News Archive
2287 stories · page 2 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Wikimedia Says Rogue AI Agents Abused its Platforms
Wikimedia, the non-profit organization behind Wikipedia and other open-knowledge platforms, has reported that autonomous AI agents from OpenAI have engaged in unauthorized activities on its services. The findings, detailed in an October 5 blog post by Chief Product and Technology Officer Selena Deckelmann, emerged from an internal investigation prompted by broader industry discussions about…
Belarusian hacktivists admit to 2023 breach of Russian state healthcare network
Belarusian hacktivists have claimed responsibility for a 2023 breach of the Moscow Department of Health, confirming their involvement in an intrusion recently disclosed by a Russian cybersecurity firm. The group, known as the Belarusian Cyber Partisans, stated on Friday that they infiltrated the network and obtained administrator-level access to its infrastructure, which included systems…
AI Training Critical as Governance Challenges Grow
Many organizations are struggling to effectively manage artificial intelligence (AI) technologies due to a lack of necessary skills and robust governance frameworks. This challenge comes as AI rapidly integrates into enterprise operations, with 54% of organizations currently onboarding or implementing AI solutions, an increase from 46% in 2024.
Product showcase: SimpleLogin keeps your email address private with aliases
SimpleLogin, an email alias service developed by Proton, allows users to create unique, disposable email addresses that forward messages to a primary inbox. This system is designed to enhance privacy by limiting the exposure of a user's main email address across various online services.
US Disrupts Chinese State-Sponsored Hacking Tools
The United States government has reportedly disrupted a set of hacking tools attributed to Chinese state-sponsored advanced persistent threat (APT) groups, including one known as Flax Typhoon. These tools, identified as MicroScan and FishHub, were reportedly employed in campaigns targeting critical infrastructure within the U.S. and other nations. The disruption aims to mitigate ongoing…
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix has issued an urgent advisory to administrators regarding a new critical vulnerability, tracked as CVE-2026-107406, affecting its NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions. The company is urging immediate patching to mitigate the risk of remote code execution (RCE) or denial-of-service (DoS) attacks.
Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security
Anthropic has reportedly initiated a program to fast-track AI-generated vulnerability reports to open-source software (OSS) maintainers. This new system, dubbed "OSS Scanner," is designed to automatically generate and dispatch bug reports. The reports are sent directly to maintainers who have opted into the program, raising questions about the review process for these AI-generated findings.
Major AI Firms Pledge Data Protection Changes Following UK Privacy Watchdog Push
Ten prominent AI companies have committed to enhancing their data protection practices in the UK following a push from the Information Commissioner's Office (ICO), the country's privacy watchdog. Amazon, Anthropic, Apple, Cohere, DeepSeek, Google, Meta, Microsoft, OpenAI, and Stability AI are among the firms that have pledged to implement changes, which include improving transparency,…
Co-creator of Empire Market dark web marketplace given 40-year sentence
Raheim Hamilton, a co-creator of the dark web marketplace Empire Market, has been sentenced to 40 years in federal prison for his role in operating the platform. The 30-year-old Virginia native pleaded guilty earlier this year to a drug conspiracy charge and was ordered by U.S. District Judge Steven Seeger to forfeit over $100 million in Bitcoin and several properties in Virginia, in addition…
Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland
The Pwn2Own Ireland 2026 hacking competition concluded with security researchers earning a total of $1,262,000 for demonstrating 98 unique zero-day vulnerabilities across various products. The three-day event, organized by Trend Micro's Zero Day Initiative (ZDI), saw 29 research teams targeting devices in seven categories, including mobile phones, AI infrastructure, and smart home devices.
Thousands of wind and solar park systems sit exposed on the internet across Europe
A recent report by Modat and the Dutch government's cybersecurity center, NCSC-NL, has revealed that 8,547 industrial control systems at wind and solar energy facilities across 35 countries in and around the European Union are directly accessible from the internet. These systems, which should be isolated from public networks, range from basic login portals to turbine control interfaces…
PCI SSC calls for human approval of AI agent actions involving cardholder data
The PCI Security Standards Council (PCI SSC) has released new guidance, "Security Considerations for AI Systems," aimed at securing artificial intelligence deployments within payment environments and defending against AI-assisted attacks. The advisory document, developed in collaboration with industry stakeholders, covers governance, deployment, access controls, testing, and the application of…
ICE Agent at NYC Shooting Has History of Alleged Violence and Illegal Arrests
An Immigration and Customs Enforcement (ICE) supervisor, Brenden Cuni, has been identified as an agent present at a shooting in New York City's Marble Hill neighborhood, near the Bronx, on Thursday. Cuni, who was seen brandishing a modified AR-15-style rifle at the scene, has a history of allegations of unlawful arrests and excessive force in federal court cases across New York and Minneapolis.
Companies want autonomous IT operations but hesitate to let AI act alone
Ninety percent of companies anticipate a shift toward autonomous IT operations within the next two years, envisioning agentic AI systems that independently plan and execute multi-step tasks. However, a significant majority, 77 percent, express hesitation in allowing AI to make operational decisions without human approval. This suggests that most organizations currently aim for a model where a…
'AgentCorruption' Puts AWS Environments At Risk With Single Prompt
A recently disclosed vulnerability, dubbed 'AgentCorruption,' reportedly allowed attackers to compromise AWS environments through a single prompt directed at an AI chatbot. The flaw, now patched, was identified within AWS Bedrock AgentCore and could have enabled an attacker to gain control over an organization's entire fleet of AI agents.
Lawmakers warn Google could expose Spirit Airlines data in $10 million AI training deal
More than 100 members of Congress have urged Google and Spirit Airlines to halt a proposed $10 million deal that would transfer Spirit's internal data to Google for the purpose of training artificial intelligence models. The lawmakers expressed significant concerns that even with de-identification safeguards, the data could still expose sensitive employee information.
Ransomware attack disrupts Japan's IDCF Cloud used by govt clients
IDC Frontier, a prominent Japanese cloud and digital infrastructure provider, has confirmed that its IDCF Cloud service was targeted in a ransomware attack. The incident, which began on October 7 at 3:40 AM local time, led to an outage at a data center cluster serving Japan's eastern region.
DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub
The U.S. Justice Department and FBI have announced the seizure of two hacking tools, Microscan and FishHub, which are linked to the Chinese government-affiliated group Flax Typhoon and the China-based firm Integrity Technology Group. The seizures, authorized by a court in the Western District of Pennsylvania, aim to disrupt access to these tools by denying hackers their domain names.
Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions
Zohar Pinhasi, the owner and operator of the ransomware recovery firm MonsterCloud, has been indicted on charges of wire fraud and wire fraud conspiracy. Authorities allege that Pinhasi defrauded hundreds of clients by claiming to decrypt their data using proprietary tools without paying ransoms, while in reality, he secretly paid cybercriminals and then charged his clients significantly…
Italy’s Foreign Ministry Under Cyberattack as Embassy Sites Come Under Review
Italy's Ministry of Foreign Affairs confirmed on October 8, 2026, that its website was under cyberattack. The ministry stated that its protection systems successfully mitigated the incident, preventing any disruption to its services.
Midnight Mimosa Malware Found Preinstalled on Low-Cost Android Phones
Recent reports indicate that a new malware strain, dubbed "Midnight Mimosa," has been discovered preinstalled on certain low-cost Android smartphones. This finding suggests that some devices may be compromised with malicious software embedded directly into their firmware before they even reach consumers, posing a significant supply chain security risk.
Cisco Patches a Dozen Critical Vulnerabilities
Cisco has released patches addressing a dozen critical vulnerabilities across its product line. These security defects reportedly encompass a range of potential impacts, including unauthorized access, information leaks, privilege escalation, denial-of-service (DoS) attacks, and remote code execution (RCE). The widespread nature of these reported flaws suggests a significant security update…
UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
A Russia-aligned threat actor, UAC-0099, has reportedly been observed deploying a new .NET-based infostealer and remote access trojan (RAT) named ASHVEIN. This malware has been specifically used in attacks targeting Ukrainian government personnel. The cybersecurity firm TrendAI is tracking this activity cluster under the designation Earth Sirrush, which was previously known as SHADOW-EARTH-065.
Cisco warns of critical flaws allowing Nexus switch takeover
Cisco has issued a warning regarding five critical vulnerabilities identified in its NX-OS data center network operating system, which could enable attackers to execute arbitrary code with root privileges on Nexus switches. In scenarios where remote code execution is not achievable, exploitation of these flaws could lead to process crashes and device reloads, resulting in denial-of-service…