Yesterday · 12:00 UTC

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Crit…

11 Jun 2026 · 12:00 UTC

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to impersonate devices, intercept or manipulate communications, harvest sensitive credentials at scale, or gain unauthorized acce…

11 Jun 2026 · 12:00 UTC

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to obtain hard-coded credentials, gain access to telemetry data, and potentially send operational commands to the robot fleet. Th…

Today · 13:23 UTC

Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operations and even remote code execution. The vulnerability, tracked…

Yesterday · 19:33 UTC

Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a Rust binary built to…

Today · 05:42 UTC

Anthropic said on Friday it will "abruptly disable" its most advanced artificial intelligence (AI) models, Claude Fable 5 and Mythos 5, for all users after the U.S. government ordered it to suspend access to the models f…

Yesterday · 13:00 UTC

NPM, part of GitHub, announced a new version of the npm package manager with several security improvements, including disabling install scripts

Yesterday · 14:00 UTC

Domain of dark web money laundering platform AudiA6 seized and suspects arrested in joint operation by the FBI, Europol and others

Yesterday · 11:00 UTC

As the FIFA World Cup 2026 kicks off, a new Darktrace report warns that sports teams and bodies are a major target for cyber criminals

Yesterday · 20:26 UTC

A major bug in Oracle's ERP software disproportionately affected American universities, and hackers have capitalized by stealing gobs of data.

Yesterday · 00:58 UTC

Hackers are valuing quality over quantity, using AI to upgrade their phishing attacks rather than multiply them.

Yesterday · 13:01 UTC

Stay cool: Mythos 5 is an upgrade over Mythos Preview while Fable 5 is Mythos "made safe for general use," Anthropic explained.

10 Jun 2026 · 14:03 UTC

A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affi…

18 May 2026

Cloudflare shares findings from testing Mythos and other security-focused LLMs against live code across critical infrastructure, including model strengths, weaknesses, and what is needed before this work can scale.

Yesterday · 17:44 UTC

Oleksii Lytvynenko, a 44-year-old Ukrainian national, admitted to joining the prolific cybercrime group in 2021. Officials said he engaged in cybercrime up until his arrest in Ireland in 2023. The post Conti ransomware g…

Yesterday · 21:56 UTC

Outsider provided phishing kits and infrastructure for cybercriminals to scam victims with lures claiming they missed packages, had unpaid tolls or parking violations. The post FBI takes down massive China-based cybercri…

Yesterday · 18:21 UTC

The website specialized in non-consensual sexual images of famous women, including politicians, first ladies, royalty, journalists, television presenters, athletes, and entertainers, and others. The post US, France, and…

Yesterday · 19:33 UTC

Maine has taken its public data breach reporting portal offline after fraudulent breach disclosures were published on the state's website, prompting a review of procedures to prevent abuse in the future. [...]

Today · 14:06 UTC

Chinese hackers took control of a target organization's authentication stack and maintained persistence for 10 years, with full visibility into the administrative activity. [...]

Today · 10:01 UTC

The US government has ordered Anthropic to block all foreign nationals from accessing Fable 5 and Mythos 5, forcing the company to suspend both models worldwide. Anthropic is complying but disputes the basis, calling the…

11 Jun 2026 · 13:08 UTC

This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Jun. 11, 2026 – Listen to the podcast Media outlets and cybersecurity industry experts have been warning for the past several years a…

Yesterday · 12:34 UTC

This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Jun. 12, 2026 – Watch the YouTube Short During World War II, some of America’s most powerful weapons weren’t bombs or guns. They were…

10 Jun 2026 · 13:12 UTC

This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Jun. 10, 2026 – Read the book Cybersecurity for Accounting and Business, a new book co-authored by Nancy Bagranoff, Professor at Univ…

Yesterday · 11:03 UTC

Let no one accuse Bernie Sanders of ducking the big questions. Writing in the New York Times last week, the senator asked: “Will the future of humanity be determined by a handful of billionaires who have promoted and dev…

Yesterday · 21:05 UTC

This fluid pump was inspired by the way squids propel themselves through the water. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy…

11 Jun 2026 · 11:01 UTC

The surveillance company Leonardo wants more data: A surveillance company plans to add sensors to automatic license plate readers (ALPRs) that would mean the devices, as well as capture the license plate of passing vehic…

10 Jun 2026 · 08:29 UTC

Back in 2023, I wrote a diary[1] discussing how commonly X-Frame-Options and CSP headers containing the frame-ancestors directive were used on 1 million most popular domains on the internet (based on the Tranco list[2]),…

Yesterday · 12:30 UTC

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

11 Jun 2026 · 02:25 UTC

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Today · 11:18 UTC

Researchers have quantified the length and mass of arbuscular mycorrhizal fungal networks globally.

Today · 03:00 UTC

Commerce dept. worries that a Fable 5 "jailbreak" could be a national security threat.

Yesterday · 22:20 UTC

As of today, SpaceX is owned by investors who will want to see it make money.

Yesterday · 04:15 UTC

Australian ransomware victim's funds washed, AFP said.

11 Jun 2026 · 20:38 UTC

Allegedly linked to Void Blizzard.

11 Jun 2026 · 20:33 UTC

As a key action in the evolution of cyber strategy.

Yesterday · 07:06 UTC

Location scans from the globally popular augmented reality game have helped train AI to recognise and interpret physical spacesFollow our Australia news live blog for latest updatesGet our breaking news email, free app o…

11 Jun 2026 · 19:14 UTC

Suit filed in US alleges chatbot told Alice Carrier, 24, ‘maybe this is just the end’ as she struggled with suicidal thoughtsA Canadian mother sued OpenAI and its CEO, Sam Altman, in US court on Thursday, alleging that C…

11 Jun 2026 · 15:47 UTC

Former xAI engineer Devin Kim alleges he was illegally fired for trying to implement safety mechanisms for the chatbotA former engineer at Elon Musk’s xAI who now heads a thinktank focused on AI safety filed a lawsuit cl…

Today · 13:00 UTC

When I returned to my computer five minutes after giving Gemini a lengthy prompt, I had two things: a functional app in a preview window, and a message about a bug. "~ Channel is unrecoverably broken and will be disposed…

Today · 12:55 UTC

On Friday evening, the government ordered Anthropic to block access to Fable 5 and Mythos 5 for all foreign nations, both inside and outside the US, due to national security concerns. That order included employees of Ant…

Today · 14:00 UTC

Mike Rugnetta is a writer, podcast host, producer, audio engineer, educator, musician, sound designer, and father. In short, the man wears a lot of hats. He's the cocreator and host of the award-winning Never Post, an ab…

Today · 02:26 UTC

Anthropic isn't hiding its frustration. "We disagree that the finding of a narrow potential jailbreak should be cause for recalling a commercial model deployed to hundreds of millions of people," the company wrote in a b…

Yesterday · 23:15 UTC

TechCrunch has followed SpaceX's start, struggles, and successes from the early days. And we're here for what happens next too. This package of SpaceX IPO coverage includes who stands to win (and maybe some who won't), p…

Today · 04:14 UTC

Andrew Yang made a list of everything Americans overpay for — housing, food, wireless — and thinks the next startup gold rush is giving that money back.

Today · 02:00 UTC

Melbourne "rewards club" lottery billionaire Adrian Portelli has launched a defamation lawsuit against former SA minister Andrea Michaels over comments she made about a $3.5 million home prize draw.

Today · 02:54 UTC

The US government restrictions cite national security concerns over the AI models Fable 5 and Mythos 5.

Today · 05:55 UTC

Construction begins on 18 community batteries across WA, as a climate and conservation advocate calls for a legislated target for renewable energy uptake.

9 Jun 2026 · 22:28 UTC

Anthropic released Fable 5, a public version of its advanced Mythos AI model class, while keeping tighter controls around cybersecurity and other sensitive uses.

11 Jun 2026 · 11:00 UTC

Google DeepMind is funding research into the potential dangers of situations where millions of different AI agents interact with each other online. According to Rohin Shah, who directs the company’s AGI safety and alignm…

Today · 03:00 UTC

Commerce dept. worries that a Fable 5 "jailbreak" could be a national security threat.

Yesterday · 18:45 UTC

It isn't the only startup tackling physical AI, but it's one of the best-funded.

Yesterday · 18:03 UTC

Full autonomy is rare, but Ukraine is installing AI modules on drones and robots.

10 Jun 2026 · 10:21 UTC

Google DeepMind and partners announce a $10M funding call for multi-agent safety research.

10 Jun 2026 · 16:24 UTC

Today · 09:00 UTC

The ruling holds that a company that designs, trains, operates, and manages an AI system must assume legal liability for any damages caused by the responses it generates.

Today · 02:26 UTC

“The government believes it has become aware of a method of bypassing, or ‘jailbreaking’ Fable 5,” the company said in a blog post.

Yesterday · 23:45 UTC

“I’m not sure that this company supports a hackathon culture anymore,” one employee posted in a forum open to the entire staff.

Yesterday · 21:00 UTC

AgentPerf from Artificial Analysis, the industry’s first agentic AI benchmark, gives developers, enterprises and infrastructure providers a clear way to compare systems for agentic AI. In the first round of published res…

11 Jun 2026 · 13:00 UTC

The GeForce NOW summer sale kicked off today with limited-time savings of up to $70 off a 12-month membership, making now the perfect time to upgrade to get the best of the cloud and see just how far Ultimate gaming can…

10 Jun 2026 · 19:00 UTC

A car pulls up to the curb. The app says, “Your ride is here.” No one’s in the driver’s seat. For people who live in one of the dozens of cities now hosting robotaxi services, this is already a reality. The robotaxi indu…

Yesterday · 13:43 UTC

OverviewOn June 10, 2026, Oracle published a security alert for CVE-2026-35273, a critical vulnerability in the Updates Environment Management component of PeopleSoft Enterprise PeopleTools. Oracle released an out-of-ban…

11 Jun 2026 · 13:00 UTC

IntroductionThe underground market for criminally oriented generative AI has moved beyond the early hype surrounding 'malicious chatbots.' The gradual integration of AI as a productivity layer within cybercrime operation…

Today · 00:22 UTC

New Tracing OptionsAs hard as we try to ensure that Metasploit is bug free, issues inevitably come up. Whether you’re running a module on an op or writing a new one, what we can do is make the debugging experience easier…

11 Jun 2026 · 14:00 UTC

Introduction Mandiant and Google Threat Intelligence Group (GTIG) have identified an active compromise and extortion campaign attributed to UNC6240 (ShinyHunters) targeting Oracle PeopleSoft application infrastructure. T…

11 Jun 2026 · 13:37 UTC

By Yarden Porat AI agents need memory. Frameworks like LangGraph provide it through checkpointers – persistence layers that store execution state. But what happens when that persistence layer isn’t locked down? Key Point…

11 Jun 2026 · 10:00 UTC

Protect enterprise AI agents from supply chain risks by auditing third-party skills for hidden vulnerabilities and multi-stage attack chains. The post Trust No Skill: Integrity Verification for AI Agent Supply Chains app…

Yesterday · 22:00 UTC

Unit 42 has discovered a new macOS Tahoe 26 forensic artifact that tracks user menu selections across the operating system. Learn more here. The post Tracing Digital Intent: New MacOS Tahoe 26 Artifact Discovered appeare…

Today · 02:47 UTC

On June 11th 2026, security researchers and the Arch Linux community disclosed a large-scale supply-chain attack against the Arch User Repository (AUR). Attackers hijacked more than 400 community packages and turned them…

11 Jun 2026 · 16:11 UTC

Miasma and Hades worms are spreading across npm and PyPI, running on import and project open. See how Dev Machine Guard's Suspicious Files detects them.

11 Jun 2026 · 16:00 UTC

Alerts are more trustworthy and actionable when noise is reduced. See how we improved the verification step with context-aware LLM reasoning. The post Making secret scanning more trustworthy: Reducing false positives at…

10 Jun 2026 · 16:00 UTC

Adaptive Spec-driven Scoring for Evaluation and Regression Testing (ASSERT) is an open-source framework for converting natural language behavior requirements into executable evaluations of AI models and agents. The post…

11 Jun 2026 · 05:00 UTC

Yesterday · 05:00 UTC

10 Jun 2026 · 05:00 UTC

11 Jun 2026 · 13:00 UTC

Decades of piling complexity onto non-standardized stacks have left security unsteerable. Juan Andrés Guerrero-Saade makes the case for a new approach.

11 Jun 2026 · 18:00 UTC

In this week’s newsletter, Amy reminisces on the tech toys of their childhood, inspired by a hilarious lesson about why your digital privacy shouldn't be left on an open channel.

Yesterday · 10:00 UTC

OpenAI introduces three Academy courses that help people build practical AI skills, create repeatable workflows, and apply agents in everyday work.

Yesterday · 00:00 UTC

Preply uses OpenAI to launch AI-generated lesson summaries, providing personalised feedback and language learning exercises.

11 Jun 2026 · 00:00 UTC

OpenAI supports the EU Code of Practice on AI content transparency, advancing provenance standards and tools to help people understand AI-generated content.