Cybersecurity News

Barely three days after disclosure, attackers are widely chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on the Internet.

Ivanti CSO Daniel Spicer says frontier models have shown surprising effectiveness in early stages, but cost and human-in-the-loop viability remain open questions.

Marc Maiffret reflects on Code Red's legacy and the security lessons helping organizations navigate AI risk today.

Job pressures have increased as companies run headlong into AI adoption, causing 26% of top security executives to consider leaving their position.

Cruciferra crypter used process ghosting and 90 custom ciphers to hide payloads for multiple actors

JadePuffer follow-up campaign deployed ENCFORGE locker built to destroy AI model artifacts

A researcher who discovered a critical vulnerability in WordPress has used OpenAI’s latest model to develop an exploit chain

Researchers have linked HollowGraph malware to the Cavern framework after discovering its use of Microsoft 365 calendars and Microsoft Graph APIs as a stealthy C2 channel

Two chiefs of UK policing agencies said the Transport for London prosecution demonstrates the need for Cybercrime Risk Orders

Government organizations are targeted by attackers who know agencies cannot afford disruption to public services

23andMe has agreed to an $18m settlement with 42 US attorneys general over its 2023 data breach, including enhanced data protection requirements

US government agencies have until July 19 to patch two critical Fortinet vulnerabilities

Analysis of ransomware incidents by ReliaQuest indicates a shift in the ransomware landscape

Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers

New ClickLock macOS stealer locked victims out of their own system until they surrendered a password

Cybersecurity researchers tested Open AI GPT 5.5’s offensive cyber capabilities – and the results showed how effective a frontier LLM can be for hackers

The perpetrators of the 2024 TfL cyber-attack have been jailed for five and a half years each after pleading guilty to Computer Misuse Act offences

SANS Institute says governance programs are still nascent even as AI failures and threats grow

The White House announced Gold Eagle to help accelerate the discovery, prioritization and patching of flaws found by AI

Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims

Eleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machine

Research of incidents by Sophos finds that phishing, brute force attacks and other identity-based threats have surpassed software vulnerabilities as means of delivering ransomware

Progress has restored access to its ShareFile Storage Zones Controller after a four-day suspension triggered by a credible external security threat

Microsoft released fixes for a record 570 CVEs in its July Patch Tuesday update, as experts warn AI is dramatically accelerating vulnerability discovery and increasing patch volumes

The UK government is warning of the potential impact of catastrophic cyber-attacks

Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence.

The US Department of Defense announced the immediate suspension of the CMMC Phase II requirements until further review

Researchers at Jamf Threat Labs detail CrashStealer, which steals passwords, cryptocurrency wallets and more

Supermarket giant Lidl has revealed details of a supplier breach impacting customer data

Five UK residents have been charged in relation to supplying Russian Coms fraud devices and apps