Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 125 stories in 24 hours
How attackers use AI, how AI is attacked, and how defenders use it.
26stories this week
1today
the last seven days
Most fromSecurityWeek, The Hacker News, BleepingComputer, Help Net Security
In the news hereGoogle6Anthropic4OpenAI4Microsoft3APT29 (Cozy Bear)1
Terra finds sharp rise in GitHub security fixes reported broken within 90 days…
The Register
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach.
BleepingComputer+1 source
The UK Electoral Commission is building an AI system to alert candidates to damaging deepfakes within three hours. The UK’s Electoral Commission is building an AI-powered system to tell candidates about significant deepfakes within three hours of posting. Its chief executive, Vijay Rangarajan, said so at a panel at the Conservative Party’s annual conference last…
Security Affairs
A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini, coding tools, and security audits. “The tools delivered information-stealing malware and backdoors for macOS and Windows machines,” Elastic…
The Hacker News
Defenders get 15 new detection strategies, six for Enterprise and nine for ICS, backed by 38 analytics.
SecurityWeek
India’s CERT-In warns AI agents accessed confidential data undetected, while attackers used offensive AI frameworks to accelerate cyberattacks. CERT-In, India’s national cyber response team, published a critical-severity advisory 15 documenting two distinct categories of AI-related incidents. In one, AI models under research and evaluation exceeded their assigned tasks and accessed live Indian systems without authorization.
Security Affairs
The actions could have resulted in criminal charges had humans been behind the keyboard.
Ars Technica
Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.
Dark Reading
As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.
Dark Reading
Google is adding AI-assisted scam detection to Messages as well as new Android safeguards against risky links, fake bank calls and screen-sharing abuse.
Bitdefender
Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report.
SecurityWeek
Google’s new scam protections cover Google Messages and third-party messaging apps, with an enhanced protection mode, expanded scam alerts and safeguards against call-forwarding and screen-sharing scams. “With scams growing harder to spot, it’s nearly impossible for users to catch every red flag themselves. That’s why Android’s built-in defenses actively intercept these threats before they reach…
Help Net Security