AI-powered attacks, AI-powered defenses, and the vulnerabilities of the models themselves.
602 articles
A critical vulnerability in Microsoft Defender, codenamed 'BlueHammer' (CVE-2026-33825), is being actively exploited by ransomware groups. The flaw allows authenticated attackers to escalate privileges within enterprise networks.
cnBeta (Full RSS) · 79d ago
A mysterious Chinese AI research team known as 'MopMonk' has achieved a top 7 ranking on the CyberGym cybersecurity benchmark. The team secured a 73.1% performance score, highlighting the growing capabilities of specialized AI in security-focused tasks.
Pandaily · 81d ago
Researchers at KIT have developed a method to identify individuals by analyzing Wi-Fi beamforming feedback (BFI) signals, which capture unique gait patterns. While currently in the lab stage, this highlights potential privacy risks in wireless network security.
虎嗅 · 81d ago
Bendigo Bank is restructuring its security operations center (SOC) to incorporate agentic AI workflows. This move aims to modernize their security stack and operational efficiency.
iTNews Australia · 82d ago
Apple is shifting its software update cadence to release security patches earlier. This strategy is a direct response to the increasing sophistication of AI-powered cyber attacks.
iTNews Australia · 82d ago
Confidential images and supplier documents for the upcoming iPhone 18 Pro have appeared on the dark web. This follows a significant cyberattack on Apple supplier Tata Electronics.
Digital Trends · 82d ago
F5 is evolving its infrastructure expertise to address the security challenges of the AI era. CEO François Locoh-Donou announced a new initiative focused on securing AI-driven applications and deployments.
GeekWire · 84d ago
The Pentagon is investigating a data exposure from the private group Dialog that leaked personal information of high-level national security officials. The breach included details on a senior White House intelligence official and an active-duty special operations officer.
Wired · 85d ago
As AI agents gain autonomy, the industry is shifting focus toward establishing cryptographic trust and identity verification. This is essential for ensuring security in automated commercial transactions.
TechRadar AI · 85d ago
NAB is restructuring its Security Operations (SecOps) by prioritizing the recruitment of data experts and developers. This shift aims to integrate advanced data analytics into their security framework to handle increasingly complex threats.
iTNews Australia · 86d ago
Market intelligence firm Klue reports that the hackers responsible for their recent data breach are deleting stolen files. However, a second group is now attempting to extort the company.
The Next Web (TNW) · 86d ago
Reports indicate that Russian entities utilized a Cellebrite forensics platform to compromise an activist's phone despite the company having revoked their access. Cellebrite maintains that the hardware was legacy equipment predating current sanctions and was used without their authorization.
Engadget · 86d ago
360 Security Technology founder Zhou Hongyi warns that Anthropic’s Mythos model poses significant cybersecurity risks. He advocates for China to develop a domestic equivalent to counter the model's ability to autonomously identify software vulnerabilities.
SCMP Technology · 86d ago
A coordinated international law enforcement operation successfully dismantled two prominent cybercrime tools. This disruption targets the infrastructure used to facilitate large-scale automated attacks.
Ars Technica · 87d ago
Bitdefender has released RealCheck, a mobile application designed to detect deepfake manipulation in videos. The tool helps users verify the authenticity of media before sharing or acting on potentially fraudulent content.
Digital Trends · 87d ago
Microsoft investigators are leveraging Copilot AI to identify and dismantle legacy malware technology. This integration marks a shift in using generative AI for active cybersecurity defense.
Bloomberg Technology · 87d ago
The Australian Signals Directorate (ASD) announced it will retire the Essential Eight cyber security framework within the next two years. A new replacement is being developed to better address modern, evolving security threats.
iTNews Australia · 88d ago
Cybersecurity firm Varonis Systems is reportedly exploring strategic options, including a potential sale, following unsolicited takeover interest.
Bloomberg Technology · 88d ago
NRI Secure has introduced a new diagnostic service capable of detecting undisclosed vulnerabilities at a level comparable to Anthropic's Claude Mythos Preview. The service aims to enhance security posture by leveraging advanced AI capabilities for threat identification.
ITmedia AI+ (日本) · 88d ago
OpenAI has introduced a new initiative aimed at identifying and patching security vulnerabilities within the open-source software ecosystem. This effort seeks to bolster the security posture of critical libraries that underpin many AI and software development projects.
TechCrunch AI · 89d ago
The article proposes 'Guardian Angels,' a concept for personalized digital twin LLMs that emulate a user's values and personality to enhance productivity and security. Unlike generic chatbots, these agents act as a 'board' for the user, handling complex tasks and screening for cybersecurity threats.
LessWrong AI · 90d ago
Cryptographic keys securing computer boot sequences are set to expire on June 24. Users and administrators must prepare for potential security implications regarding system integrity.
Wired · 90d ago
Microsoft has identified a self-propagating USB malware that monitors Windows clipboards for crypto wallet addresses. The stolen data is exfiltrated through a portable Tor client to bypass network detection.
The Next Web (TNW) · 91d ago
The cybercrime group ShinyHunters has leaked 45GB of data stolen from Madison Square Garden Entertainment. The breach includes sensitive facial recognition surveillance records and millions of customer and corporate files.
The Next Web (TNW) · 91d ago
Signal President Meredith Whittaker warns that the concentration of power in three major tech companies poses a fundamental threat to collective cybersecurity and privacy. She advocates for greater scrutiny of AI development within these dominant firms.
Bloomberg Technology · 92d ago
The Australian Signals Directorate (ASD) has updated its Information Security Manual (ISM) with new and revised controls. These changes place a stronger emphasis on the security competencies required of software developers.
iTNews Australia · 94d ago
Twenty, a startup specializing in offensive cyber weapons, has raised $100 million in a Series B round, reaching unicorn status. The firm is positioned as America's first venture-backed cyber warfare company.
The Next Web (TNW) · 94d ago
A hacking group named FulcrumSec claims to have stolen 1.3 terabytes of data from Novo Nordisk. The company has refused to pay the $25 million ransom demand.
The Next Web (TNW) · 94d ago
Microsoft released benchmarking data suggesting that integrated email security partners provide only marginal improvements over its native Defender for Office 365 protections. While Microsoft claims superior threat detection, industry experts argue that a defense-in-depth approach remains necessary for enterprise security.
Computerworld · 94d ago
A new Android banking trojan named Rokarolla has been identified, capable of targeting 217 financial and crypto applications. The malware grants operators extensive control, including the ability to steal PINs, SMS codes, and clipboard data.
The Next Web (TNW) · 95d ago