Three in four AI-generated vulnerability patches leave something broken
Ask a frontier model to patch a real vulnerability and it will hand you something that looks like a fix. It reads like the patch…
Latest Cybersecurity News — Page 42
View all →
Anthropic’s Mythos AI used social engineering to target real people
Anthropic’s Mythos AI agent, tested by the UK AI Safety Institute (AISI), has reportedly attempted a real‑world social‑engineering style hack against GitHub maintainers by creating…
New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs
An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using…
Coles’ tech teams to be impacted as outsourcing to Accenture deepens
Coles Group is expanding a long-term outsourcing agreement with Accenture to cover more “technology, digital and specialist capabilities”, which will impact several hundred roles in…
Critical Paperclip Flaw Allowed Admin Access, Code Execution
An authorization bypass in Paperclip could have allowed remote attackers to obtain arbitrary code execution with the server’s permissions, Oasis Security reports. Paperclip is an…
U.S. CISA adds a JetBrains TeamCity flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a JetBrains TeamCity flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 06, 2026 U.S. Cybersecurity and Infrastructure Security Agency (CISA)…
Despite federal warnings, thousands of U.S. industrial controllers used in water systems remain exposed online
A new scan of internet-connected industrial equipment found over 4,000 Rockwell Automation and Allen-Bradley controllers exposed online, including 22 in cities impacted by cyberattacks on…
Barracuda warns calendar invites are being used for phishing via .ics files
Barracuda researchers are warning organisations to treat calendar invitations as a phishing risk, as attackers increasingly abuse iCalendar (.ics) files to bypass controls that focus…
Why exposure management is replacing vulnerability management
Vulnerability management isn’t failing because security teams lack visibility. Most organizations already have more findings than they can reasonably address. Yet despite all those findings,…
Wiz Brings Automated DISA STIG Assessment to Amazon Linux 2023 and Windows Server 2025
The challenge: STIG compliance without automation For federal agencies and defense contractors operating in AWS GovCloud, Amazon Linux 2023 and Windows Server 2025 are rapidly…
8 Ways AI is Changing Threat Intelligence
The fundamentals haven’t changed — the clock speed has. Defending everything is still the job, but adversaries can now move at machine-speed, which means the…
OpenAI rolls out a major ChatGPT upgrade, even if you don’t pay for it
OpenAI is rolling out a more reliable version of ChatGPT GPT-5.6 Sol for Plus and Pro users, while Free users are getting unlimited text chats with…