Two Scattered Spider Hackers Sentenced to Jail in UK
Two members of the Scattered Spider cybercrime group have been sentenced to jail in the United Kingdom, the country’s National Crime Agency (NCA) announced on…
Latest Cybersecurity News — Page 177
View all →
TuxBot v3: The IoT Botnet Built With AI
TuxBot v3: The IoT Botnet Built With AI – Bugs, Disclaimers and All Pierluigi Paganini July 16, 2026 TuxBot v3, an AI-built IoT botnet for…
DigiCert survey finds 81% of Australian organisations hit by AI security incidents or vulnerabilities
DigiCert research suggests AI-related security problems are already affecting many Australian enterprises, with 81% of surveyed organisations reporting either an AI-related incident or identifying AI-related…
CISA urges software vendors to formalize vulnerability disclosure programs
The Cybersecurity and Infrastructure Security Agency (CISA) and four international cybersecurity agencies have published guidance urging software manufacturers and online service providers to establish coordinated…
Shai-Hulud npm Supply Chain Attack
On September 15, 2025, malicious versions of multiple popular packages were published to npm. They contained a post-install script that harvested sensitive data and exfiltrated…
Russian hackers trojanize WebEx, Zoom apps to push Starland malware
A financially motivated Russian threat actor tracked as UAT-11795 is using trojanized software to steal credentials and cryptocurrency by deploying a new backdoor called Starland…
Red – A Red Teamer to Find Prompt Injection Vulnerabilities in GPT 5.6 Sol
OpenAI has introduced GPT-Red, an internal automated red-teaming model designed to identify and remediate prompt injection vulnerabilities in GPT-5.6. This approach aims to tackle a…
Black Duck Adds AI-Powered Triage and CRA-Ready Checks to Coverity Static Analysis
Black Duck has rolled out a set of AI-driven and compliance-focused updates to Coverity, its static application security testing (SAST) tool, as the application security…
CISA Warns of Actively Exploited Oracle E-Business Suite Flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are actively exploiting CVE-2026-46817, an improper privilege management vulnerability in Oracle E-Business Suite…
Microsoft’s July 2026 Patch Tuesday fixes 622 flaws and 2 exploited zero-days
Microsoft has released its largest Patch Tuesday update to date, publishing fixes for 622 CVEs in July 2026. The total is more than three times…
Microsoft makes Windows SSO prompts easier to manage
Microsoft is introducing a new registry-based policy that lets IT administrators automatically accept Windows SSO permissions on Windows 11 versions 24H2 and 25H2 devices managed…
OpenAI’s GPT-Red Automates Prompt Injection Testing to Harden GPT-5.6 Sol
OpenAI has disclosed details of GPT-Red, an internal automated red-teaming model that scales prompt injection vulnerability discovery with an aim to fix issues before the…