Human attacker uses AI agents to breach enterprise network in under 10 hours
The sophisticated attack, detailed in a Palo Alto Networks Unit 42 report, bypassed the need for novel zero-day exploits or advanced tradecraft, relying inst...
general
20 articles
AI models show increasing capability for autonomous cyberattacks, report warns
Booz Allen's Cyber Weapon Index evaluated 18 AI models, nine from the U.S.
Senator Wyden urges NSA to update VPN guidance amid foreign surveillance concerns
A Congressional Research Service analysis, requested by Wyden, indicates that foreign intelligence services may be able to link VPN users to specific website...
Capsule Security unveils 'AI circuit breaker' to control rogue AI agents
Capsule's system assesses whether a specific action aligns with the agent's assigned task, providing a control layer outside the agent itself.
SQL injection vulnerability in WordPress plugin affects millions of sites
The vulnerability, tracked as CVE-2026-19949, is a second-order SQL injection that impacts versions prior to 7.110.
Google launches Gemini 3.8 Flash and Gemini 3.8 Flash Cyber
Gemini 3.8 Flash demonstrated strong performance across 16 AI benchmarks, outperforming competitors like Claude Opus 5 and GPT 5.
New 'Spring Ring' operation uses vishing via Microsoft Teams
The "Spring Ring" operation, observed between January and April, illustrates a shift from traditional email phishing to attacks leveraging trusted enterprise...
New browser malware uses remote commands to control Windows systems
The malware, disguised as a "privacy browser," was distributed via a deceptive sponsored search result after an employee mistyped a URL.
Outsider Phishing Kit Survives Takedown With 700 New Pages
Outsider phishing kit generated 700 new pages after a Google-led disruption
Russian national charged in US for malware scheme targeting 80,000 users
A Russian national has been charged by the U.S.
Your Employee’s Password Appeared in an Infostealer Log. Now What?
Infostealers can expose far more than passwords, including authenticated sessions that may let attackers bypass MFA. Flare explains how defenders can priorit...
Thomson Reuters reveals breach that exposed U.S. and Canadian court records
Thomson Reuters has disclosed a data breach affecting C-Track, a court case management platform operated by its subsidiaries, exposing court records and sens...
Grafana fixes critical SSRF flaw affecting Grafana MCP servers
An MCP caller could potentially reach unintended internal services leveraging the MCP server’s network position.
FCC proposes consumer scorecard for telecom robocall prevention efforts
The proposed scorecard would evaluate how well voice service providers, including wireless, wireline, and VoIP companies, deter robocalls and their transpare...
Fake Acquisition Scam Uses Forged NDAs to Demand €626,000 Corporate Payment.
Threat actors impersonated Gen executives and major consulting firms in a targeted business email compromise-style operation that used forged non-disclosure ...
Google’s Gemini 3.8 Flash takes on bigger AI models at a lower cost
Google has introduced Gemini 3.8 Flash, available to developers today, and a gated sibling, Gemini 3.
412,000 The Town 2025 Ticket Buyers’ Data Hits the Dark Web
412,000 The Town 2025 festival buyer records are being sold for $10,000, with Brazil’s data openly marketed for bank fraud, loans and SIM registration. A sel...
Rogue ScreenConnect Clients Spread Worm-Like Malware Across Connected Windows Systems
A malicious ScreenConnect campaign in which rogue remote-access clients do more than provide attackers with hands-on control: modified clients can automatica...
Microsoft Defender for Office 365 mistakenly flags Google search links as malicious
The false positive is attributed to an inaccurate security classification within the Defender for Office 365 Safe Links feature.
Hackers compromise 5,000 Dropbox accounts using Lenovo ID flaw
The breach, which occurred between August 4 and August 21, allowed attackers to access Dropbox accounts by registering Lenovo IDs with the victims' email add...