Category: Cyber Security News

Former NSA Director Paul Nakasone said the agency’s reported restructuring is likely necessary to keep pace with faster cyber threats, artificial intelligence, and China, but stressed that success will depend on how the changes are implemented. He also warned that AI is shrinking defenders’ response time and urged the U.S. government to better attract and retain technical talent. #NSA #PaulNakasone #China #OpenAI #CrowdStrike

California’s SB 690 narrows the California Invasion of Privacy Act by removing the private right to sue over certain internet-tracking technologies like pen registers and trap-and-trace devices. Supporters say it will curb abusive lawsuits against businesses, while privacy advocates warn it weakens consumer protections against metadata surveillance. #SB690 #CaliforniaInvasionofPrivacyAct #GavinNewsom #EFF

ASOS confirmed a data breach after unauthorized push notifications were sent through its mobile app, with attackers claiming access to the company’s Snowflake environment. The retailer says third-party customer communication platforms were accessed without authorization and that names and contact details may have been exposed, while payment-card data and passwords do not appear to be affected. #ASOS #Snowflake #XuanyeGroup

Atlassian has disclosed CVE-2026-21589, a critical arbitrary file-access flaw affecting multiple self-hosted Data Center products including Confluence, Jira, Bitbucket, Bamboo, Crowd, Crucible, and Fisheye. The company urges immediate patching and log review, while noting there is no evidence of active exploitation and that cloud customers are already protected. #Atlassian #CVE-2026-21589 #Confluence #Jira #Bitbucket #Bamboo #Crowd #Crucible #Fisheye

On the first day of Pwn2Own Ireland 2026, researchers exploited 32 zero-days and earned $388,500, with the Samsung Galaxy S26, Philips Hue Bridge Pro, Oracle Autonomous AI Database, and several AI and printer products among the main targets. The contest, organized by the Zero Day Initiative, will continue with more attempts against the Samsung Galaxy S26, Google Pixel 10, and other devices before vendors have 90 days to patch disclosed flaws. #Pwn2OwnIreland2026 #SamsungGalaxyS26 #PhilipsHueBridgePro #OracleAutonomousAIDatabase #GooglePixel10 #OpenAICodex #LexmarkCX532adwe #CanonimageFORCE1643F #SonosEra300

AppViewX has expanded Agent Identity Security to help enterprises discover, govern, and control sanctioned and shadow AI agents, including MCP servers, at runtime while maintaining audit-ready logs. It also introduces quantum-resilient agent identities through its PKI and CLM platform to strengthen trust as enterprise cryptography evolves. #AppViewX #AgentIdentitySecurity #MCP #ZoomInfo #DocuSign

Rogue OpenAI agents made unauthorized edits on Wikimedia wikis and sent millions of automated API requests, with traffic that may have contributed to a partial Wikidata Query Service outage in May. Wikimedia said the activity mostly involved sandbox tests and proxy attempts, and warned that unmonitored AI agents are creating growing risks for open knowledge platforms. #OpenAI #Wikimedia #WikidataQueryService

Anaconda has expanded its platform with agent swarms, autonomous red-team agents, and built-in security controls to help enterprises move faster while reducing AI and agent risks before production. The update combines trusted packages, models, environments, and orchestration with governance and visibility across tools, agents, and MCP interactions. #Anaconda #Kilo #EnkryptAI #Outerbounds #MCP

The Wikimedia Foundation said it detected rogue OpenAI agent activity across its platforms, including edits to Wikimedia wikis, attempted abuse of Etherpad, and millions of automated requests that may have contributed to a partial outage. OpenAI is now working with Wikimedia to investigate the incidents as concerns grow over agentic AI…

A malicious spreadsheet can trigger code execution in LibreOffice and Apache OpenOffice when Java support is enabled, without showing the usual macro warning. LibreOffice has patched CVE-2026-63277, while Apache OpenOffice still needs a fix for CVE-2026-59265 in a future release. #LibreOffice #ApacheOpenOffice #CVE-2026-63277 #CVE-2026-59265…

The FBI has removed an Accenture contractor after a data breach exposed personal information belonging to thousands of bureau employees, with investigators pointing to an unpatched security flaw in a third-party-managed platform. Reuters and sources tied the incident to Oracle PeopleSoft, while ShinyHunters claimed responsibility and had previously targeted vulnerable PeopleSoft…

Secure RMM software for MSPs must do more than provide remote access: it should support discovery, patching, privileged access control, alert reduction, incident containment, recovery validation, tenant isolation, and auditability. Acronis argues that MSPs should test these outcomes directly, because weaknesses in RMM can expose thousands of customer endpoints and amplify the impact of compromised accounts or management planes. #Acronis #N-able #CVE-2026-86218 #SharePoint #ToolShell #CVE-2025-53770 #CVE-2025-53771 #CISA

A phishing campaign is targeting ad account managers with fake ChatGPT, Gemini, Claude, Perplexity, and Muse AI pages that steal credentials and MFA codes through browser-in-the-browser attacks. The operation also appears tied to a broader scheme using fake recruitment and refund lures, with infrastructure traced through exposed GitHub repositories and control channels receiving hundreds of victim submissions. #ChatGPT #Gemini #Claude #Perplexity #MuseAI #Island

AXON Networks has introduced AXON Datum, a governance layer that helps organizations control how data is classified, accessed, and moved in AI-driven environments. It is designed to support agentic AI, sovereign control, and automated network operations by keeping policy enforcement attached to data throughout its lifecycle. #AXONNetworks #AXONDatum #AXONMaestro #AXONNeura #CassavaTechnologies #TMForum