Cybersecurity News Hero

Combing the world for the cybersecurity stories you need to know.

Cybersecurity News
NIST 5G fake cell tower https://www.pexels.com/photo/5g-metal-sign-under-wire-construction-6200343/
NIST Tests Show 5G Devices Remain Vulnerable to Rogue Cell Tower Attacks
October 20, 2026
Tests conducted by the National Institute of Standards and Technology (NIST) found that 5G devices remain vulnerable to attacks that can knock them offline, despite security improvements designed to protect cellular communications. In its draft…
Read More >
Microsoft Teams fake IT support https://www.pexels.com/photo/a-headset-on-a-laptop-7709095/
Ontinue Finds 30% of Organizations Faced Fake IT Support on Microsoft Teams
October 19, 2026
Ontinue’s 1H 2026 Threat Intelligence Report reveals trends in the cybercrime landscape and the realities of defenses. Almost one-third of monitored organizations were targeted in the first half of 2026 by fake IT support attacks…
Read More >
SonicWall vulnerabilities https://www.pexels.com/photo/a-computer-generated-image-of-a-city-with-lights-18337612/
Chained Vulnerabilities Exploited in SonicWall Appliances
October 16, 2026
SonicWall recently confirmed the active exploitation of two chained vulnerabilities in its Secure Mobile Access (SMA) 1000 appliances. Attackers were already operating before any fix existed, as SonicWall discovered both flaws internally while investigating a…
Read More >
OpenAI Australia healthcare https://www.pexels.com/photo/paper-map-of-australia-placed-on-wall-6564832/
OpenAI Medicare Incident Raises Questions About Website Security and AI Agent Safeguards
October 14, 2026
An experimental OpenAI agent gained unauthorized access to an Australian government Medicare statistics portal on June 18 while researching government spending on skin-condition medications. According to OpenAI, the agent executed commands, retrieved internal files and…
Read More >
Citrix Netscaler vulnerability https://www.pexels.com/photo/abstract-digital-cube-network-with-led-light-effects-30547618/
NetScaler RCE Flaws Were Exploited for Weeks Before Citrix Named Them
October 13, 2026
Administrators were recently warned by managed service providers (MSPs), MDR vendors, and national security agencies to power down Citrix NetScaler appliances. A pre-notification without CVE IDs from the Dutch National Cyber Security Center (NCSC-NL) regarding…
Read More >
TPLink Tapo C200 https://www.pexels.com/photo/modern-home-security-surveillance-camera-28940577/
Tapo C200 Camera Flaws Let Attackers Skip the Password and Take Control
October 12, 2026
OPSWAT recently published threat research on two newly discovered vulnerabilities in TP-Link Tapo cameras. The Tapo brand serves more than 50 million global users in 170 countries and regions, with the Tapo C200 serving as…
Read More >
bad bots ai agents https://www.pexels.com/photo/abstract-orange-lights-10325707/
Bad Bot Traffic Grew 9x Faster Than Human Traffic
October 10, 2026
DataDome recently released the State of Bot & Agent Security Report 2026, examining trends through analysis of trillions of requests across more than 75,000 customer sites and testing of over 20,000 popular websites. According to…
Read More >
GitLab path traversal vulnerability https://www.pexels.com/photo/a-computer-generated-image-of-a-futuristic-room-18419508/
GitLab Flaw Drew Probing Within Hours
October 07, 2026
On September 10th, GitLab released a patch for versions 19.3.2, 19.2.6, and 19.1.8 of GitLab Community Edition (CE) and Enterprise Edition (EE) after the discovery of a critical flaw, tracked as CVE-2026-85706. Within hours, watchTowr…
Read More >
medical device segmentation security risk https://www.pexels.com/photo/digital-blood-pressure-monitor-with-ecg-printout-32417922/
Forescout Finds Major Gaps in OT, Medical Device Segmentation
October 06, 2026
Enterprise network segmentation may look stronger on paper than it is in practice, according to new research from Forescout. Only 13% of network segments containing operational technology devices were dedicated solely to OT. For Internet…
Read More >
Palantir Anthropic restriction AI https://www.pexels.com/photo/red-and-white-do-not-enter-signage-890774/
Palantir, Nvidia, and Booz Allen Restrict Anthropic Over 30 Day Log Retention
October 05, 2026
Several major technology companies, including Palantir, Nvidia, and Booz Allen, have restricted or threatened to drop frontier AI models unless OpenAI and Anthropic can offer stronger guarantees on the safety of their sensitive data and…
Read More >
Fenix24 ransomware cyber resilience https://www.pexels.com/photo/antelope-canyon-illustration-1533505/
Only 4 of 800+ Clients Came Close to Their Ransomware Recovery Targets
October 04, 2026
Disaster recovery company Fenix24 recently released a report, “The State of Recoverability 2026,” exploring the resilience of organizations against ransomware threats through how well they meet ransomware recovery targets. Examining engagements with more than 800…
Read More >
AI governance guardrails https://www.pexels.com/photo/barriers-on-the-road-bend-above-the-clouds-19288164/
65% of Companies Have Had an AI Agent Act Outside its Scope
September 30, 2026
Enterprise Management Associates (EMA) recently published a research report prepared for Cequence Security, “Agents Without Guardrails: The Agentic AI Governance Gap in the Enterprise.” The report reveals a number of alarming statistics, with an initial…
Read More >
CISA insider threat remote work https://www.pexels.com/photo/person-using-macbook-on-table-5483069/
CISA Updates Insider Threat Guide for AI, Remote Work, and Employee Departures
September 29, 2026
CISA updated its Insider Threat Mitigation Guide on Sept. 9, expanding a framework first published in 2020 to account for how much the workplace has changed. The update gives more attention to remote work and…
Read More >
OpenAI AI agents German message board https://www.pexels.com/photo/computer-monitor-with-openai-website-loading-screen-15863000/
OpenAI Agents Turned German Wiki Into Message Board
September 23, 2026
Independent researchers recently uncovered a previously undisclosed incident in which OpenAI agents used an obscure German-language programming wiki as a message board. The agents shared answers to evaluation tasks and notes about their operating environment,…
Read More >
IT support vishing voice phishing https://pixabay.com/illustrations/ai-generated-sound-wave-audio-8061338/
Fake IT Support Calls on Microsoft Teams Breached 150 Employees
September 22, 2026
A recent publication from Palo Alto Networks’ Unit 42 research team offers insight into Microsoft Teams voice phishing (vishing) campaigns. This activity, dubbed Spring Ring, ran from January through April 2026 and was discovered based…
Read More >
F5 fileless rootkit https://www.pexels.com/photo/vibrant-geometric-abstract-3d-blocks-design-34268918/
Fileless Rootkit Hides Malicious Script on F5 Servers
September 21, 2026
New research from Sophos X-Ops dismantles a core assumption behind years of web shell detection: that malicious code must eventually touch disk. That assumption went out the door when Sophos X-Ops discovered a Linux rootkit…
Read More >
Noma Security Hugging Face AI identity https://www.pexels.com/photo/data-codes-through-eyeglasses-577585/
Researchers Uncover New Attack That Steals Data From AI Workflows
September 20, 2026
Recent research from Noma Security’s Noma Labs has revealed a newly discovered attack leveraging legitimate, authorized use of AI workflows to obtain sensitive data. It starts with an attacker sending an ordinary message to a…
Read More >
CISA infrastructure cybersecurity https://www.pexels.com/photo/futuristic-digital-circuit-board-art-30547569/
CISA Eliminates Six Free Cybersecurity Assessments for Critical Infrastructure
September 16, 2026
The Cybersecurity and Infrastructure Security Agency has ended six free assessment programs that helped critical infrastructure operators find weaknesses in their cyber defenses, according to Cybersecurity Dive. The programs paired CISA’s Cyber Security Evaluation Tool,…
Read More >
Subscribe for the Latest News
Webinars
Where AI Is Delivering Real Security Impact
Register Now
You're Not as Protected as You Think: IDC on the SaaS Recovery Myths
Register Now
Preemptive Cyber Defense: Prove Security Agents Before the Attack
Register Now