity, and behavior to protect data as it is created, copied, fragmented, and shared, marking a shift in how protection adapts to the changing context of work in the AI era. Flow secures…

Read more →

Torq has unveiled SOC Brain, a self-learning layer of its AI SOC Platform designed to help security teams investigate and remediate rising alert volumes.  For MSPs and MSSPs, the technology could expand analyst capacity while creating opportunities to deliver deeper, more differentiated security services. Torq SOC Brain combines precedent with learned judgment According to Torq,…

Read more →

With AI compressing reconnaissance and exploit development from weeks to hours, security vendors are racing to help enterprises identify exposures long before an incident happens. Infoblox is the latest to make that move, announcing its entry into the External Attack Surface Management (EASM) market alongside a new Supply Chain Intelligence capability that broadens its exposure…

Read more →

Analysis of real-life incident response cases by Cisco Talos warns that phishing remains a powerful method of initial compromise

Read more →

OpenWrt has shipped version 24.10.8 to close a critical DHCPv6 stack overflow and a wider set of remotely triggerable flaws in network services enabled by default. The critical issue, tracked as CVE-2026-53921 and rated 9.8 on CVSS 3.1 in OpenWrt’s GitHub advisory, lets an unauthenticated attacker able to reach the DHCPv6 server overwrite a stack…

Read more →

Intel 471 has announced two new AI capabilities in the Verity471 platform, MCP471 and Agent471. As attackers use AI to lower the barrier to scale, security teams must use their own AI capabilities to make intelligence more accessible, allowing them to pinpoint what is relevant to their organization and pair it with internal telemetry. The…

Read more →

SpecterOps has announced new capabilities built to give defenders a dynamic understanding of how adversaries traverse their hybrid environment and the ability to proactively eliminate pathways before they can be abused. BloodHound Enterprise adds support for Amazon Web Services and Microsoft Entra Agent ID, expanding the reach of attack path management. A new purpose-built AI…

Read more →

Microsoft has launched a new agentic security system for cyber defenders as well as its first cyber-focused AI model

Read more →

Many of the things you’re not allowed to do on an aircraft are things you shouldn’t be doing at all.

Read more →

Nearly half of people encounter a scam on their phone every single day. Malwarebytes is doing something about it.   That figure comes from a 2025 Malwarebytes survey of 1,300 respondents across the US and Europe. The results paint a troubling picture. A quarter of the victims surveyed reported being harassed or blackmailed, while nearly…

Read more →

Team Cymru has announced Pure Signal Command, the connected operating environment for analysts, security teams, applications, and AI agents to access and act on Team Cymru’s internet infrastructure intelligence. Command unlocks Team Cymru’s globally observed threat intelligence data by connecting telemetry, investigative and attack surface management capabilities, expert analysis, and machine-native access within a common…

Read more →

Reddit users found that by using a specific Google search query, it was possible to find Claude conversations that users had shared. This exposed sensitive material, including crypto wallet keys, names, addresses, work notes, and even erotic or otherwise policy-violating chats. Fortune says Anthropic appears to have fixed the Google indexing issue, but the shared…

Read more →

The cybersecurity pioneer discusses the evolution of the CISO role, AI’s impact on careers, and why operational resilience is the profession’s next frontier.

Read more →

Manufacturers keep putting more and more memory into new phones, and we’re the ones paying for it.

Read more →

Microsoft’s Windows 11 insider builds let you preview and try upcoming new features and settings. Here are my five favorites this year so far and how you can check them out.

Read more →

More than 24,000 internet-exposed servers are leaking authentication password hashes due to a 20-year-old vulnerability in their Baseboard Management Controller (BMC) interface. […]

Read more →

An attacker who reaches UDP port 623 on a server’s baseboard management controller can ask it for a password hash and receive one before logging in. The exchange is part of the IPMI 2.0 handshake, built on an authentication protocol introduced in 2004. That controller runs underneath the operating system. It power-cycles the host, mounts…

Read more →

In the past few years, the restaurant chain has undergone a turnaround analysts call remarkable. Its CIO credits a reinvestment in basic, foundational tech.

Read more →

The Iranian state-backed hacking group tracked as Nimbus Manticore (aka GalaxyGato, Mirage Kitten, Smoke Sandstorm, Subtle Snail, and UNC1549) has been attributed to a fresh set of attacks targeting entities across the Middle East, Africa, and South Asia. The intrusions involve the use of a previously undocumented Windows backdoor called NightLedger and two custom WebSocket…

Read more →

Apple has shipped a hefty round of July security patches, headlined by iOS/iPadOS 26.6, macOS Tahoe 26.6, and Safari 26.6, with dozens of vulnerabilities squashed across kernel, WebKit, media frameworks, and core apps. These updates are primarily about improving security rather than adding new features, and users should install them as soon as possible. Updates…

Read more →

JetBrains patched a critical TeamCity flaw (CVE-2026-63077) enabling unauthenticated code execution on affected on-premise servers. JetBrains has released security updates for TeamCity On-Premises after discovering a critical vulnerability, tracked as CVE-2026-63077 (CVSS score of 9.8). The flaw could allow unauthenticated attackers to execute arbitrary commands on affected servers. All on-premise versions are impacted, while TeamCity…

Read more →

Anthropic CEO Dario Amodei has argued that policymakers should keep lower-risk open-weight AI accessible while placing stricter safeguards around frontier systems, including mandatory testing and limits on China’s access to advanced computing and model capabilities. In a post outlining Anthropic’s position, Amodei said broad restrictions, including bans on Chinese open-weight models used by US businesses,…

Read more →

A prayer app launched by Pope Francis in 2019 contained a security flaw that exposed the personal information of hundreds of thousands of users before it was finally fixed this year. The app, Click To Pray, was developed by La Machi Communication for Good Causes for the Pope’s Worldwide Prayer Network. Pope Francis endorsed the…

Read more →

The AI models, datasets, and automated systems researchers depend on can be compromised in ways conventional cybersecurity tools aren’t designed to detect. A new project called VERITAS (VERified Infrastructure for Trustworthy AI in Science) aims to close that gap by establishing AI Assurance as a core function of scientific research infrastructure. Led by Anita Nikolich,…

Read more →

The 19th-century French novelist Honore de Balzac is believed to have said that behind every great fortune lies a great crime. That’s even more true today than it was 200 years ago — just look at how Big AI, including Anthropic, OpenAI, Google, and others have built their trillion-dollar fortunes.  They all use vast amounts…

Read more →

Coca Cola claims data was stolen from its Fairlife business after a recent ransomware attack

Read more →

Fake helpdesk callers use Microsoft Teams and Quick Assist to access employee computers, where attackers install new GoGRPC backdoor in suspected ransomware operations

Read more →

This week’s cybersecurity landscape was shaped by autonomous AI attacks, prompt injection, evasive malware, software supply-chain weaknesses, identity abuse, and several large data exposures. Researchers also highlighted how trusted credentials, legitimate administrative tools, and familiar brands are increasingly being turned against enterprises. Major Threats & Vulnerabilities Autonomous AI Agents and Development Workflows OpenAI agents demonstrate…

Read more →

The increased demand for AI computing has made power plant development one of the most sought-after opportunities in American business.

Read more →

Bought a second-hand iPhone only to find it locked to the previous owner’s Apple ID? You’re not alone.

Read more →

NVIDIA has launched a new Open Secure AI Alliance to build an “open defense stack for agents”

Read more →

Proofpoint uncovered Cruciferra, a crypter-as-a-service that helps hackers evade antivirus and deliver malware in multiple campaigns. Proofpoint’s research team traced a wave of income-tax-themed lures targeting Indian taxpayers, tax professionals, and corporate finance teams back to a crypter service called Cruciferra, and the tool turns out to be shared infrastructure used across multiple unrelated criminal…

Read more →

Meta’s data-center project priced a $12.5 billion offering with a higher interest rate than a similar deal last year, as AI companies flood the market with new debt.

Read more →

Blumira CEO and co-founder Matt Warner says security vendors must take greater responsibility for MSP alert fatigue by delivering fewer, more accurate findings and automating clear response actions rather than leaving technicians to investigate another queue of alerts. Warner told Channel Insider that MSPs increasingly expect security platforms to provide three things: speed, response, and…

Read more →

Healthcare billing company Medical Computer Business Services (MCBS) has disclosed that a 2025 network breach exposed the sensitive information of more than 1.2 million people. […]

Read more →

Every week, another enterprise technology vendor issues a glossy press release announcing their new autonomous AI agent architecture, complete with a SOC 2 Type II report, an ISO 42001 certification, and an ironclad safety guarantee. On paper, the enterprise security battle looks won. In production, the trap is just snapping shut. The core mistake modern…

Read more →

CREST’s new AI standards are optional add-on requirements for cybersecurity service providers wishing to demonstrate responsible AI usage

Read more →

As ransomware, zero-day exploits, and identity-based attacks continue to evolve, businesses need more than basic endpoint protection. EDR tools help security teams identify suspicious activity, investigate incidents, and contain threats before they spread.  In this guide, we compare the best EDR tools for 2026 based on their detection and response capabilities, pricing, integrations, and suitability…

Read more →

JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery of a critical security issue that could result in arbitrary code execution. The vulnerability, assigned CVE-2026-63077 (CVSS score: 9.8), affects all TeamCity On-Premises versions. It has been addressed in versions 2025.11.7 and 2026.1.3. TeamCity Cloud instances have…

Read more →