The legal questions raised by agentic AI hacks
As AI agents escaping testing sandboxes and hacking organizations have gone from unprecedented to seemingly routine in a matter of weeks, policymakers, regulators and cybersecurity…
Category: Cyberscoop
Authorities seize KillSec extortion group infrastructure, arrest 3 alleged members
Authorities arrested the alleged leader and two additional members of KillSec, a data extortion group primarily run by teenagers that successfully compromised about 500 organizations…
National cyber director: Government-industry collaboration vital to managing AI risks, competition with nations
Collaboration with industry is key to balancing AI security risks and benefits, as well as staying ahead of China and other adversarial nations, National Cyber…
AI policy circles targeted in China-linked phishing operation
A China-aligned cyber espionage group targeted U.S. artificial intelligence policy experts through phishing emails that impersonated prominent officials, economists and an employee of AI company…
OpenAI reveals ‘novel’ encryption bypass used in distillation attack
OpenAI said it disrupted a “coordinated campaign” to distill and extract reasoning capabilities from its AI models, pointing the finger at a Chinese rival. On…
Alleged ShinyHunters leader arrested in the Netherlands
Authorities arrested an alleged leader of ShinyHunters, the notorious cybercrime group responsible for a string of high profile extortion attacks since 2025, including last week’s…
WaterISAC reckons with range of threats after summer of cyberattacks
The computers that automate water treatment systems across the country were built for durability, not for an internet-connected world. Many still accomplish their fundamental function,…
Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond
A group of Russian government hackers is refining its attacks to make it easier to eavesdrop on victims and significantly expand its targets among governments,…
Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected
Attackers remained undetected for more than three weeks as they exploited a critical zero-day vulnerability affecting Citrix NetScaler appliances en masse. The earliest known instance…
US is looking to weave AI into critical infrastructure for cybersecurity, national cyber director says
The U.S. government is working with critical infrastructure operators to integrate artificial intelligence into the nation’s most vital systems and strengthen cyber defenses, National Cyber…
Kiteworks lifts shutdown advisory after ‘credible threat intelligence’ from federal authorities
Kiteworks, a provider of secure file transfer and data-sharing tools, told customers Monday they could resume normal operations after a weekend-long precautionary shutdown prompted by…
Citrix patches actively exploited NetScaler zero-days after a weekend of unofficial warnings
Citrix took most of the weekend to confirm that attackers were actively exploiting the newest round of NetScaler zero-days, leaving network defenders and threat hunters…