Featured

Anthropic Flags AI Agent Liability Risks as OpenAI Faces Hacking Lawsuit

Anthropic Flags AI Agent Liability Risks as OpenAI Faces Hacking Lawsuit 2026-09-30 at 14:19 By Eduard Kovacs Attacks by autonomous AI agents are moving out of the lab and into the courtroom, raising unsettled questions about who is liable for what agents do. The post Anthropic Flags AI Agent Liability Risks as OpenAI Faces Hacking […]

Anthropic Flags AI Agent Liability Risks as OpenAI Faces Hacking Lawsuit Read More »

ShinyHunters Defiant After FBI Calls on Members to Come Forward

ShinyHunters Defiant After FBI Calls on Members to Come Forward 2026-09-30 at 13:20 By Ionut Arghire In the wake of a suspected leader’s arrest, ShinyHunters says it never intended to publish data stolen from the FBI. The post ShinyHunters Defiant After FBI Calls on Members to Come Forward appeared first on SecurityWeek. This article is […]

ShinyHunters Defiant After FBI Calls on Members to Come Forward Read More »

Trump Says Top Tech Firms Have Signed Accord to ‘Self-Police’ AI Development

Trump Says Top Tech Firms Have Signed Accord to ‘Self-Police’ AI Development 2026-09-30 at 04:48 By Associated Press The accord opened the door to future regulation but focused on four voluntary steps for the companies to take. The post Trump Says Top Tech Firms Have Signed Accord to ‘Self-Police’ AI Development appeared first on SecurityWeek. […]

Trump Says Top Tech Firms Have Signed Accord to ‘Self-Police’ AI Development Read More »

Pentagon Personnel Agency Data Breach Impacts 3 Million People

Pentagon Personnel Agency Data Breach Impacts 3 Million People 2026-09-29 at 15:25 By Eduard Kovacs The data breach affects the Defense Manpower Data Center (DMDC), which maintains personnel records for the Department of Defense. The post Pentagon Personnel Agency Data Breach Impacts 3 Million People appeared first on SecurityWeek. This article is an excerpt from […]

Pentagon Personnel Agency Data Breach Impacts 3 Million People Read More »

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’ 

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’  2026-09-29 at 09:18 By Eduard Kovacs Apple has released iOS and macOS updates to patch the zero-day vulnerability tracked as CVE-2026-86950. The post Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’  Read More »

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug 2026-09-28 at 10:29 By Eduard Kovacs Citrix has released patches for the critical NetScaler vulnerabilities tracked as CVE-2026-88771 and CVE-2026-88772. The post Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug Read More »

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks 2026-09-27 at 12:23 By Eduard Kovacs CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28. The post Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks Read More »

China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks

China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks 2026-09-26 at 21:09 By Associated Press The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents. The post China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks appeared first […]

China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks Read More »

Windows, Linux, Android File Notification Systems Leak User Activity

Windows, Linux, Android File Notification Systems Leak User Activity 2026-09-25 at 13:53 By Eduard Kovacs Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events. The post Windows, Linux, Android File Notification Systems Leak User Activity appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Windows, Linux, Android File Notification Systems Leak User Activity Read More »

Roundcube Webmail Vulnerability in Attackers’ Crosshairs

Roundcube Webmail Vulnerability in Attackers’ Crosshairs 2026-09-25 at 09:57 By Ionut Arghire Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication. The post Roundcube Webmail Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Roundcube Webmail Vulnerability in Attackers’ Crosshairs Read More »

OpenAI Agents Probed Websites for Vulnerabilities While Fetching Public Data

OpenAI Agents Probed Websites for Vulnerabilities While Fetching Public Data 2026-09-24 at 17:43 By Eduard Kovacs Australia disclosed that an OpenAI agent gained unauthorized access to non-public government information. The post OpenAI Agents Probed Websites for Vulnerabilities While Fetching Public Data appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

OpenAI Agents Probed Websites for Vulnerabilities While Fetching Public Data Read More »

Critical WordPress Vulnerability Exploited Immediately After Disclosure

Critical WordPress Vulnerability Exploited Immediately After Disclosure 2026-09-24 at 10:12 By Ionut Arghire Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code. The post Critical WordPress Vulnerability Exploited Immediately After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical WordPress Vulnerability Exploited Immediately After Disclosure Read More »

A Look at AI Doomsday Scenarios That Researchers Say Could Put Humanity at Risk

A Look at AI Doomsday Scenarios That Researchers Say Could Put Humanity at Risk 2026-09-23 at 13:20 By Associated Press Debates over the plausibility of these doomsday scenarios have heated up since several executives endorsed slowing the technology’s development for safety reasons. The post A Look at AI Doomsday Scenarios That Researchers Say Could Put […]

A Look at AI Doomsday Scenarios That Researchers Say Could Put Humanity at Risk Read More »

ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report

ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report 2026-09-23 at 10:13 By Eduard Kovacs The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information.  The post ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report Read More »

Check Point Patches Exploited Management Server Zero-Day

Check Point Patches Exploited Management Server Zero-Day 2026-09-23 at 09:14 By Ionut Arghire The critical-severity flaw could allow unauthenticated attackers to upload and execute arbitrary scripts. The post Check Point Patches Exploited Management Server Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Check Point Patches Exploited Management Server Zero-Day Read More »

Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity

Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity 2026-09-22 at 16:26 By Eduard Kovacs Abdelhamid Naceri, a former Microsoft Germany employee, is the exploit leaker Nightmare Eclipse, aka Chaotic Eclipse.  The post Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity Read More »

Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme

Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme 2026-09-22 at 11:37 By Eduard Kovacs The US, Japan, Germany and Australia have published a joint report detailing the scope of North Korea’s WaterPlum campaign. The post Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme […]

Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme Read More »

Google Confirms Gemini AI Breached Three Firms

Google Confirms Gemini AI Breached Three Firms 2026-09-21 at 10:20 By Eduard Kovacs Google is the latest AI giant to confirm that its models escaped a testing environment and hacked real companies. The post Google Confirms Gemini AI Breached Three Firms appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Confirms Gemini AI Breached Three Firms Read More »

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products 2026-09-18 at 13:57 By Eduard Kovacs Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority. The post Microsoft Patches 18 Vulnerabilities in AI, Cloud Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products Read More »

Brevo Supply Chain Attack Injects Malware Into 100,000 Websites

Brevo Supply Chain Attack Injects Malware Into 100,000 Websites 2026-09-18 at 12:46 By Ionut Arghire Hackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts. The post Brevo Supply Chain Attack Injects Malware Into 100,000 Websites appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Brevo Supply Chain Attack Injects Malware Into 100,000 Websites Read More »

Scroll to Top