> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several critical developments. Scammers are leveraging replies to unsolicited texts to confirm active phone numbers, increasing the risk of fraud. A significant cyberattack utilized 51 AI agents to compromise 429 WordPress sites and steal sensitive Ukrainian data in just over a minute. Additionally, low-cost Android phones are being shipped with pre-installed malware, turning them into tools for ad fraud and other malicious activities. Mozilla has launched Firefox Enterprise, offering enhanced management tools for organizations, while VMware's patch management concerns indicate a growing need for better security tools. Lastly, Booz Allen's AI models successfully navigated all defined attack objectives in a controlled test, showcasing the evolving capabilities of AI in cybersecurity.
|
// AI-powered summary generated at 08:01
A cyberattack targeting a French government website used to manage identity documents and driver’s licenses may have exposed users’ personal data, the Interior Ministry said.
In March 2026, the CyberStrikeAI campaign used fully autonomous AI engines to breach over 600 FortiGate firewalls across 55 countries. Let that sink in. 600 firewalls, 55 countries. This is the age of AI. The attack speed is impossible to match with human defenders. The only defense against AI-power...
Backups protect data, but don't keep your business running during downtime. Datto shows why BCDR is essential to keep operations running during ransomware and outages. [...]
The decentralized social network said the incident began on April 15, when the company received reports of intermittent outages affecting the app.
Hackers breached systems of Vercel, a popular frontend cloud platform provider and Next.js maintainer, in an attack that's been traced back to the compromise earlier this year of a Context.ai employee's system. The threat group ShinyHunters is asking for $2 million for the data stolen in yet anothe...
Anthropic is keeping Mythos out of public hands, with limited access for select organizations over fears it could be misused.
It was discovered that RapidJSON did not properly protect against integer
overflows in certain instances when parsing JSON text. A remote attacker
could possibly use this issue to craft a malicious JSON file, that when
read by RapidJSON, would lead to an elevation of privilege, resulting in
the pote...
Hackers have targeted CVE-2023-33538 flaw in old TP-Link routers for a year, but no successful exploitation has been seen so far. Hackers have been trying for over a year to exploit a serious flaw, tracked as CVE-2023-33538 (CVSS score of 8.8), in outdated TP-Link routers, but so far without success...
Monday’s recap shows the same pattern in different places. A third-party tool becomes a way in, then leads to internal access. A trusted download path is briefly swapped to deliver malware. Browser extensions act normally while pulling data and running code. Even update channels are used to push pay...
A British man, believed to be the leader of the Scattered Spider cybercrime collective, has pleaded guilty in the United States to charges of wire fraud and aggravated identity theft. [...]
Two weeks ago, a suspected North Korean threat actor slipped malicious code into a package within Axios, a widely used JavaScript library. The immediate concern was the blast radius: roughly 100 million weekly downloads spanning enterprises, startups, and government systems. But beyond the sheer sca...
Out-of-band or out of control? Microsoft has pushed out an out-of-band update to address the restart loop that hit some Windows Server devices after its April update.…
Those seeking contracts with government agencies must meet many requirements and guidelines regarding cybersecurity. Each entity has its own, including the Department of Defense (DoD). Introduced in 2024 and being implemented in phases, Cybersecurity Maturity Model Certification 2.0 (CMMC) sets new...
For anyone working with or hoping to work with the Department of Defense (DoD), cybersecurity compliance is no longer optional. It’s now a condition of doing business. The DoD created the Cybersecurity Maturity Model Certification (CMMC) to solve a growing problem within the defense supply chain: in...
FortiGuard Labs has identified a Mirai-based Nexcorium campaign actively exploiting CVE-2024-3721 in TBK DVR devices
Agents Week 2026 is a wrap. Let’s take a look at everything we announced, from compute and security to the agent toolbox, platform tools, and the emerging agentic web. Everything we shipped for the agentic cloud.
We built our internal AI engineering stack on the same products we ship. That means 20 million requests routed through AI Gateway, 241 billion tokens processed, and inference running on Workers AI, serving more than 3,683 internal users. Here's how we did it.
Attackers are increasingly exploiting enterprise collaboration platforms such as Microsoft Teams to gain initial access, impersonating IT helpdesk staff and persuading employees to grant remote control, according to new research from Microsoft.
In a blog post, Microsoft des...
Learn about how we built a CI-native AI code reviewer using OpenCode that helps our engineers ship better, safer code.
Tyler Buchanan admitted in court to hacking into various companies, defrauding them, and stealing cryptocurrency from multiple individuals.
The post British Scattered Spider Hacker Pleads Guilty in the US appeared first on SecurityWeek.