Tag: cybersecurity
-
How AI anxieties dominated the summer’s big cybersecurity conference
From the CVE Program to autonomous hacks, everyone is worried about the technology’s next evolution. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/black-hat-ai-cve-reporters-notebook/829978/
-
The Role of Agentic AI in Cybersecurity
Agentic AI has moved from experimental research to live production environments at unprecedented speed, outpacing nearly every technology security leaders have encountered in recent history. Distinguishing themselves from standard chatbots that merely respond and pause, autonomous agents architect multi-step workflows,… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/the-role-of-agentic-ai-in-cybersecurity/
-
NeuroCyber granted charity status to expand support for neurodivergent talent in cybersecurity
NeuroCyber, the organisation dedicated to improving opportunities and career outcomes for neurodivergent individuals across the cybersecurity profession, has been granted charity status by the Charity Commission for England and Wales. This is a major milestone for NeuroCyber, enabling it to expand its work to create a more inclusive cybersecurity profession where neurodivergent people can access…
-
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline
Tags: authentication, cisa, cisco, citrix, cve, cybersecurity, exploit, flaw, fortinet, infrastructure, kev, update, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added three flaws, each impacting Cisco, Citrix, and Fortinet, to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the patches by September 12, 2026.The vulnerabilities are listed below – CVE-2026-20079 (CVSS score: 10.0) – An authentication First seen…
-
WatchGuard RCE flaw now exploited in ransomware attacks
Tags: attack, cisa, cybersecurity, exploit, firewall, flaw, infrastructure, ransomware, rce, remote-code-execution, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a critical WatchGuard Firebox firewall vulnerability, which it flagged as actively exploited in December. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-watchguard-rce-flaw-now-exploited-in-ransomware-attacks/
-
OpenAI Builds ‘Defense Factory’ as AI Agents Gain Ability to Chain Cyber Exploits
OpenAI has announced its plans for a >>Defense Factory,<< a cybersecurity operation that prioritizes agent-driven actions. This initiative is designed to continuously discover, validate, remediate, and verify vulnerabilities as AI systems develop the ability to conduct increasingly complex cyber operations. The initiative addresses growing concerns that long-running autonomous agents, especially those powered by widely accessible…
-
U.S. CISA adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog
Tags: adobe, cisa, cve, cybersecurity, exploit, flaw, infrastructure, kev, microsoft, vulnerability, windowsU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-75650 (CVSS score of 10.0) is an Adobe Commerce and Magento improper neutralization of special elements in a…
-
Anthropic Reveals Yet Another Cybersecurity Incident
Tags: cybersecurityAnthropic has found a fourth case of its model accessing third-party systems without authorization First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/anthropic-another-cybersecurity/
-
Innovator Coffee Black Hat Special: Which Security Assumptions Is AI Starting to Change?
Black Hat has always been one of the clearest windows into how cybersecurity is evolving. But the most useful signals do not always come from keynotes or product launches. This year, in a conversation with a CISO, a cybersecurity investor,… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/innovator-coffee-black-hat-special-which-security-assumptions-is-ai-starting-to-change/
-
Kevin Mandia joins the Amazon board with 30-plus years in cybersecurity
Amazon elected Kevin Mandia to its Board of Directors on September 8. Mandia founded Mandiant and served as its CEO before Google acquired the firm in September 2022, and he … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/10/kevin-mandia-joins-amazon-board/
-
Factor Accuses SecurityScorecard of Retaliation Campaign
Factor Complaint Alleges False IP Claims, Threats and Commercial Interference. Factor Cybersecurity sued SecurityScorecard over alleged business interference, claiming false IP accusations, retaliation and interference with employees, partners and investors cost Factor prospective business and delayed a funding round targeted at $25 million. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/factor-accuses-securityscorecard-retaliation-campaign-a-32785
-
CISA head says agency must change quickly to prevent the ‘worst that could happen’
CISA’s cybersecurity, infrastructure security and emergency communications divisions are among the priorities as the agency fills vacancies created at the beginning of the Trump administration, acting director Nick Andersen says. First seen on therecord.media Jump to article: therecord.media/cisa-hiring-nick-andersen-warning
-
Fake GTA6 ‘Leaked Download’ Caught Spreading RATs, Infostealer and Wiper Ransomware
Cybersecurity firm Huntress has uncovered a malware campaign that preys on excitement for Grand Theft Auto VI (GTA6), packaging remote access trojans, an infostealer, and destructive ransomware inside fake >>leaked<< copies of the hotly anticipated game. GTA6 is not due for release for another three months, but a wave of gameplay footage leaks and an…
-
US says Chinese firms extracted billions of tokens from frontier AI models
U.S. cybersecurity and intelligence agencies say that six Chinese AI companies conducted industrial-scale distillation attacks on American frontier AI models since at least late 2024. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/us-says-chinese-firms-extracted-billions-of-tokens-from-frontier-ai-models/
-
Don’t let AI distract from cybersecurity basics, officials and executives warn
Simple attacks remain far more consequential than anything AI is doing, government and industry leaders said. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-cybersecurity-basics-billington/829777/
-
OpenAI says GPT-6 Astra can find zero-days, but is also harder to monitor
OpenAI confirmed that GPT-6 Astra is the first model it has broadly deployed to reach the “Critical level” for cybersecurity capabilities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openai-says-gpt-6-astra-can-find-zero-days-but-is-also-harder-to-monitor/
-
Daily OT Security News: September 08, 2026
Daily OT Security News, September 08, 2026. Concise operational summaries of the latest OT/ICS cybersecurity developments. MikroTik patches actively exploited RouterOS attack chain MikroTik released fixes for six RouterOS vulnerabilities after CERT Poland confirmed two flaws, collectively dubbed MikroTrick,… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-08-2026-2/
-
BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams
Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves the way for malware deployment and tech support scams.The campaign, discovered by the DFIR Report in March 2026, has been codenamed BengalSEO. It has operated out of the Indian state of Rajasthan since at least 2015, driven by two…
-
PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution
Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser.”Requiring prior administrative or code execution access, its installer injects the extension directly into Chrome/Edge profiles, bypassing Web Store checks and user prompts by forging Chromium’s own Secure Preferences First seen on thehackernews.com…
-
Mate Security, Palo Alto Networks, and ServiceNow Join OpenAI’s First-Day Cyber Defense Signatories
The cybersecurity market is approaching a moment when artificial intelligence could alter the balance between attackers and defenders. As increasingly capable models become available, the question facing security leaders is no longer whether AI will influence cyber defense, but how… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/mate-security-palo-alto-networks-and-servicenow-join-openais-first-day-cyber-defense-signatories/
-
Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts
Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute a malicious Visual Basic Script (VBScript) payload to newly connected systems.According to Huntress, three unrelated incidents have been found to use diverse initial access methods, namely a Quick Assist tech-support scam, a phishing-delivered MSI installer, and a fake First seen on…
-
OpenAI Commits $1 Billion in Daybreak AI Cyber Tools to Protect Critical Infrastructure
OpenAI has announced a $1 billion global commitment to expanding access to its Daybreak AI cybersecurity platform for frontline defenders who protect critical infrastructure, public services, and under-resourced organizations. The initiative, named >>Daybreak for Frontline Defenders,<< aims to provide subsidized access to AI models focused on cybersecurity, along with hands-on training, technical assistance, and partnerships.…
-
OpenAI Confirms AI Agents Wrote to Multiple Internet Sites in ‘Wiki Incident’
OpenAI has acknowledged that its AI agents posted content on multiple internet sites during an event it has termed the “wiki incident.” The company characterizes this episode as a real-world example of model misalignment rather than a typical cybersecurity breach. In a statement shared on X, OpenAI emphasized that the incident highlights the need for…
-
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-interception capabilities.”The payloads are protected with javascript-obfuscator, using multiple techniques including RC4-protected strings, control-flow flattening, proxy functions, and operation wrappers,” Check Point Research said in a First seen on thehackernews.com Jump to article: thehackernews.com/2026/09/jsceal-malware-can-bypass-google.html
-
Weekly Cybersecurity Newsletter Top 50 Biggest Cybersecurity Stories of the Week
Welcome to this week’s edition of the GBHackers cybersecurity newsletter, your weekly cybersecurity bulletin covering the 50 most important stories from August 31 September 5, 2026. AI ran through the whole week: OpenAI’s GPT-6 Astra built working exploits, Anthropic shipped Claude Fable 5.1 and Mythos 5.1, Claude gained the ability to control computers, […] The…
-
CrowdStrike Launches SafeMind Agentic AI Cybersecurity System Built With NVIDIA Nemotron
Tags: ai, attack, crowdstrike, cyber, cybersecurity, defense, framework, mitigation, nvidia, technologyCrowdStrike has launched SafeMind, an AI-driven cybersecurity system developed using NVIDIA’s Nemotron models. This new technology is designed as an automated red-versus-blue defense loop within the Falcon platform. Announced at Fal.Con 2026, SafeMind merges security-specific models with operational frameworks to identify attack paths, implement defensive measures, and continuously assess whether these mitigations hold up against…
-
ISMG Editors: Cybersecurity’s Paper Problem Isn’t Dead
Also: AI Attacks Exploit Security Debt, Iran Targets US Critical Infrastructure. In this week’s panel, ISMG editors discussed sensitive mental health records left to rot in abandoned buildings, how mounting security debt could leave firms exposed to AI-powered attacks and how the escalating U.S.-Iran conflict is raising new concerns about attacks on critical infrastructure. First…
-
Your MikroTik Router May Already Be Compromised: Look for SSH User “-2”
MikroTik RouterOS SSH zero-day (MikroTrick chain) under active exploitation since Sept 2. Patch to 7.24.2, 7.23.5, or 6.49.21 immediately and check logs. Anyone running a MikroTik router with SSH exposed to the internet should treat it as compromised until proven otherwise. The popular cybersecurity expert Costin Raiu published a detailed technical breakdown of the active…
-
Daily OT Security News: September 06, 2026
Briefing for OT, ICS, IoT, and cyber-physical-security leaders: concise summaries of verified developments and recommended follow-up actions from the named sources below. CISA Scraps Six Free Cybersecurity Assessments for Critical Infrastructure Operators Cybersecurity Dive reports that CISA is ending six… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-06-2026/