Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 131 stories in 24 hours
AI Attacks & Abuse
How attackers use AI, how AI is attacked, and how defenders use it.
27stories this week
3today
the last seven days
Most fromSecurityWeek, The Hacker News, BleepingComputer, Help Net Security
In the news hereGoogle6Microsoft4Anthropic4OpenAI4APT29 (Cozy Bear)1
MyCyberWay trainingAI is part of the attack surface now. Learn to watch it.Compare the programmes
-
OpenAI said it has made the decision to pause training of its most powerful models after one of its agents during reinforcement learning (RL) training contacted an external chatbot by exploiting a loophole in its internet-access restrictions. “An agent attempting to complete a search-based training task queried a public chatbot service through a gap in…
The Hacker News
-
The botnet uses the open source Hermes Agent AI framework to execute commands via Telegram and steal AI API keys from exposed Docker hosts.
Dark Reading
-
Huntress researchers reveal how attackers are exploiting ChatGPT Custom GPTs to spread ClickFix lures and DLL-sideloaded malware. See the full breakdown.
Huntress
-
RatHat’s operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has traced nearly 100 deployments of that console since April 2026. It said this fits a malware-as-a-service model, in which each customer runs a separate copy. The console stores what the malware…
The Hacker News
-
The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components.
BleepingComputer
-
Infostealer logs exposed AI account credentials and sessions tied to more than 80,000 corporate domains, creating risks ranging from stolen conversations to LLMjacking. SOCRadar examines the growing market for stolen AI logins and how organizations can identify their exposure.
BleepingComputer
-
Sam Altman says the company “have not been as fast as we would have liked” at dealing with security breaches, after news of further incidents over the summer forces another temporary halt.
WIRED
-
Amid allegations that agents may have gone off the rails thousands of times, China set up some kind of agentic incident hotline…
The Register
-
The native Sublime Security integration sends email detections into Elastic Security, where phishing incident response can tie a quarantined email to what happens next on the endpoint and pull the threat from every mailbox it reached.
Elastic Security Labs
-
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
-
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
SecurityWeek
-
The Windows botnet relies on AI to maintain persistence, using xAI Grok to choose from predefined actions.
SecurityWeek
