AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code
Researchers at security firm Hacktron used Claude to build a working exploit for a vulnerability in an image-processing library, then chained it with a flaw…
Latest Cybersecurity News — Page 37
View all →
RatHat Turns Android Accessibility Into an Attack Weapon
RatHat Turns Android Accessibility Into an Attack Weapon Pierluigi Paganini September 18, 2026 RatHat combines AI-driven screen control, Android debugging abuse and advanced credential theft…
Strong fundamentals make next-gen security possible
2. Manage your identities more effectively Security leaders have been saying “identity is the new perimeter” for almost a decade, but identity management is still…
Wiz Extends Agentless Vulnerability Scanning to MacOS
We are excited to announce that Wiz is extending our vulnerability scanning support to MacOS instances. With this addition, customers running MacOS workloads can detect…
Latest Microsoft Defender email security benchmarking insights
Every benchmark tells a story. The most valuable ones tell us where to improve next. For five consecutive quarters Microsoft has published email security benchmarking…
Oracle September 2026 Critical Security Patch Update
Oracle addresses 672 CVEs in its September 2026 Critical Security Patch Update with 673 patches, including 104 critical updates. Key Takeaways The September 2026 Critical…
New Check Point flaw lets hackers execute code with root privileges
Check Point Software has released security updates to address a critical vulnerability that can let attackers execute code with root privileges on management systems. Tracked…
MikroTrick Attack Lets Hackers Gain Full Admin Control of MikroTik Routers Without Login
MikroTik router owners face a security problem after researchers reproduced a takeover chain that can hand an outsider full administrator control without a password. The…
Filigran sponsors Security Serious Unsung Heroes Awards
Nominations are open for the 2026 Security Serious Unsung Heroes Awards, celebrating the people working behind the scenes to make the UK safer and better…
Over 100,000 WordPress Sites Exposed to RCE Through Tutor LMS Vulnerability
More than 100,000 WordPress sites using the Tutor LMS e-learning plugin were exposed to a high-severity remote code execution vulnerability that could allow low-privileged users…
Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched
Four major AI coding agents, Claude Code, Codex, GitHub Copilot and Gemini CLI, all share the same zero-click RCE vulnerability, one that could give an…
Fake parcel delivery messages steal your card and bank details
Parcel delivery phishing campaigns appear around the world under different courier names. In the United States, the messages commonly impersonate USPS and claim that a…