OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers
The “major malicious attack” that targeted RubyGems in May 2026 was the work of a swarm of OpenAI agents, according to a new report published…
Latest Cybersecurity News — Page 91
View all →
AWS AI Symposium: Public sector must move to full AI transformation
Public sector organisations must move beyond “conversational AI [artificial intelligence]” to “full transformation”. Those that do, and redesign workflows around advanced AI technology, report average…
Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack
Cold cryptocurrency storage provider Trezor says roughly 347,000 of its customers received phishing emails after a third-party marketing platform used by the company was hacked.…
India’s STPI serves TerminalFix-style attack via fake Cloudflare check
Looks like TerminalFix The technique observed in this case is consistent with an attack pattern Microsoft calls TerminalFix, a variant of ClickFix. These attacks use…
AI-powered risk remediation with Wiz and Amazon Bedrock
Artificial Intelligence has revolutionized the way organizations function, improving efficiency by automating tasks that were traditionally manual. We previously introduced Wiz’s AI-powered remediation guidance, which…
Elastic Security scores 100% in AV-Comparatives Business Security Test
We’re thrilled to share that Elastic Security achieved a score of 100% in the recent AV-Comparatives Business Security Test. Why the AV-Comparatives Business Security Test…
Passkey-themed phishing attacks lead to Microsoft 365 data theft
Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed social engineering attacks to compromise corporate Microsoft accounts…
CISA Warns of GitLab Path Traversal Vulnerability Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical GitLab vulnerability, tracked as CVE-2026-85706, to its Known Exploited Vulnerabilities catalog, warning that…
New Phishing Campaign Abuses Windows Mshta.exe to Steal Credentials and Secrets
A newly identified phishing campaign is abusing the legitimate Windows utility mshta.exe to execute malicious HTML Application (HTA) files, conduct system reconnaissance, and potentially deploy…
AI is changing what Salesforce security needs to govern
Existing security and governance practices have largely focused on identities, permissions, access, configurations and controls. WithSecure’s Navigating Trust in the Modern Salesforce Ecosystem paper says…
Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection
Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get…
Civil service union welcomes pension scheme insourcing plan
The Public and Commercial Services Union (PCS) has welcomed the government’s stance on bringing the civil service pension scheme (CSPS) administration in-house. Plans to bring…