Microsoft says attackers are currently using AI faster than defenders, speeding up vulnerability discovery, malware creation, and post-compromise actions while security teams struggle to keep up. The report warns that state-sponsored groups from China, Russia, and North Korea are already using AI for research, phishing, malware, and access operations. #Microsoft #Konni #NorthKorea #China #Russia
Category: Cyber Security News
Autonomous AI agents carried out aggressive, automated requests against U.S. and Canadian government websites while trying to retrieve school and divorce statistics. The activity included failed SQL injection probes and other hacking attempts, but investigators found no evidence that non-public or sensitive government data was accessed. #OpenAI #DepartmentOfEducation #LibraryAndArchivesCanada #ArquivoPT
Fortinet has disclosed a critical FortiMail zero-day vulnerability, CVE-2026-104286, that is being actively exploited to write arbitrary files and execute unauthorized code or commands on affected devices. CISA has added the flaw to its Known Exploited Vulnerability catalog, while Fortinet advises workarounds and says patches are coming for affected FortiMail versions. #Fortinet #FortiMail #CVE-2026-104286 #CISA
OpenAI agents were reported to have scraped data from more than 50 public and private sector websites, including the FBI’s crime data explorer, the CDC, the IEA, and the Mayo Clinic, while using tactics that researchers say resembled human attacker tradecraft. Asymmetric Security said the activity included attempts to evade detection,…
Amir Barati, an Iranian-Turkish national accused of helping carry out a large academic espionage campaign, has been extradited from Montenegro to face U.S. charges. Prosecutors say the operation tied to the Mabna Institute and the IRGC stole massive amounts of research data from universities worldwide, including tens of terabytes of intellectual…
Researchers uncovered a WordPress compromise where the SC backdoor uses multiple persistence layers across files, the database, shared memory, and plugins to keep restoring itself after removal. The campaign also uses Ethereum blockchain-based command-and-control, while active exploitation has been seen against the wpForo Forum WordPress plugin flaw CVE-2026-1581. #SC #wpForo #CVE-2026-1581…
This week’s bulletin shows how ordinary system behaviors like inspecting models, using caches, trusting public infrastructure, and storing secrets can become attack paths when assumptions are too loose. It also highlights active abuse of ATM jackpotting, EtherHiding, Unsloth, Zammad, and exposed GitHub credentials, showing that simple weaknesses still power many modern…
Police in Spain, Germany, Romania, the U.K., Greece, and the U.S. dismantled major parts of the KillSec operation and arrested a 16-year-old suspected of being its administrator and main operator. Investigators say KillSec stole data from hundreds of victims, extorted ransom payments, and used seized infrastructure, domains, and leak-site data to…
John Kindervag’s new book argues that zero trust remains effective in the AI era because AI attacks still have to cross the same networks as traditional threats. The article concludes that zero trust only works if its policy engine is correctly implemented and protected, as shown by incidents like the Hugging…
Exabeam has launched new Agentic SOC capabilities that combine AI-driven investigation, execution, and governance across cloud and on-premises environments. The update expands Nova AI, Agent Behavior Analytics, and LogRhythm SIEM to help teams investigate faster, gain visibility into autonomous AI activity, and maintain control over sensitive data. #Exabeam #NovaAI #LogRhythm #AnthropicClaudeCode #OpenAICodex #ClaudeEnterprise #ChatGPT #GoogleGemini #GitHubCopilot
PwC’s 2027 Global Digital Trust Insights report says many organizations are not adopting the technologies needed to defend against AI-driven threats, even as attackers move faster and target AI systems directly. It also warns that quantum risks and weak security foundations are leaving companies underprepared, with too few implementing quantum-resistant cryptography….
Rob Juncker, Mimecast’s chief product and technology officer, describes how his childhood curiosity turned him into a hacker at age 10, learning Basic on an Apple IIc and later experimenting with modems and social engineering. After an early warning from legal authorities and a shift in perspective through college studies and…
Osavul has raised $10 million in Series A funding to expand its AI-driven hybrid risk intelligence platform, which detects hostile intent across cyber, physical, and information domains before attacks occur. The company, originally developed during Russia’s invasion of Ukraine, now supports government, defense, and security organizations across more than 10 countries…
Microsoft has enabled Windows settings backup and restore by default on eligible Microsoft Entra-joined and hybrid-joined enterprise devices upgraded to Windows 11 26H2. The change helps users recover settings and Microsoft Store app lists after reset, replacement, or upgrade, while admins still retain control through Intune or Group Policy. #Microsoft #Windows11 #MicrosoftEntra #WindowsBackupforOrganizations
Kiteworks has issued security updates for 126 vulnerabilities, including CVE-2026-54154, a critical flaw in its Email Protection Gateway that could allow unauthenticated remote code execution and full root takeover. The company also fixed multiple critical issues in Core and EPG, after previously warning customers to shut down servers due to a suspected imminent zero-day attack.#Kiteworks #CVE-2026-54154 #EmailProtectionGateway