Latest news
-
AI Security via BleepingComputer
Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits
The Wikimedia Foundation says rogue OpenAI agents made unauthorized Wikipedia edits and may have been partially responsible for a May outage.
-
Breaches via CyberScoop
Here’s how experts think CISA should tell agencies to protect OT
A coalition of cyber firms and critical infrastructure operators on Tuesday spelled out its views on the tasks that the Cybersecurity and Infrastructure Security Agency…
-
AI Security via The Hacker News
Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies
The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessful efforts to…
-
Breaches via Malwarebytes Labs
Domino’s customers targeted in credential stuffing attacks
Domino’s Pizza customers tell us they have received emails saying they account has been accessed by a third party. Domino’s says its internal systems weren’t breached…
-
Threat Intel via Hornetsecurity
EvilTokens Device Code Phishing: How It Works and How to Stop It
EvilTokens is a criminal of online service which tricks people into thinking they are logging into a real Microsoft website. In reality, this scam allows attackers to…
-
Vulnerabilities via Schneier on Security
Possible Vulnerability in Apple’s Automatic Reboot
404Media is reporting (alternate link) that a cyber-weapons arms manufacturer is exploiting a vulnerability in iOS to bypass its automatic reboot security feature. This…
-
AI Security via The Hacker News
Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers
In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol delivered…
-
Threat Intel via SecurityWeek
Cybersecurity M&A Roundup: 39 Deals Announced in September 2026
Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind.
- Advertisement
-
Vulnerabilities via Help Net Security
Dell System Update flaw allows attackers to gain root privileges (CVE-2026-86360)
Dell is urging customers to patch a vulnerability (CVE-2026-86360) in Dell System Update (DSU) that could allow an unauthenticated remote attacker to execute arbitrary…
-
Threat Intel via SecurityWeek
Long-Running NPM Malware Campaign Accumulates 40,000 Downloads
Since August 2023, attackers have published eight malicious packages as part of the MALFEX supply chain campaign.
-
Vulnerabilities via HIPAA Journal
Citrix Patches Third Actively Exploited NetScaler Zero Day
Citrix has released another patch for a zero day vulnerability under active exploitation, just a few days after patches were released for two other actively exploited…
-
Vulnerabilities via Ubuntu Security
USN-8874-1: sg3_utils vulnerability
Shaomin Chen discovered that sg3_utils did not properly sanitize device identification data. An attacker could possibly use this issue to execute arbitrary commands.
-
Vulnerabilities via Ubuntu Security
USN-8875-1: Linux kernel vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer…
-
Vulnerabilities via Ubuntu Security
USN-8879-1: Linux kernel (Oracle) vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer…
-
Vulnerabilities via Ubuntu Security
USN-8878-1: Linux kernel (GCP) vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer…
-
Vulnerabilities via Ubuntu Security
USN-8877-1: Linux kernel (GCP) vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer…
-
Threat Intel via Help Net Security
Ontinue extends ION MXDR with managed dark web monitoring
Ontinue has announced the launch of ION for Dark Web Monitoring (DWM), a new managed add-on service that extends ION MXDR to continuously identify exposed credentials…
-
Vulnerabilities via Ubuntu Security
USN-8876-1: Linux kernel (Azure CVM) vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer…
-
Threat Intel via Palo Alto Networks Unit 42
Blinder Tunnel Campaign Targets Iraqi Infrastructure
Analysis of Blinder Tunnel, an Iran-nexus campaign using fake Dubai Airports recruitment lures and GitHub C2 malware to target critical infrastructure.
-
AI Security via Help Net Security
Transcend Rails brings policy enforcement and spending controls to AI agents
Transcend has launched Transcend Rails, a new category of agent management that goes beyond identity and access control to govern what an agent does. Every enterprise…