Today · 10:39 UTC

CISA has urged U.S. federal agencies to secure their systems by Sunday against a critical Splunk Enterprise vulnerability that is being exploited in attacks. [...]

Today · 11:32 UTC

Microsoft has confirmed a confusing Windows bug that causes different filenames to appear in the confirmation dialog when deleting a file from the Recycle Bin. [...]

Today · 12:12 UTC

Modern phishing attacks, including Device Code phishing, can undermine MFA protections and grant attackers access to corporate accounts without stealing passwords. This webinar explores how behavioral AI can help securit…

Yesterday · 12:00 UTC

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to upload malicious .ctl files that may lead to arbitrary code execution. The following versions of AzeoTech DAQFactory are affected…

Yesterday · 12:00 UTC

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive health-related information and prevent legitimate users from establishing a connection with the device. The f…

Yesterday · 12:00 UTC

CISA is aware of global reports that malicious cyber actors have targeted internet-accessible Fortinet devices across government and private sector organizations using compromised credentials. This activity, referred to…

Today · 06:36 UTC

Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited by nearby hackers to eavesdrop on users. The vulnerability, tracked as CVE-2025-20701 (CVSS score: 8…

Today · 10:30 UTC

The first wave of enterprise AI concern was straightforward. It was simply employees pasting sensitive data into public AI tools. Security teams responded with usage policies, domain blocks, and data loss prevention rule…

Today · 09:03 UTC

Salesforce has revealed that it disabled the Klue Battlecards app integration within its platform in response to a security incident impacting the competitive intelligence company on June 11, 2026. To that end, organizat…

Today · 10:15 UTC

SocGholish malware has been removed from 15,000 sites associated with Evil Corp hackers

Today · 11:00 UTC

Working with frontier AI models, this new platform aims to help discovering, prioritizing, validating and remediating code vulnerabilities

Today · 09:00 UTC

Half of cybersecurity leaders lack confidence in detecting threats on Slack, Teams and other non-email platforms, despite growing attacker focus

18 May 2026

Cloudflare shares findings from testing Mythos and other security-focused LLMs against live code across critical infrastructure, including model strengths, weaknesses, and what is needed before this work can scale.

Yesterday · 18:20 UTC

A hacker could have "Rickrolled" the World Cup — or worse — thanks to FIFA's unenforced Entra access controls.

Yesterday · 20:05 UTC

A leaked GitHub token underscores what most organizations get wrong: Treating secrets management as a tooling problem rather than an identity problem.

Yesterday · 19:09 UTC

The threat group's curious business model may combine opportunistic monetization alongside intel collection, without much coordination between the two.

17 Jun 2026 · 11:04 UTC

On 14 April, the Trump administration quietly acknowledged the widespread use of AI to automate government processes. The office of management and budget (OMB) disclosed a staggering 3,611 active or planned use cases for…

Yesterday · 11:04 UTC

At least one malware developer is adding text about nuclear and biological weapons to their spyware, in an effort to stop automatic AI analysis. Details: The _index.js payload begins with a large JavaScript block comment…

Today · 11:03 UTC

On June 9th, Anthropic released its Fable generative AI model. Three days later, the US government classified it as a dangerous munition, and used its export-control authority to prohibit any foreign nationals from acces…

Yesterday · 22:03 UTC

Cybersecurity firms, researchers and officials took down 106 servers and remediated nearly 15,000 sites that were infected with the malware. The post Authorities disrupt Evil Corp’s SocGholish botnet appeared first on Cy…

Yesterday · 15:25 UTC

The threat group’s remarkable success targeting open-source software was inevitable and fueled by the industry’s decision to prioritize code shipping over security. The post How software development’s speed obsession ena…

Yesterday · 20:20 UTC

While preventing third parties from profiting off unauthorized deepfakes of artists and performers is a bipartisan concern, some business and digital rights groups are opposed. The post Congress tees up No FAKES Act, aim…

Yesterday · 23:28 UTC

Crypto Clipper spreads over USB and communicates over Tor.

Today · 11:15 UTC

Researchers say these coral strongholds may help repopulate more degraded reefs.

Today · 00:39 UTC

"I consider this a success already, just from the fact that we're even going to try this."

Yesterday · 01:49 UTC

[This is a Guest Diary by Adam Nason, an ISC intern as part of the SANS.edu BACS program]

Today · 08:37 UTC

I detected an interesting phishing email this morning. It targets a major Belgian bank:

Yesterday · 02:00 UTC

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Yesterday · 17:37 UTC

For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet traffic linked to advertising fraud, account takeovers, and mass data-scraping efforts. Thi…

16 Jun 2026 · 12:19 UTC

This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Jun. 16, 2026 – Read the full story from LinkedIn The 2026 CISO Report by Cybersecurity Ventures, published in partnership with Sopho…

17 Jun 2026 · 13:20 UTC

This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Jun. 17, 2026 – Watch the YouTube video “I started my cybersecurity ‘career’ as one of the earlier virus developers in the world,” Ni…

Yesterday · 21:20 UTC

Startup Baseten is reportedly close to finalizing a $1.5 billion round at a $13 billion as the “inference gold rush" marches on.

Today · 00:51 UTC

DeductiveAI, a startup that uses AI to catch and resolve bugs in software, was founded just three years ago.

Today · 07:59 UTC

There's a commercial logic that cuts against the idea that ASML would risk its export license to arm a Chinese customer.

Yesterday · 01:36 UTC

Updated ASD ISM drops with new and revised controls.

Yesterday · 23:35 UTC

Elevates CTO to executive leadership team.

Yesterday · 04:02 UTC

Unifies company messaging in move away from email.

Today · 06:00 UTC

Exclusive: Telegram urged to clarify how it detects illegal incitement after attacks were coordinated using appTelegram is facing questions from Ofcom over how it detects and prevents illegal incitement after a Ukrainian…

Today · 07:00 UTC

Investigation: The entrepreneur was once the toast of London’s tech scene, a ‘global leader of tomorrow’ who starred on Dragons’ Den and promised untold riches for the startups she championed. But people she worked with…

Yesterday · 18:00 UTC

Exclusive: Richard Hermer’s office understood to be first in government to restrict use after recent riotsThe attorney general for England and Wales has told his office to no longer post on X, making it the first UK gove…

9 Jun 2026 · 22:28 UTC

Anthropic released Fable 5, a public version of its advanced Mythos AI model class, while keeping tighter controls around cybersecurity and other sensitive uses.

Today · 10:40 UTC

Miami-based AI startup Subquadratic came out of stealth mode last month with a huge claim. It announced that it had solved a mathematical bottleneck that had been holding back large language models for almost a decade. T…

16 Jun 2026 · 09:00 UTC

At the end of a tense and scoreless first half of a soccer match between the English men’s team and rival Germany, millions of Brits let out a collective sigh and did what they so often do in moments of stress: They made…

Today · 12:00 UTC

When Colin Farrell was doing press for the first season of the detective series Sugar, he had to be very careful with how he spoke. Sugar is a story about a quirky private detective, but it's also secretly a work of scie…

Today · 12:00 UTC

We've lost something in the past 15 years. Netflix, Amazon, Disney, Apple; they've all convinced us that streaming is the best way to watch movies and shows at home. With everything at our fingertips, there's no need to…

Today · 04:49 UTC

Five months after returning to OpenAI, Barret Zoph - the company's head of enterprise AI sales - has departed, The Verge has learned. Zoph returned to OpenAI in mid-January after a stint as co-founder and CTO of Thinking…

Yesterday · 22:12 UTC

Leaked files show the invite-only network grades members by their money and fame, shaping who’s in, who’s out, and who pays.

Yesterday · 21:03 UTC

Anthropic still can’t distribute Claude Mythos or Fable 5 after running afoul of the Trump administration. But no one can say exactly what the company did wrong.

Yesterday · 19:29 UTC

On today’s Uncanny Valley, we dive into the dysfunction in Meta’s newly formed AI unit and why it’s been driving already-low employee morale even further into the ground.

Yesterday · 21:21 UTC

Taiwan's drone spending plans for defense could also boost business overseas.

Yesterday · 17:02 UTC

Biggest AI firms will likely recoil at Bernie Sanders' AI wealth fund.

17 Jun 2026 · 19:25 UTC

Nvidia's self-improvement program for robots enlists teams of AI coding agents.

16 Jun 2026 · 21:29 UTC

UK government partners with Google DeepMind to build a new AI-powered prototype aimed at faster housing decisions.

16 Jun 2026 · 15:46 UTC

Securing internal systems with an AI Control Roadmap, combining traditional safeguards and real-time monitoring.

Yesterday · 20:00 UTC

In a consequential grid infrastructure decision, the Federal Energy Regulatory Commission (FERC) today issued a major milestone on large-load interconnection impacting how those building AI factories, semiconductor fabri…

Yesterday · 13:00 UTC

The digital era gave the advertising and marketing industry speed; the AI era is giving it autonomous operations. For companies building next-generation technologies for advertising and marketing, the question is no long…

Yesterday · 13:00 UTC

Play favorite titles from popular game libraries, keep progress synced and jump back into gaming sessions on virtually any device. That’s the power of GeForce NOW cloud gaming. From providing access to members’ favorite…

Today · 07:18 UTC

An expert has warned governments to keep an eye on gold mines experiencing financial troubles, given the surge in prices.

Today · 06:35 UTC

Federal senators have accused senior leaders in Australia's accounting and auditing industry of behaving disgracefully as more revelations emerge about KPMG's whistleblower scandal.

Today · 05:39 UTC

The state government has already tipped $700 million into the transition of the WA town of Collie away from coal. Now, the Cook government wants tens of millions of federal dollars to finish the job.

17 Jun 2026 · 11:20 UTC

Executive summaryRapid7 researchers have identified a sophisticated malware campaign attributed to the threat actor "Dropping Elephant," characterized by the use of a China-themed decoy document to deliver a heavily rewo…

Yesterday · 14:45 UTC

Security leaders are facing an unusual set of circumstances. The drumbeat for better security prioritization has been rising for years in boardrooms around the world. The desire is there, but the processes of the past ar…

Today · 00:17 UTC

AutoJack is a novel exploit chain showing how a single malicious webpage can turn an AI browsing agent into a remote code execution vector on the host machine. By abusing trust in localhost, missing authentication, and u…

Yesterday · 03:43 UTC

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend against supply chain attacks using Microsoft Defender and actionable threat intelligence. The po…

Yesterday · 19:36 UTC

New Forrester Total Economic Impact™ study shows Microsoft Security consolidation delivers ROI, lowers risk, and prepares organizations to secure AI. The post New Forrester study shows customers who unified with Microsof…

Yesterday · 10:03 UTC

On June 17, 2026, an attacker compromised the @mastra npm organization and quietly added easy-day-js as a dependency across 140+ packages in the Mastra AI framework ecosystem. easy-day-js is a typosquat of the popular da…

Yesterday · 10:03 UTC

npm and Python supply chain attacks run on developer machines and steal secrets. See how Package Configs audits registry, cooldown, and auth across your fleet

Yesterday · 10:03 UTC

On June 11th 2026, security researchers and the Arch Linux community disclosed a large-scale supply-chain attack against the Arch User Repository (AUR). Attackers hijacked more than 400 community packages and turned them…

16 Jun 2026 · 10:00 UTC

Unit 42 discovered a Vertex AI Python SDK vulnerability that allows remote code execution via bucket squatting. Read the article for more. The post Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenan…

Yesterday · 19:24 UTC

When a security event occurs in your Amazon Web Services (AWS) environment, rapid response is critical. However security teams often struggle with time-consuming, manual processes that slow down investigations. Analysts…

Yesterday · 16:50 UTC

Amazon Web Services (AWS) is excited to release the Spring 2026 System and Organization Controls (SOC) 1 and 2 reports in machine-readable OSCAL format alongside the PDF version of the reports. The reports cover 188 serv…

17 Jun 2026 · 15:34 UTC

What we believe We’ve been thinking deeply about enterprise security. The operating model that served us for the past decade (collect telemetry, store it, query it, build dashboards to watch it) is no longer keeping pace…

16 Jun 2026 · 09:00 UTC

Since late 2025, malware has been spreading rapidly through the Steam Workshop, the gaming platform's built-in service for players to create and share custom content. The attackers are primarily targeting gamers in China…

Yesterday · 05:00 UTC

Yesterday · 05:00 UTC

17 Jun 2026 · 05:00 UTC

Yesterday · 17:00 UTC

OpenAI introduces new spend controls and usage analytics for ChatGPT Enterprise, helping organizations manage costs and scale AI with confidence.

Yesterday · 08:00 UTC

Researchers used an OpenAI reasoning model to help diagnose rare diseases, identifying 18 new diagnoses in previously unsolved cases.

Yesterday · 11:00 UTC

Learn how GPT-5.5 Instant improves ChatGPT’s health and wellness responses with stronger reasoning, better context, clearer communication, and physician-informed evaluations.

Yesterday · 18:00 UTC

In the latest Threat Source, Hazel channels her inner Spielberg to explore why humans are delightfully irrational, reminding us that while security best practices are simple in theory, they’re a lot harder to pull off wh…

Yesterday · 10:00 UTC

Cisco Talos detailed a new approach to reverse engineering that pairs local AI agents with traditional analysis tools like the VB6 disassembler vbdec. Instead of awkwardly bolting AI onto the software, vbdec exposes its…

17 Jun 2026 · 13:38 UTC

Key Points Introduction In this research, we analyze a clipboard hijacker campaign that is hidden inside a collection of “solutions” and “tools” that claim to give users an unfair advantage. These offers include Solana a…