Cybersecurity News Hero

Combing the world for the cybersecurity stories you need to know.

Cybersecurity News
UK power plant siemens cyber attack https://www.pexels.com/photo/blue-and-red-metal-coils-with-electrical-wires-7867329/
UK Power Plant Cyberattack Comes Amid Wider OT Security Warnings
September 09, 2026
Hackers believed to be linked to Iran took a small British power generator offline for four days in July, in what is believed to be the first successful cyberattack to shut down a UK power…
Read More >
AI agents cyber attack Taiwan https://www.pexels.com/photo/cityscape-of-illuminated-taipei-at-sunset-taiwan-11720365/
AI Agents Autonomously Breached Taiwan Government Networks in Four Days
September 08, 2026
In July 2026, government cybersecurity monitors began to flag anomalous activity on Taiwanese government infrastructure. The discovery was traced back to a 160-megabyte archive of agentic AI operational logs, and researchers quickly realized they were…
Read More >
ToxicPanda Android Trojan https://www.pexels.com/photo/eating-panda-bear-14925845/
ToxicPanda 2.0 Turns Wireless Debugging Into a Master Key for Android Banking Fraud
September 07, 2026
First discovered in late 2024 by cybersecurity company Cleafy, ToxicPanda has built up a known history in the past few years as an Android banking trojan with operations focused in Europe. Recently, Zimperium’s zLabs team…
Read More >
Exchange cumulative update https://www.pexels.com/photo/a-company-logo-on-a-wall-10142683/
AI-Powered Vulnerability Hunting Is Outpacing Microsoft's Ability to Patch
September 04, 2026
A blog post published on August 13th by Microsoft’s Exchange Team outlines a further delay in the release of Exchange SE Cumulative Update 1 (CU1). The update was initially expected in the first half of…
Read More >
White House private cyber retaliation https://www.pexels.com/photo/people-standing-outside-the-fence-of-the-white-house-in-washington-12319862/
U.S. Deputizes Private Companies for Offensive Cyber Operations Against Criminal Networks
September 02, 2026
On August 12th, 2026, a presidential memorandum was published authorizing Participating Companies—vetted private contractors—to conduct government-directed cyber operations. The new program covers both Cyber Surveillance Operations and Cyber Effects Operations. While Surveillance Operations include intelligence…
Read More >
Ontinue Twinloot https://www.pexels.com/photo/close-up-of-data-transfer-screen-with-keyboard-38117126/
New Python Implant Uses Microsoft Services to Hide C2 Traffic
September 01, 2026
A newly identified Python malware framework uses Microsoft services to conceal its command-and-control (C2) activity, according to researchers at Ontinue. Dubbed TWINLOOT, the malware routes traffic through SharePoint and Teams infrastructure and uses a headless…
Read More >
OpenAI Astra https://www.pexels.com/photo/white-caution-cone-on-keyboard-211151/
OpenAI Can't Rule Out Astra Has Reached Critical Cyber Capability
August 31, 2026
OpenAI’s Astra model has been flagged for possible critical cyber capability, as the company states that it “cannot rule out” the possibility under its current Preparedness Framework. This is the first model to approach the…
Read More >
Gunra ransomware https://www.pexels.com/photo/close-up-shot-of-a-person-using-a-laptop-5475755/
Gunra Ransomware Altered MFA to Maintain Access
August 26, 2026
Attackers using the Gunra ransomware altered a victim’s authentication system to create a persistent way around multi-factor authentication, according to a new joint U.S.-South Korean government advisory. The Aug. 10 warning from the FBI, CISA,…
Read More >
Google post quantum cryptography PQC https://www.pexels.com/photo/visual-representation-of-magnetic-field-lines-38032287/
Google Cloud Maps Migration for Post-Quantum Cryptography
August 25, 2026
Securing infrastructure and services against the cryptographically relevant quantum computer of the future presents a major concern for the IT industry. Every encrypted connection will present a liability. The nation-state adversaries and organized threat actors…
Read More >
Paperclip AI agent https://www.pexels.com/photo/scattered-colorful-paperclips-5251349/
Paperclip Vulnerabilities Show How AI Agent Configuration Becomes Code
August 24, 2026
Open-source AI company Paperclip plays a significant role in orchestrating autonomous AI agents at scale, enabling organizations to centrally manage a company of AI agents. A design choice causes Paperclip to treat agent configuration as…
Read More >
Open Secure AI Alliance NVIDIA https://www.pexels.com/photo/hands-of-team-standing-together-6203631/
Open Secure AI Alliance Targets Security Risks Exposed by Hugging Face Breach
August 21, 2026
NVIDIA says it and more than 100 organizations, including Microsoft, IBM, CrowdStrike, Dell Technologies, Palo Alto Networks, HPE, Red Hat, and Hugging Face, have formed the Open Secure AI Alliance to develop and share open…
Read More >
BeyondTrust identity trust https://www.pexels.com/photo/portrait-shot-of-a-woman-5473960/
Research Finds Most Attacks Exploit Identity Trust, Not Bugs
August 17, 2026
BeyondTrust’s Phantom Labs was founded in 2025 to conduct research and share intelligence pertinent to the company’s security efforts. The recently released Phantom Labs Research Index explores the fruits of the first year of Phantom…
Read More >
Pathlock AI agents https://www.pexels.com/photo/data-codes-through-eyeglasses-577585/
AI Agents Approving Transactions Enterprises Can't See
August 14, 2026
Enterprise AI has quietly crossed a threshold. What began as a productivity layer for summarizing data and drafting reports has evolved into a class of digital workers with real authority, according to new research from…
Read More >
Cosmos DB CosmosEscape https://www.pexels.com/photo/view-of-a-galaxy-20881655/
CosmosEscape Flaw Could Have Exposed Every Azure Cosmos DB Account
August 12, 2026
A vulnerability chain in Microsoft Azure Cosmos DB could have allowed an attacker to read or modify customer databases across the service, according to research published by Wiz. Dubbed CosmosEscape, the chain began with a…
Read More >
Minnesota water treatment cyber attack https://www.pexels.com/photo/water-flowing-from-pipes-17882783/
Iranian Hackers Suspected in Attack on 30+ Minnesota Water Utilities
August 10, 2026
A recent cyberattack against water utilities in Minnesota has revealed the extent of the weakness in many operational technology (OT) environments. Municipal water systems largely run on aging and outdated OT, often exposed to the…
Read More >
Threatdown AI security https://www.pexels.com/photo/crop-cyber-spy-hacking-system-while-typing-on-laptop-5935794/
Criminal AI Is Easier to Find—and Harder to Monitor
August 07, 2026
In its new Cybercrime in the Age of AI report, ThreatDown points to a January 2026 attack on a Mexican municipal water utility as evidence that AI can help attackers work faster and beyond their…
Read More >
Ubuntu snap-confine https://www.pexels.com/photo/modern-laptop-with-code-and-plush-toy-in-bright-room-34804010/
How Ubuntu's Root-Access Fix Created a New Path to Root
August 05, 2026
A new high-severity vulnerability, tracked as CVE-2026-8933, has arisen as the result of an update from Canonical in an attempt to harden snap-confine. Intended to reduce the attack surface of snap-confine, the fix inadvertently created…
Read More >
PromptFiction Claude https://www.pexels.com/photo/3d-render-graphics-12939554/
PromptFiction Turns Claude Feature Into Attack Vector
August 04, 2026
The debate continues over whether hackers can trick AI agents into betraying users. Meanwhile, Oasis Security recently announced an unsettling finding. New research on the Claude Desktop agent not only found that a convenience feature…
Read More >
Subscribe for the Latest News
Webinars
Stop AI-Fueled Impersonation Before It Leads to Account Takeover
Register Now
Hypervisor Freedom. Zero Cyber Risk: Unified Protection for Modern Infrastructure
Register Now
Beyond the Prompt: Securing AI to Unleash Innovation
Register Now