Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 122 stories in 24 hours
AI Attacks & Abuse
How attackers use AI, how AI is attacked, and how defenders use it.
27stories this week
3today
the last seven days
Most fromSecurityWeek, The Hacker News, BleepingComputer, Help Net Security
In the news hereGoogle6Microsoft4Anthropic4OpenAI4APT29 (Cozy Bear)1
MyCyberWay trainingAI is part of the attack surface now. Learn to watch it.Compare the programmes
-
Fifteen years after coining the framework, John Kindervag insists zero trust still works in the AI era—if you get the implementation right.
SecurityWeek
-
Your invite to a fake AI policy advisory committee has strings attached…
The Register
-
The China-linked espionage attacks were designed to gain insight into the country’s AI policy and regulatory environment.
Cybersecurity Dive
-
An AI shortcut can send confidential work data beyond your company’s control. Here’s how to get the benefits without taking unnecessary risks.
Malwarebytes
-
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
SecurityWeek
-
An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system. “Used together, [the two flaws] allowed the attackers to hijack sessions, run code remotely and escalate privileges from the Zammad user to root, in seconds,…
Help Net Security
-
The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root.
SecurityWeek
-
Attackers exploited a flaw found by an AI research agent within four days of its public disclosure, and they are exploiting more vulnerabilities overall, according to new research by Google Threat Intelligence Group (GTIG). The researchers examined vulnerability disclosure and exploitation data from January 2025 to August 2026. Disclosures doubled, exploitation stays rare Monthly CVE…
Help Net Security
-
The company said individuals associated with Chinese company MoonshotAI were behind parts of the attack, but did not offer hard evidence for the claim.
CyberScoop
-
Irony alert: OpenAI whines that Chinese model stole its special IP that it stole from everybody else
US model makers can train on web data – but distilling theirs is a ‘national security risk’
The Register
-
Two weeks back I presented at BlueHat Asia 2026 about my research on Microsoft’s Copilot in SSMS, the SQL Server Management Studio. This post is a write up about the talk, which covered CVE-2026-65669, a SQL Server Elevation of Privilege Vulnerability rated critical by Microsoft. So, make sure your installations are up-to-date. The slides of…
Embrace The Red
-
The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system.
BleepingComputer
