Attackers are calling or texting employees on their personal phones, posing as internal IT staff, in a social engineering campaign that tricks them into…
PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence (AI) to devise exploits targeting a recently disclosed…
Lumexa Imaging breach affects 5.8M individuals
Lumexa Imaging has notified federal regulators of a massive data breach affecting 5.8 million individuals after a vendor compromise allowed unauthorized…
European Operators Mull Deal For EU Satellite Spectrum Bid
Major mobile operators reportedly consider banding together to jointly bid on reserved EU spectrum for direct-to-device satellite services
Introducing AI Assistant for Akamai Web Security Analytics
Discover how AI Assistant for Akamai Web Security Analytics helps SOC and AppSec teams investigate events faster and take guided action with natural…
OpenAI Builds ‘Defense Factory’ Where AI Agents Continuously Find and Fix Vulnerabilities
OpenAI has introduced a “Defense Factory,” an automated, agent-first cybersecurity operation that continuously discovers, validates, and remediates…
NSA, FBI, CISA Warn of Industrial-Scale AI Model Distillation Attacks
US agencies say six China-based AI firms used large-scale distillation campaigns to extract capabilities from Claude, GPT, Gemini, and Grok models.
Thousands of horses caught up in Europe-wide trafficking scheme
Europol has supported a major operation against a criminal network suspected of trafficking horses across Europe using falsified documents and manipulated…
ShinyHunters expose 6.4M in attack on medical supplier McKesson
Have I Been Pwned logs leaked records spanning patients, staff, and providers
Deceptive Android Apps Exploit Google Play Early Access to Evade Reviews
Deceptive apps in Early Access are being used by dishonest developers for their own benefit.
Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing
Online dating app Grindr has opted to pay £26 million ($35.1 million) to settle a lawsuit in the U.K. over allegations that it shared users’ personal…
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws
The U.S.
JLR To Lay Off 4,000 Staff Amid China Competition
UK’s biggest carmaker seeks to cut costs over next two years, amid slow transition to electric, financial hit from cyber-attack
Palo Alto PAN-OS Vulnerability Enables Arbitrary Code Execution as Root User
Palo Alto Networks has disclosed a high-severity PAN-OS vulnerability that could allow an unauthenticated remote attacker to execute arbitrary code with…
AI and Human Risk Reshape CISO Priorities in 2026
AI and human risk are reshaping CISO priorities as board expectations grow.
Britain reboots its space strategy with £7.8B already on the launchpad
Cross-government plan combines civil ambitions with an increasingly military view of orbit
Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks
The Gigabud banking trojan now installs a second Android app that creates a work profile on an infected phone and drops a tampered banking app inside it,…
FBI Publishes First Cyber Strategy
The FBI published its inaugural Cyber Strategy on September 9, marking a significant shift in how the agency approaches cyber threats.
Belgian Police Arrest China-Born Man On Tech Espionage Charges
Authorities arrest former senior semiconductor researcher on charges that he simultaneously ran competing Chinese chip producer
Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE
Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The company says both could…
WordPress Adds Automated Security Review for Plugins
WordPress has deployed an automated security review system that evaluates every plugin release before distribution through the WordPress.org update API.
OpenAI Agents Take Over German Wiki Site
OpenAI acknowledges its agents repurposed German wiki as message board in May incident that was not previously disclosed
VMware ends public VDDK downloads
VMware has quietly discontinued public downloads of its Virtual Disk Development Kit (VDDK), a software development kit that provides APIs for accessing…
US Regulator Probes Tesla Over Cybercab Launch
US vehicle safety regulator opens audit process after Tesla puts Cybercab onto Austin streets with no human controls