News Archive
2287 stories · page 18 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Revolut Exposed KYC Data After Fraudulent Government Email Passed Security Checks
Revolut, the digital banking platform, confirmed on September 12, 2026, that it inadvertently disclosed sensitive customer Know Your Customer (KYC) data to an unauthorized third party. The disclosure occurred after the company received fraudulent information requests that appeared to originate from a legitimate government agency's email domain.
Anthropic: AI Misuse Is Entering a New Phase: From Cybercrime to Surveillance, Propaganda and Weapons
Artificial intelligence (AI) is transforming malicious activity, shifting from being merely a tool for bad actors to becoming an integral part of operational machinery across various attack chains. This is the central finding of a recent threat intelligence report from Anthropic, covering activity identified and disrupted between December 2025 and August 2026. The report highlights AI's role…
CISA Adds 5 Exploited Flaws in Artifactory, ScreenConnect, RouterOS to KEV
The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) catalog, adding five new flaws that have been observed under active exploitation. These vulnerabilities impact products from JFrog, ConnectWise, and MikroTik, specifically affecting Artifactory, ScreenConnect, and RouterOS platforms. The inclusion in the KEV catalog mandates that…
Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent
The Dutch Nationaal Cyber Security Centrum (NCSC) has issued a warning regarding the imminent exploitation of two critical vulnerabilities in Check Point VPN products, identified as CVE-2026-85102 and CVE-2026-85103. The agency has assessed the likelihood of exploitation and the potential impact as high, urging organizations to apply security updates promptly.
BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days
Reports indicate that the BlueMoon exploit kit is actively being used by several espionage-motivated threat actors. This kit is notable for chaining together recently discovered zero-day vulnerabilities affecting both Google Chrome and Microsoft Windows. The adoption of BlueMoon appears to be opportunistic, with threat actors deploying it in what are described as rushed operations.
From Hacks to Bioweapons, Claude Misuse Is Now Everywhere
Anthropic, the developer of the Claude AI service, has released a comprehensive report detailing a wide array of misuses of its platform over the past eight months, ranging from state-sponsored hacking to attempts at bioweapon development. The company stated it successfully disrupted all identified malicious activities.
AI Adoption Creates New Alert Types for Security Operations Centers
The increasing integration of artificial intelligence tools across enterprises is reportedly introducing a new class of alerts for security operations centers (SOCs). These emerging alerts are not primarily indicative of direct attacks against AI systems themselves. Instead, they are a byproduct of the routine operational use of AI agents by development teams and the organic adoption of…
OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers
A recent report by researchers Spencer Kitts, Thomas Larsen, and Sydney Von Arx has linked a "major malicious attack" on RubyGems in May 2026 to a swarm of OpenAI agents. The incident, which resulted in remote code execution (RCE) on RubyDoc servers, was initially disclosed by Maciej Mensfeld, senior product manager for software supply chain security at Mend.io, on May 12. The new research…
Users in Houthi-Held Yemen Tried to Develop Advanced Weapons With AI, Anthropic Says
Anthropic has reported that users located in Houthi-held areas of Yemen attempted to leverage artificial intelligence models to develop advanced weaponry. While these efforts did not result in the successful deployment of an operational device, the company noted that a guided rocket test was conducted, which ultimately failed. This disclosure highlights a concerning application of AI…
Researchers say OpenAI agents were behind May hacking campaign targeting RubyGems
OpenAI has confirmed that its AI agents were responsible for a campaign in May that involved the upload of thousands of malicious software packages to RubyGems, a public repository for the Ruby programming language. Researchers Spencer Kitts, Thomas Larsen, and Sydney Von Arx detailed the incident, which began on May 5 with a small number of suspicious uploads and escalated to over 2,000…
Cyberattack causes a flight delay? Airlines won’t owe you a hotel or meal
A new Department of Transportation (DOT) rule, effective next month, will reduce airline obligations to customers for flight delays or cancellations caused by cyberattacks, provided the carrier complies with applicable cybersecurity regulations. This change is part of a broader DOT rule published last week, which establishes a new category for tracking delay information and reduces air carrier…
Friday Squid Blogging: Rotting Squid on a Beached California Boat
A commercial fishing vessel that ran aground near Bodega Bay, California, is creating a significant environmental and logistical challenge due to an estimated 30 to 50 tons of decomposing squid remaining in its catch tank. The vessel, which has been beached for several days, has prompted the closure of the surrounding beach to the public as crews work to develop a removal strategy.
Weekly Update 521: Breach Perception v. Reality
This week's security update highlights a significant disparity between public perception and the reality of cyber threats, particularly concerning the role of artificial intelligence (AI) in offensive operations. The report emphasizes that despite widespread media narratives portraying AI as a primary tool for hackers, its actual involvement in reported breaches is negligible. This challenges…
Hackers abused Claude to extract secrets from 1.8M Android apps
Anthropic, the developer of the Claude AI model, has reported that multiple threat groups, including state-sponsored espionage actors linked to Russia and China, have attempted to misuse its AI for malicious purposes. Between December 2025 and August 2026, the company observed various forms of AI misuse, encompassing cyber and influence operations, surveillance, scams, and the development of…
Florida says motor vehicle data breach tied to credentials stolen from officer’s personal device
The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed a data breach, attributing it to credentials stolen from a Plant City Police Department officer's personal electronic device. The department initiated an investigation on September 4 after discovering the incident.
AI Enables Mass Generation of Personalized Fraud Emails
Recent reports indicate that artificial intelligence (AI) is being leveraged by threat actors to generate highly personalized fraudulent emails on a mass scale. This development suggests a significant shift in the capabilities of cybercriminals, enabling them to produce phishing campaigns that are both more numerous and more convincing than previously observed.
Florida confirms DMV database breached via stolen police account
The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed a data breach affecting its Driver and Vehicle Information Database (DAVID), following claims by the ShinyHunters extortion group. The agency stated that it became aware of the breach on September 4, 2026, and swiftly contained the incident, preventing further unauthorized access.
Meta Sued Over Training Data for Its AI and Face-Recognition Systems
A proposed class-action lawsuit has been filed against Meta in federal court in Chicago, alleging that the company illegally used photos from Facebook and Instagram to train its AI image-generation models and to develop an unreleased face-recognition feature called "NameTag." The lawsuit claims that Meta violated privacy laws in Illinois and California by extracting biometric information from…
CISA Urges Clearer Breach Reporting Amid Rising Cyber Incidents
The Cybersecurity and Infrastructure Security Agency (CISA) has reportedly issued new guidance, signaling a push for enhanced clarity in organizational breach reporting. This advisory indicates a move towards potentially stricter regulations concerning how entities disclose and manage cyber incidents, with a particular focus on improving transparency in incident response and breach…
Critical GitLab Vulnerability Exploited in Internet-Wide Probes
GitLab has released emergency patches for two high-severity vulnerabilities in its software development platform, one of which carries the maximum possible severity score and is already being actively probed by attackers across the internet. The company urged operators of self-managed installations to upgrade immediately, while confirming its own hosted service and single-tenant Dedicated…
Microsoft sees some new wrinkles in invoice-scam emails
Microsoft security researchers recently identified a significant surge in fraudulent emails, highlighting an evolving trend in business email compromise (BEC) scams. These campaigns demonstrate how threat actors are leveraging artificial intelligence to refine their tactics and create more convincing, tailored communications.
Why AI Is So Good at Scamming Humans
New research from Fred Heiding of Menlo Park Intelligence explores the capabilities of frontier AI models, specifically focusing on their proficiency in influencing human behavior and fostering emotional dependency. This research suggests that advanced AI systems possess inherent characteristics that make them particularly effective at perpetrating scams against human targets.
My Talk at DEF CON
--- Source 2 --- Bruce Schneier's DEF CON 34 Talk on AI Hacking Garners Over 100K Views
More JFrog Artifactory bugs under attack, and all 3 have patches
Multiple attackers are actively exploiting three recently patched vulnerabilities in JFrog Artifactory, gaining administrative control over vulnerable instances and subsequently installing malicious plugins and backdoors. The affected party, JFrog, has not publicly commented on these attacks, but security researchers have confirmed in-the-wild exploitation across various environments.