Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 125 stories in 24 hours
AI Attacks & Abuse
How attackers use AI, how AI is attacked, and how defenders use it.
26stories this week
1today
the last seven days
Most fromSecurityWeek, The Hacker News, BleepingComputer, Help Net Security
In the news hereGoogle6Anthropic4OpenAI4Microsoft3APT29 (Cozy Bear)1
MyCyberWay trainingAI is part of the attack surface now. Learn to watch it.Compare the programmes
-
Fresh research suggests recent panic over AI-generated malware may be overblown. Last month Anthropic detailed how Russia-linked cyberespionage group Midnight Blizzard used Claude to rebuild malware each time security tools flagged its backdoor as malign. “We observed GTG-20006 operate through customized AI-driven workflows that automated much of their operations from development, infrastructure acquisition, phishing, persistence…
CSO Online UK
-
A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for the scans. Bitsight’s threat intelligence team tracked the shift across thousands of posts on 16 underground forums from February through August 2026. Over that window, mentions…
Help Net Security
-
Most attempts were pranks, but some could fool unwary AI agents…
The Register
-
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices.
BleepingComputer
-
We applied AWS Security Agent (now part of AWS Continuum), our autonomous penetration-testing agent, to 37 real, recently disclosed Common Vulnerabilities and Exposures (CVEs), each packaged as a live, containerized target with a flag hidden at the vulnerability’s intended sink. Starting from an unauthenticated or low-privilege position (an endpoint URL and a one-line hint, no…
AWS Security Blog
-
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of 2026. The campaigns also increase operational pressure on MSSPs serving US businesses, which accounted for 16% of country-attributed targets. Similar attacks…
The Hacker News
-
Never making type errors does not mean never making errors…
The Register
-
Most companies use AI agents to ship products faster or speed up workflows. Apate.ai sends them undercover to get scammed.
TechCrunch
-
A phishing campaign is using AI-themed lures to target employees who operate advertising accounts, according to a new report from Island. The campaign is launched from a phishing platform that poses as a portfolio of AI advertising tools, using branding from Gemini, Claude, ChatGPT, Perplexity, and Muse. The platform’s operator added a fake Muse Ads…
KnowBe4
-
Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structured drill shows security teams exactly where verification breaks down, while nothing is at stake. The call comes in at 4:40 on a Friday. It’s the CFO, or it sounds exactly like her, asking the controller…
The Hacker News
-
The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part. TL;DR During an authorized assessment, an AI pentesting agent found a critical authentication bypass on a major insurer’s production website, on its own. One login request let the user choose where…
The Hacker News
-
AI can speed up attacks, with faster reconnaisance, while defenders should use AI to accelerate existing SOC work, but not chase after full autonomy…
Computer Weekly
