Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 131 stories in 24 hours
AI & Emerging Technology
👉 AI misuse, automation, deepfakes
77stories this week
11today
the last seven days
Most fromHelp Net Security, SecurityWeek, CSO Online UK, The Hacker News
In the news hereOpenAI17Microsoft9Google9Anthropic8APT29 (Cozy Bear)1
MyCyberWay trainingAI is part of the attack surface now. Learn to watch it.Compare the programmes
-
RatHat’s operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has traced nearly 100 deployments of that console since April 2026. It said this fits a malware-as-a-service model, in which each customer runs a separate copy. The console stores what the malware…
The Hacker News
-
The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components.
BleepingComputer
-
The “agentic threat actor” may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.
Dark Reading
-
Security vetting tools and processes weren’t designed with obscure AI services in mind, according to TrendAI.
Cybersecurity Dive
-
Infostealer logs exposed AI account credentials and sessions tied to more than 80,000 corporate domains, creating risks ranging from stolen conversations to LLMjacking. SOCRadar examines the growing market for stolen AI logins and how organizations can identify their exposure.
BleepingComputer
-
Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that’s targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. “The implant installs the framework unchanged, then overwrites its SOUL.md persona file,” ThreatDown said. “The 39-line prompt directs it to execute tasks received through…
The Hacker News
-
Sam Altman says the company “have not been as fast as we would have liked” at dealing with security breaches, after news of further incidents over the summer forces another temporary halt.
WIRED
-
AI agents are crossing an important threshold. They are moving from assistants that respond to us to autonomous systems that reason, plan, and act on our behalf. They can write and execute …
Palo Alto Networks
-
The concept of an AI kill switch – a means to terminate out-of-control agents – sounds dramatic, but security leaders are now starting to talk openly and pragmatically about why they are needed and how to use them…
Computer Weekly
-
Amid allegations that agents may have gone off the rails thousands of times, China set up some kind of agentic incident hotline…
The Register
-
The native Sublime Security integration sends email detections into Elastic Security, where phishing incident response can tie a quarantined email to what happens next on the endpoint and pull the threat from every mailbox it reached.
Elastic Security Labs
-
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
SecurityWeek
