Tag: cybersecurity
-
PortSwigger Adds AI Agent to Penetration Testing Portfolio
PortSwigger has made available a beta release of an artificial intelligence (AI) agent for its Burp Suite penetration testing tools. Katie Warren, product leader for Burp AI at PortSwigger, said Burp AT will make it simpler for cybersecurity teams to simulate attacks without necessarily requiring a lot of expertise. At the core of that capability..…
-
New York Pours $9M Into Water Cyber Defense Amid Attacks
New York Fast-Tracks Utilities Grants as Hackers Disrupt Water Systems Nationwide. New York is awarding more than $9 million in cybersecurity grants to water and wastewater systems statewide, fast-tracking the funding after a wave of cyberattacks disrupted utility operations across at least seven states and federal standards efforts remain stalled. First seen on govinfosecurity.com Jump…
-
18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users
Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) as part of a sophisticated, targeted software supply chain attack targeting Chinese-speaking environments.One of the packages in question is “lib-mtop,” an unscoped package with the same name as a private…
-
Huntress Makes RMM-Blocking Feature Free for All Customers as Attacks Surge 277%
Cybersecurity vendor Huntress has opened up a new application control capability to its entire customer base for free, as new data shows attacks abusing remote monitoring and management (RMM) tools rose sharply over the past year. The feature, called RMM Guard, is part of a broader product Huntress is building called Managed Endpoint Security Posture…
-
Hims Hers Shares Sensitive Data with Third Parties and the FTC Doesn’t Like It
The FTC accuses Hims Hers of sharing sensitive health data and using deceptive subscription practices, highlighting wider privacy and cybersecurity risks in telehealth. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/hims-hers-shares-sensitive-data-with-third-parties-and-the-ftc-doesnt-like-it/
-
Horizon3 hits $2 billion valuation with $250M Series E as AI threats escalate
Cybersecurity startup Horizon3 raised $250 million at a $2 billion valuation as companies want continuous, AI-powered security validation instead of annual pentesting. First seen on techcrunch.com Jump to article: techcrunch.com/2026/08/03/horizon3-hits-2-billion-valuation-with-250m-series-e-as-ai-threats-escalate/
-
CISA lays out new guidance for using open-source software
The US Cybersecurity and Infrastructure Security Agency (CISA) has published the Open Source Software: Security Principles and Practices guide, which provides federal agencies … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/03/cisa-oss-security-guidance/
-
30 days with Claude Mythos Preview: How Tenable adapted our security program, and why yours is next
Tags: ai, api, attack, business, control, cybersecurity, data, data-breach, endpoint, exploit, flaw, injection, LLM, remote-code-execution, risk, service, threat, tool, update, vulnerabilityTenable spent 30 days running frontier AI models against our own code. It didn’t just find bugs, it proved they’re real, with reproducible exploits. That fundamentally changes code security from ranking potential code defects to a much higher signal focused on the findings that matter. Read on to learn how it reshaped our security team’s…
-
Abnormal and Sendmarc: Integrated Cybersecurity
See how Abnormal and Sendmarc protect your inbox, your domain, and everyone who receives email on your company’s behalf. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/abnormal-and-sendmarc-integrated-cybersecurity/
-
Cybersecurity, Then & Now
Tags: cybersecuritySince 2006, Dark Reading has been at the forefront of covering cybersecurity. The more things change, the more they stay the same. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/cybersecurity-then-now
-
Weekly Cybersecurity Newsletter Top 50 Biggest Cybersecurity Stories of the Week Hugging Face, Iranian ICS Attacks, EY, Hyundai, AI Agent Breaches
Welcome to this week’s edition of the GBHackers cybersecurity newsletter, your weekly cybersecurity bulletin covering the 50 most important stories from July 27August 1, 2026. The week’s throughline was AI on both sides of the fight: an autonomous agent escaped its sandbox and breached Hugging Face, a DeepSeek agent drove autonomous attacks, and Google […]…
-
Unlock AI GRC Automation via Continuum Cybersecurity Audits 2026
In 2026, organizations face mounting pressure to integrate AI automation into governance, risk, and compliance (GRC) programs while maintaining rigorous cybersecurity audit standards. AI Automation in GRC is no longer experimental; it is a strategic necessity for CISOs and compliance officers seeking to reduce manual overhead, close control gaps, and achieve continuous compliance across frameworks”¦…
-
To Ban or Not Ban Chinese Open-Weight AI Models
Tags: ai, backdoor, china, control, cybersecurity, data, defense, finance, government, infrastructure, international, malicious, microsoft, military, network, nvidia, open-source, openai, regulation, risk, software, supply-chain, technology, usaShould the US ban American companies from using Chinese open-weight AI models? That is the ugly question. US officials have openly expressed concerns and a desire to implement regulations. The technology community has aggressively responded, with over 20 leading AI companies, including Microsoft, Nvidia, Meta, and Dell, urging legislators not to rush imposing restrictions on…
-
Von selektiven Checks zur umfassenden Analyse: Deutsche Telekom nutzt KI für Cybersecurity
Management Summary KI wird zum Skalierungshebel für Cybersecurity: Die Deutsche Telekom zeigt, wie sich etablierte Sicherheitsanalysen mit GPT-5.5 Cyber von punktuellen Prüfungen auf deutlich größere IT-Umgebungen ausweiten lassen. Bestehende Security-Verfahren bleiben maßgeblich: KI ersetzt weder Red Teams noch klassische Prüfprozesse, sondern erweitert deren Reichweite und entlastet Fachkräfte bei wiederkehrenden Analyseaufgaben. Zwei praxisnahe Einsatzfelder stehen im……
-
US CISA Urged to Order OT Security Improvements
Minnesota Water System Hacks Should Be Call to Action, Says OTCC. The U.S. Cybersecurity and Infrastructure Security Agency should order federal agencies to secure operational technology to head off hacks like those blamed on Iran, which targeted water utilities in Minnesota this week, a trade association representing OT manufacturers and security companies said. First seen…
-
Anthropic Says Claude Models Hacked 3 Organizations During Cyber Tests
Anthropic found Claude accessed systems at three real businesses after a testing error gave its AI models live internet access during cybersecurity evaluations. First seen on hackread.com Jump to article: hackread.com/anthropic-claude-models-hacked-organizations-cyber-tests/
-
CISA warns of spike in attacks on water systems as Minnesota incidents probed
The Cybersecurity and Infrastructure Security Agency said in a public alert on Thursday that facilities should “remove publicly exposed PLCs and other operational technology (OT) from the internet as soon as possible.” First seen on therecord.media Jump to article: therecord.media/cisa-warns-of-spike-in-water-system-attacks
-
HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm
Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka.According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted archive, which holds a Windows Shortcut (LNK). Executing the file triggers a multi-stage chain that First…
-
CISA warns of cyberattacks disrupting U.S. water utilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting internet-exposed programmable logic controllers (PLCs) in the water and wastewater systems sector. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-of-cyberattacks-disrupting-us-water-utilities/
-
5 Things To Know On Anthropic Claude Autonomous Hack
Anthropic has disclosed that Claude models gained unintended access to ‘real-world’ systems of three organizations as part of cybersecurity testing, raising further questions about whether stronger isolation is needed. First seen on crn.com Jump to article: www.crn.com/news/security/2026/5-things-to-know-on-anthropic-claude-autonomous-hack
-
AI-Speed Attacks and Critical Flaws Compress Defenders’ Response Window this Week of July 2026
Weekly summary of Cybersecurity Insider newsletters First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/weekly-roundup/ai-speed-attacks-and-critical-flaws-compress-defenders-response-window-this-week-of-july-2026/
-
Anthropic Says Claude Hacked Into 3 Organizations During Cybersecurity Tests
In a review triggered by OpenAI’s Hugging Face incident, Anthropic discovered three of its AI models had breached real-world organizations during third-party evaluations. First seen on wired.com Jump to article: www.wired.com/story/anthropic-says-claude-hacked-real-systems-during-cybersecurity-tests/
-
XRP Volatility Surges as Cybersecurity Threats and Market Changes Raise New Concerns
XRP volatility drives faster crypto trading as AI tools gain traction, while phishing, exchange attacks and automation risks test digital asset safeguards. First seen on hackread.com Jump to article: hackread.com/xrp-volatility-cybersecurity-threats-market-changes/
-
Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations
Anthropic on Thursday became the latest artificial intelligence (AI) company to reveal that three of its models, including Claude Opus 4.7, Mythos 5, and an unnamed research model, had breached three unnamed organizations during cybersecurity testing without its knowledge.The AI firm said the earliest incidents date back to April 2026, adding it made the discoveries…
-
Anthropic Finds Claude Breached Real Companies During Security Evaluations
Anthropic says a misconfigured test let Claude access three real organizations, prompting tighter AI evaluation and monitoring controls. Anthropic disclosed that Claude models had accessed the real production infrastructure of three separate organizations during cybersecurity evaluations that were supposed to run in isolated, fictional environments. The company found the incidents after reviewing 141,006 evaluation runs…
-
CISA Urges Water Utilities to Remove Publicly Exposed PLCs From the Internet
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert to the Water and Wastewater Systems (WWS) Sector due to a significant rise in cyber threat activity targeting internet-exposed programmable logic controllers (PLCs). Released on July 30, 2026, the advisory urges critical infrastructure owners, operators, and system integrators to immediately identify and…
-
AI agents are changing where cybersecurity seed funding lands
Founders pitching a cybersecurity seed round this summer are joining a line that keeps getting longer. Product Hunt launches hit their highest level since late 2023 last … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/31/ai-agents-cybersecurity-seed-funding/