> TODAY'S SUMMARY (3 articles)
Today's cybersecurity news highlights significant threats involving GitHub and AI. Attackers compromised 42 GitHub repositories by utilizing payloads too large for standard search mechanisms, indicating a trend in exploiting file size limitations to evade detection. Additionally, a new offensive AI agent dubbed 'Skynet' has emerged, capable of hijacking exposed AI models online to facilitate cyberattacks. This development underscores the growing intersection of AI and cybercrime, raising concerns about the security of machine learning systems. Organizations must enhance their defenses against such evolving threats.
|
// AI-powered summary generated at 04:00
Altman made a slew of product announcements and updates, including the company’s new agents, called Dots.
The post OpenAI CEO Announces New AI Agent and Avoids Mention of Security Concerns at Developer Conference appeared first on SecurityWeek.
The FBI is warning members of the ShinyHunters extortion group to turn themselves in after Dutch police arrested a man the bureau described as one of the group's alleged leaders. [...]
Microsoft says the cyberespionage campaign has hit U.S. and U.K. targets, relying on sheer volume and requiring only a single victim interaction.
The post Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond appeared first on CyberScoop.
The artificial intelligence giant acknowledged it botched its response to the incidents and should have done more to promptly notify and work with the Australian government in the days after it discovered the breaches.
Federal cops have 'a very particular set of skills'
Sean Cairncross said CEOs need to be cognizant of how it’s being used, however.
The post US is looking to weave AI into critical infrastructure for cybersecurity, national cyber director says appeared first on CyberScoop.
Several security issues were fixed in OpenSSL.
A nonprofit in California is doing what Hugging Face has not—attempting to hold OpenAI legally accountable for the actions of its agents.
Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and tunneling malware, gain root access, steal credentials, and spread into internal networks. [...]
It was discovered that OpenSSL incorrectly handled certain certificate
revocation list distribution point names. An attacker could possibly use
this issue to cause OpenSSL to consume excessive memory, resulting in a
denial of service. (CVE-2026-35189)
It was discovered that OpenSSL incorrectly hand...
Wordfence's Q2 2026 threat intelligence report covers 2,073 published WordPress vulnerabilities, 182 high threat vulnerabilities, 10.4 billion blocked WAF attacks, 18.2 billion blocked brute force attacks, and 573K infected sites, plus trends in vulnerability classes, attacker activity, and malware....
Two former members of the United States Air Force were sentenced to a combined 189 months in federal prison for their roles in a multi-year series of business email compromise (BEC) scams and phishing campaigns. [...]
Le Président de l'autorité polonaise de protection des données (UODO) a sollicité l'intervention du Procureur Général pour la reprise d'une enquête sur une fuite de données provenant de la plateforme de vente chinoise pandabuy.com, après le classement de l'affaire par le parquet.L'affaire a débuté l...
Le président de l'autorité polonaise de protection des données (UODO) est intervenu à plusieurs reprises pour dénoncer les pouvoirs d'accès aux informations bancaires des citoyens accordés à l'Administration Nationale Fiscale (KAS), jugés disproportionnés et non conformes au RGPD.Un projet de loi pa...
Learn how hacker tools such as malicious USB cables, keyloggers, and RFID readers can target systems and what you can do to stay safe.
c-ares could be made to crash or run programs if it received specially crafted network traffic.
Two questions remain: who is abusing the CVEs? And why did Citrix take so long to disclose?
An attacker used stolen passwords of staff at France's tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June and July.
Neither the tax administration nor France's national cybersecurity agency saw the data leave. The attack was not sophisticated, the agenc...
Microsoft has started rolling out Windows 11 26H2 to everyone, and while it's this year's big annual feature update, you probably won't notice a massive difference after installing it. [...]
Dutch police said the hacker, arrested for being part of the ShinyHunters cybercriminal gang, had plans to organize the murder of two people on his laptop.