> TODAY'S SUMMARY (11 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Notably, the Warlock ransomware group continues to exploit year-old SharePoint vulnerabilities to target critical infrastructure, affecting essential services globally. Meanwhile, the ShinyHunters group faces increased scrutiny, with a suspect detained in Jordan cooperating with the FBI to identify other members. Additionally, a new China-aligned cyber espionage group, TA419, is actively targeting U.S. AI policy experts through sophisticated phishing campaigns. In the realm of artificial intelligence, former National Intelligence Director Jay Clayton is set to lead a new federal task force aimed at addressing AI-related security challenges. These developments underscore the ongoing risks posed by ransomware, cyber espionage, and the evolving landscape of AI security.
|
// AI-powered summary generated at 16:00
Attackers can turn AI agent guardrails into denial-of-service weapons, according to new research that found a single poisoned document can dramatically slow shared AI agent workflows by trapping reasoning-based safety systems in extended thinking loops.
“Reasoning-based gua...
It was discovered that Mesa did not properly validate memory allocation
sizes in WebGPU under certain circumstances. An attacker could use this
issue to cause Mesa to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Vulnerability disclosures are piling up faster in 2026 than anyone expected at the start of the year. The running count for the first few months sits well above the original projection, and the Forum of Incident Response and Security Teams (FIRST) now expects the year to land near 66,000 CVEs. The c...
Oleksii Oleksiyovych Lytvynenko admitted to working on the development of a loader for the Conti gang.
The post Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges appeared first on SecurityWeek.
Employee onboarding is a busy time for IT teams. New starters need devices, accounts, access permissions, and passwords, all delivered within a tight timeframe.
That usually means sharing a temporary "first-day" password so employees can access systems for the first time. The issue is that these pa...
The pharmaceutical giant says the attackers gained access to personal data stored on the compromised systems.Â
The post Ozempic Maker Novo Nordisk Says Hackers Breached IT Systems appeared first on SecurityWeek.
Palo Alto Networks warns that attackers are actively exploiting CVE-2026-0257, a PAN-OS flaw that lets unauthorized users bypass authentication and establish VPN connections. Palo Alto Networks has confirmed active exploitation of CVE-2026-0257, a PAN-OS authentication bypass vulnerability affecting...
French officials say roughly 73,000 government accounts were affected, while the threat actor claims to have stolen messages and user data from the sovereign Tchap platform.
The post French Government Messaging Platform Breached by Mysterious ‘Misere’ Hacker appeared first on SecurityWeek.
Cybersecurity researchers have discovered a network of 152 Google Chrome extensions that act as new tab live wallpaper add-ons to distribute a potentially unwanted program (PUP) family.
The cluster spans 38 separate Chrome Web Store publisher accounts and three brand backends: tabplugins[.]com, yow...
A proposed FCC rule would kill burner phones: phones whose accounts are not attached to a particular person.
The FCC plans to do this by legally forcing the country’s telecoms to store a wealth of personal information about essentially all phone customers, including a government issued identificatio...
Phishing remains one of the most stubbornly persistent threats in cybersecurity: humans are tired, distracted, trusting, and susceptible to urgency and authority in ways that no amount of awareness training can completely overcome. The security community has largely accepted this reality and shifted...
The extortion group threatens to leak 297 GB of data allegedly stolen from the Council of Europe, including employee personal information.
The post ShinyHunters Claims Council of Europe Hack appeared first on SecurityWeek.
Location evidence is about more than coordinates — Jason Lesser explains how movement patterns from mobile devices can help investigators build a clearer picture of events.
Modat has launched native Passive DNS intelligence in Magnify, its internet intelligence platform, unifying IP, device fingerprint, certificate, and passive DNS into a single pivot-driven investigation flow. Threat intelligence, threat hunting, exposure management, fraud and Security teams have long...
Access to two Anthropic large language models, Mythos 5 and Fable 5, has effectively been banned to any non-US nationals by the Trump administration
Microsoft is rolling out workplace check-in via Wi-Fi for Teams and Microsoft Places. Connect to your office network and your in-office presence updates automatically, no manual status change needed. Microsoft says the signal isn’t stored as location history, and that you can configure your own sett...
LTM has announced the launch of BlueVerse for iRun, an AI-native managed services offering designed to transform IT operations into a resilient, intelligent, and outcome-driven function. As enterprise environments grow more complex, spanning hybrid cloud, SaaS, and AI-driven ecosystems, managed serv...
Every enterprise security team is fighting a workforce problem they cannot see on any org chart.
Bots, service accounts, API keys, OAuth tokens, machine certificates — non-human identities now outnumber human ones in most large organisations, often by a factor of ten to one...
An attacker tampered with trusted JavaScript files used by WordPress sites running PushEngage, OptinMonster, and TrustPulse, turning those files into a way to break into the sites.
When a site administrator was logged in as the file loaded, the code created an admin account under the attacker's con...
CISA Gives Feds 3 Days to Patch Ivanti Flaw Exploited in Attacks CISA issued Binding Operational Directive 26-04, mandating that federal agencies patch CVE-2026-10520 — a critical CVSS 10.0 authentication bypass in Ivanti Sentry — within three days after confirmed active exploitation in the wild. Th...