OpenAI rogue AI agent’s attack expanded beyond Hugging Face
The autonomous AI agent that escaped during OpenAI testing exploited weaknesses across a customer workload, a third-party cloud platform, and Hugging Face’s production environment before…
Latest Cybersecurity News — Page 98
View all →
The Wiz Red Agent is Now Generally Available
We are excited to announce that Red Agent is now generally available (GA). Customers have rapidly adopted our AI attacker to close the widening gap…
Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare
Health-ISAC, a cybersecurity information-sharing organization for the health sector, is warning healthcare and medical technology organizations of an observed increase in successful attacks by ShinyHunters.…
AI-Generated Phishing No Longer Needs Malware: It Can Steal Your Session Inside the Browser
AI-generated phishing campaigns are rapidly evolving beyond traditional malware delivery, shifting the battleground directly into the web browser where attackers can hijack active sessions, bypass…
Building Trustworthy Agentic AI: How Security Concerns Have Changed in 2026
2026 is touted as the year AI moves from speculation and interest to real-world deployment and value. Yet one global analyst firm predicts 40% of…
Critical Ruflo MCP Bridge Flaw Allows Full AI Agent Platform Takeover
A critical vulnerability in the open-source AI orchestration platform Ruflo has been disclosed, allowing unauthenticated attackers to achieve full remote code execution (RCE) with a…
Why Authentication UX Deserves More Attention on B2B Platforms
Authentication is commonly approached as a one-time technical process. A product founder might think that once the user logs in, verifies their identity, or recovers…
ShutterGap: Aryon Security finds 3.7M AWS cloud resources exposed beyond CSPM/CNAPP visibility
Research from Aryon reveals that each year, 3,731,699 short-lived cloud resources containing highly sensitive information are publicly exposed. This impacts any organization using AWS services that…
Buying TikTok views or followers? Here’s what you’re really getting
A whole industry has sprung up around selling TikTok “growth.” Cheap views by the hundred, pre-made ad accounts, and polished sales pages promising a repeatable…
Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads
Swati KhandelwalJul 29, 2026Vulnerability / Software Security Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read…
Department for Education suffers data breach
The Department for Education (DfE) has fallen victim to a major data breach after a threat actor known only as ExfilSquad targeted an internal helpdesk…
REA Group outs Launchpad, a platform engineering capability
REA Group is building a central platform engineering group and capability it is calling Launchpad, with a goal to get its product and delivery teams…