New Carbonato malware uses AI agents to hijack exposed Docker hosts
A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control. [.
general
20 articles
OpenAI Agent Breached Australian Medicare Statistics Portal
An OpenAI agent bypassed controls on Australia's Medicare statistics portal, accessed non-public data and was not reported to officials for nearly 3 months.
LinkedIn introduces new tools to combat AI-generated fake identities
The platform is rolling out several new features, including the ability for members to vouch for the professional experience of their colleagues and classmat...
SCOUTz Prospect Intelligence Platform Launches for MSPs with 30-Day Beta
Phoenix, Arizona, September 24th, 2026, CyberNewswire SCOUTz, a prospect intelligence platform built for managed service provider (MSP) security sales, is no...
Rydox cybercriminal marketplace operator pleads guilty following co-conspirator brothers’s deportation
Ardit Kutleshi, 28, was extradited from his home country of Kosovo last year after prosecutors accused him and his older brother of running Rydox — an illici...
Critical 9.8 JetBrains TeamCity RCE exploited by ransomware, says CISA
Ransomware groups exploit a critical TeamCity flaw, putting software supply chains at risk.
AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS
MikroTrick chains two RouterOS flaws to bypass authentication and gain admin access. AI helped researchers uncover the attack chain within days.
Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions
A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that asks for no special permissions. A researcher, Rasmus ...
New bill would create federal investigative body for AI-driven hacks
A new Democratic bill in Congress would establish a federal Cybersecurity and AI Board of Investigations to provide independent government oversight of cyber...
ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories
This week, the dangerous stuff keeps arriving dressed as something boring. An update.
Cyber recovery plans lag behind AI, ransomware threats
Cyber recovery plans are struggling to keep pace with ransomware, AI and complex infrastructure.
Exposed GitLab project email addresses let attackers push code
Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and...
Burger King Russia customer data leaked online after 2024 breach
The breach, which occurred in October 2024, targeted Mindbox, a marketing automation platform used by Burger King Russia.
LLM privacy policies are difficult to read, study finds
A cybersecurity firm, Bridewell, assessed the privacy policies of 20 popular LLMs and found the average reading time to be 20 minutes, with some policies exc...
Phone-hacking company that won U.S. security agency contracts hid Russian ownership, DOJ alleges
The Justice Department said two leaders of the company have been arrested and face conspiracy to commit wire fraud. The post Phone-hacking company that won U.
Microsoft Password Reset Portal Can Leak Account Verification Details
LevelBlue found Microsoft’s password reset portal can reveal valid accounts, recovery methods and likely administrator accounts without user authentication.
Elsevier platform briefly redirected to LAPSUS$ leak site
The attack involved visitors to select Elsevier platforms being temporarily redirected to a third-party page, which was later identified as belonging to the ...
Malicious npm package targets Twilio developers with data-harvesting attempts
The package, published by an now-deleted npm account, initially presented itself as an authorized bug-bounty probe for Twilio's HackerOne program.
New TrustSink attack steals passwords via rogue MFA provider
The TrustSink attack exploits the trust Microsoft Entra places in configured external MFA providers. An attacker with a compromised privileged Entra account ...
Kontext Security Emerges With $4 Million for AI Agent Runtime Controls
The startup’s runtime enforcement platform evaluates AI agents in real time to provide visibility and control over their actions. The post Kontext Security E...