Category: Cyber Security News

Researchers from VUSec, Vrije Universiteit Amsterdam, and Scuola Superiore Sant’Anna disclosed Branch Target Reuse (BTR), a new Spectre v2 variant that affects Intel, AMD, and Arm CPUs. The attack can abuse JIT compilers in kernels, browsers, and runtimes to leak sensitive memory data, including the root password hash, with mitigations left…

DARPA selected Xint to use autonomous AI application security for deep analysis of messaging apps used across the Department of War, aiming to protect communications from external and foreign eavesdropping. The project builds on Xint’s AIxCC success and combines source-code review, binary reverse engineering, vulnerability triage, and patch generation for both…

OpenAI CEO Sam Altman unveiled new “Dots” AI agents at the company’s developer conference, highlighting always-on task automation and fresh product updates. The announcements came as OpenAI delayed another model over internal security concerns, even as Altman avoided addressing those risks on stage. #OpenAI #SamAltman #Dots #GPT-6.1Sol…

LastPass has expanded Business Max with AI Monitoring & Protect and Web Monitoring & Protect to help organizations discover, govern, and secure employee use of AI tools, SaaS apps, and websites from its browser-native extension. The new capabilities add visibility, data-sharing warnings, category-based controls, and malicious site blocking to reduce exposure to risky AI use and web-based threats. #LastPass #BusinessMax #AIMonitoring #WebMonitoring

A widespread wave of exploitation is targeting vulnerable, internet-exposed Citrix NetScaler ADC and Gateway deployments after a proof-of-concept for CVE-2026-88771 was published. Researchers and vendors say attackers are using opportunistic scanning, log poisoning, and webshell deployment, with more than 100 victim organizations already being tracked. #Citrix #NetScalerADC #NetScalerGateway #CVE-2026-88771 #CVE-2026-88772

Authorities in the Netherlands arrested a 24-year-old man in Amsterdam accused of involvement in ShinyHunters, a prolific cybercrime group linked to major extortion campaigns and the recent attack on the FBI. The case marks a significant law-enforcement development as investigators continue to pursue members tied to more than 140 breaches and at least $70 million in extortion payments. #ShinyHunters #FBI #PepjinvanderStap

A Vietnamese national, Trung Nguyen Van, was charged with money laundering for allegedly helping move more than $16 million in cryptocurrency from a pig butchering scam that targeted a victim through a fake investment platform called Triangle. Court documents say his wallets received over $53 million in illicit crypto tied to wire fraud schemes, while U.S. authorities continue to warn that pig butchering scams are driving massive losses nationwide. #TrungNguyenVan #Triangle #FBI #ScamCenterStrikeForce

Identity governance alone is no longer enough to defend modern enterprises, as attackers exploit cloud apps, external accounts, and increasingly sophisticated phishing and AI-driven attacks. tenfold combines identity governance, data access governance, and real-time event auditing to help organizations detect suspicious identity activity and respond faster. #tenfold #Windows #ActiveDirectory #EntraID

The Dutch Institute for Vulnerability Disclosure (DIVD) said it was hit by a loud, messy AI-driven attack that appears to have used an autonomous agent after exploiting an undisclosed technical vulnerability. The investigation is still ongoing, with DIVD notifying authorities and planning to share more details later while warning other potential victims. #DIVD #NCSC #AutoriteitPersoonsgegevens

Reco has raised $55 million in a strategic funding round led by AT&T Ventures, bringing its total funding to $140 million. The company helps organizations visualize and control AI agents’ identities, permissions, data access, and risky integrations across platforms like OpenAI, Anthropic, Microsoft Copilot, Salesforce, ServiceNow, and Workday. #Reco #AT&TVentures #OpenAI…

RemoteThreat has emerged from stealth with $7 million in pre-seed funding to launch an offensive operations platform for enterprise and critical infrastructure red teams, US government mission teams, and vetted defense partners. Built by former IBM X-Force red team leaders Chris Thompson and Shawn Jones, the platform combines mission planning, C2,…

Kiteworks resumed normal operations after a precautionary weekend shutdown triggered by credible federal threat intelligence, during which customers were asked to take production systems offline. The company also identified and patched a previously unknown critical flaw in Advanced Forms, with no signs of exploitation, while noting its broader file transfer and encryption products were unaffected. #Kiteworks #AdvancedForms #Mandiant #Accellion

Cyberattacks are becoming more automated, persistent, and difficult to stop, with AI, supply-chain weaknesses, quantum risk, and geopolitical attacks all raising the stakes for organizations. Building resilience now means using AI defenses, tightening third-party oversight, planning for post-quantum cryptography, and preparing for nation-state threats before they disrupt critical operations. #Skynet #SingaporePrimeMinister…

Rig Security has emerged from stealth with $12 million in seed funding to secure AI and non-human identities in the agentic era. Its platform uses RICE and Bifrost to distinguish legitimate user actions from rogue AI agent activity without disrupting the underlying human account, and it is already in production at…