Cybersecurity News Hero

Combing the world for the cybersecurity stories you need to know.

Cybersecurity News
Medusa ransomware https://www.pexels.com/photo/sculpture-of-medusa-on-a-stone-wall-5209697/
500 Breaches Later, Medusa Ransomware Is Still Outrunning Its Warnings
September 14, 2026
The Medusa ransomware-as-a-service variant, first identified in June 2021, has been The United States Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA) released an advisory concerning Medusa ransomware on March 12th,…
Read More >
NemoClaw NVIDIA AI agent https://www.pexels.com/photo/close-up-shot-of-lobster-claw-8352775/
Just One Website Visit Silently Hijacks NVIDIA AI Agent
September 13, 2026
It wasn’t phishing or a stolen credential. It was just a browser tab opened by a researcher. That’s all it took to seize control of a sandboxed NVIDIA AI coding agent. Recently disclosed by Oasis…
Read More >
UK power plant siemens cyber attack https://www.pexels.com/photo/blue-and-red-metal-coils-with-electrical-wires-7867329/
UK Power Plant Cyberattack Comes Amid Wider OT Security Warnings
September 09, 2026
Hackers believed to be linked to Iran took a small British power generator offline for four days in July, in what is believed to be the first successful cyberattack to shut down a UK power…
Read More >
AI agents cyber attack Taiwan https://www.pexels.com/photo/cityscape-of-illuminated-taipei-at-sunset-taiwan-11720365/
AI Agents Autonomously Breached Taiwan Government Networks in Four Days
September 08, 2026
In July 2026, government cybersecurity monitors began to flag anomalous activity on Taiwanese government infrastructure. The discovery was traced back to a 160-megabyte archive of agentic AI operational logs, and researchers quickly realized they were…
Read More >
ToxicPanda Android Trojan https://www.pexels.com/photo/eating-panda-bear-14925845/
ToxicPanda 2.0 Turns Wireless Debugging Into a Master Key for Android Banking Fraud
September 07, 2026
First discovered in late 2024 by cybersecurity company Cleafy, ToxicPanda has built up a known history in the past few years as an Android banking trojan with operations focused in Europe. Recently, Zimperium’s zLabs team…
Read More >
Exchange cumulative update https://www.pexels.com/photo/a-company-logo-on-a-wall-10142683/
AI-Powered Vulnerability Hunting Is Outpacing Microsoft's Ability to Patch
September 04, 2026
A blog post published on August 13th by Microsoft’s Exchange Team outlines a further delay in the release of Exchange SE Cumulative Update 1 (CU1). The update was initially expected in the first half of…
Read More >
White House private cyber retaliation https://www.pexels.com/photo/people-standing-outside-the-fence-of-the-white-house-in-washington-12319862/
U.S. Deputizes Private Companies for Offensive Cyber Operations Against Criminal Networks
September 02, 2026
On August 12th, 2026, a presidential memorandum was published authorizing Participating Companies—vetted private contractors—to conduct government-directed cyber operations. The new program covers both Cyber Surveillance Operations and Cyber Effects Operations. While Surveillance Operations include intelligence…
Read More >
Ontinue Twinloot https://www.pexels.com/photo/close-up-of-data-transfer-screen-with-keyboard-38117126/
New Python Implant Uses Microsoft Services to Hide C2 Traffic
September 01, 2026
A newly identified Python malware framework uses Microsoft services to conceal its command-and-control (C2) activity, according to researchers at Ontinue. Dubbed TWINLOOT, the malware routes traffic through SharePoint and Teams infrastructure and uses a headless…
Read More >
OpenAI Astra https://www.pexels.com/photo/white-caution-cone-on-keyboard-211151/
OpenAI Can't Rule Out Astra Has Reached Critical Cyber Capability
August 31, 2026
OpenAI’s Astra model has been flagged for possible critical cyber capability, as the company states that it “cannot rule out” the possibility under its current Preparedness Framework. This is the first model to approach the…
Read More >
Gunra ransomware https://www.pexels.com/photo/close-up-shot-of-a-person-using-a-laptop-5475755/
Gunra Ransomware Altered MFA to Maintain Access
August 26, 2026
Attackers using the Gunra ransomware altered a victim’s authentication system to create a persistent way around multi-factor authentication, according to a new joint U.S.-South Korean government advisory. The Aug. 10 warning from the FBI, CISA,…
Read More >
Google post quantum cryptography PQC https://www.pexels.com/photo/visual-representation-of-magnetic-field-lines-38032287/
Google Cloud Maps Migration for Post-Quantum Cryptography
August 25, 2026
Securing infrastructure and services against the cryptographically relevant quantum computer of the future presents a major concern for the IT industry. Every encrypted connection will present a liability. The nation-state adversaries and organized threat actors…
Read More >
Paperclip AI agent https://www.pexels.com/photo/scattered-colorful-paperclips-5251349/
Paperclip Vulnerabilities Show How AI Agent Configuration Becomes Code
August 24, 2026
Open-source AI company Paperclip plays a significant role in orchestrating autonomous AI agents at scale, enabling organizations to centrally manage a company of AI agents. A design choice causes Paperclip to treat agent configuration as…
Read More >
Open Secure AI Alliance NVIDIA https://www.pexels.com/photo/hands-of-team-standing-together-6203631/
Open Secure AI Alliance Targets Security Risks Exposed by Hugging Face Breach
August 21, 2026
NVIDIA says it and more than 100 organizations, including Microsoft, IBM, CrowdStrike, Dell Technologies, Palo Alto Networks, HPE, Red Hat, and Hugging Face, have formed the Open Secure AI Alliance to develop and share open…
Read More >
BeyondTrust identity trust https://www.pexels.com/photo/portrait-shot-of-a-woman-5473960/
Research Finds Most Attacks Exploit Identity Trust, Not Bugs
August 17, 2026
BeyondTrust’s Phantom Labs was founded in 2025 to conduct research and share intelligence pertinent to the company’s security efforts. The recently released Phantom Labs Research Index explores the fruits of the first year of Phantom…
Read More >
Pathlock AI agents https://www.pexels.com/photo/data-codes-through-eyeglasses-577585/
AI Agents Approving Transactions Enterprises Can't See
August 14, 2026
Enterprise AI has quietly crossed a threshold. What began as a productivity layer for summarizing data and drafting reports has evolved into a class of digital workers with real authority, according to new research from…
Read More >
Cosmos DB CosmosEscape https://www.pexels.com/photo/view-of-a-galaxy-20881655/
CosmosEscape Flaw Could Have Exposed Every Azure Cosmos DB Account
August 12, 2026
A vulnerability chain in Microsoft Azure Cosmos DB could have allowed an attacker to read or modify customer databases across the service, according to research published by Wiz. Dubbed CosmosEscape, the chain began with a…
Read More >
Minnesota water treatment cyber attack https://www.pexels.com/photo/water-flowing-from-pipes-17882783/
Iranian Hackers Suspected in Attack on 30+ Minnesota Water Utilities
August 10, 2026
A recent cyberattack against water utilities in Minnesota has revealed the extent of the weakness in many operational technology (OT) environments. Municipal water systems largely run on aging and outdated OT, often exposed to the…
Read More >
Threatdown AI security https://www.pexels.com/photo/crop-cyber-spy-hacking-system-while-typing-on-laptop-5935794/
Criminal AI Is Easier to Find—and Harder to Monitor
August 07, 2026
In its new Cybercrime in the Age of AI report, ThreatDown points to a January 2026 attack on a Mexican municipal water utility as evidence that AI can help attackers work faster and beyond their…
Read More >
Subscribe for the Latest News
Webinars
Where AI Is Delivering Real Security Impact
Register Now
You're Not as Protected as You Think: IDC on the SaaS Recovery Myths
Register Now
Preemptive Cyber Defense: Prove Security Agents Before the Attack
Register Now