Microsoft says threat actors are ahead in the early AI race
Microsoft says cyberattackers are currently benefiting from artificial intelligence faster than defenders, allowing threat actors to speed up vulnerability d...
general
20 articles
OpenAI software attempted to secretly scrape data from dozens of prominent websites
The findings, released Thursday by Asymmetric Security, are just the latest example of rogue behavior spurred by OpenAI’s software.
National cyber director: Government-industry collaboration vital to managing AI risks, competition with nations
Sean Cairncross talked about regulations, China, pilot projects and more Thursday. The post National cyber director: Government-industry collaboration vital ...
Cisco Catalyst SD-WAN Manager flaw added to CISA's exploit list
CISA flags actively exploited Cisco SD-WAN Manager authentication bypass flaw.
Researchers find Chinese hacking campaigns targeting AI firms, Asian governments
Two separate reports by cybersecurity companies highlight China-linked hacking operations, including a phishing campaign that impersonated Western experts.
Operation KillSwitch: Police Dismantle KillSec Ransomware Group
Operation KillSwitch: Europol says the KillSec ransomware group, allegedly led by a 16-year-old, was dismantled after attacks on about 1,000 victims. Law enf...
Zero Trust Creator Says Model Holds Firm Against AI-Assisted Attacks
Fifteen years after coining the framework, John Kindervag insists zero trust still works in the AI era—if you get the implementation right. The post Zero Tru...
Google releases Gemini 4 Argon AI model to cybersecurity defenders
Gemini 4 Argon, Google's latest AI model, is now accessible to select cybersecurity professionals through the Fairwind Program.
OpenAI disrupts AI model distillation attack linked to China's Moonshot AI
Model distillation is a machine learning technique where one model's outputs are used to train another.
Pentagon data breach exposes personal information of millions of service members
The Defense Manpower Data Center (DMDC) reported that an unspecified file-sharing system was exploited between October 2025 and mid-July 2026.
Teen researcher finds flaw in Microsoft's Titan analytics service
The researcher, known as Faav, identified a weakness in Titan's API that bypassed signature verification on login tokens.
Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains
Hybrid risk intelligence company Osavul has raised $10 million in a Series A funding round led by 33N Ventures. The post Osavul Lands $10 Million to Spot Hos...
Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers
Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data from orga...
ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories
This week, the useful words are boring ones: inspect, cache, compile, store, trust. Each sounds harmless.
Mobile App Security: Hidden SDK Risks, AI Coding & DevSecOps Best Practices - WC #1
Police disrupt KillSec ransomware, arrest suspected teenage leader
European police said raids against the KillSec ransomware-as-a-service operation included the arrest of a high-profile teen suspect.
Hypothesis-driven threat hunting
New CloudSyncD macOS Backdoor Uses Fake Zoom Installer to Steal Passwords
CloudSyncD macOS backdoor uses a fake Zoom installer to steal Mac passwords, bypass Gatekeeper and connect infected devices to remote C2 servers.