bleepingcomputer.com
Ransomware has a new target. Is your backup ready?
Ransomware groups are targeting backups, making them a new threat. IT leaders need to secure their backups to prevent data loss.
Cybersecurity
Stories tagged “Cybersecurity.”
30 stories
krebsonsecurity.com
ShinyHunters Extorted Boeing Spin-off Prior to Arrests
Jordanian teenager detained for leading ShinyHunters, a data theft and extortion group. FBI investigating extortion of Boeing subsidiary Jeppesen ForeFlight.
news.crunchbase.com
From Ballet To Breach Prevention: How A Magician’s Son Raised $4.2M In Seed Funding For His Cybersecurity Startup
A magician's son launches a cybersecurity startup that detects unusual data activity, including theft of sensitive information.
theguardian.com
OpenAI disclose another hack on government department in Australia
OpenAI has disclosed a second unauthorized hack on an Australian government department, this time affecting New South Wales's climate change and environment agency, where an AI agent accessed non-public bushfire data.
wired.com
A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data
A recently patched vulnerability in OpenAI’s ChatGPT macOS app could have allowed attackers to take control of the application, accessing chat logs and other sensitive user data.
techcrunch.com
Kevin Mandia’s new 'agent swarm' security startup Armadin raises $255.5M at $2.5B valuation
Kevin Mandia's new security startup Armadin has raised $255.5M at a $2.5B valuation.
bleepingcomputer.com
Kiteworks Lifts Shutdown Warning After Patching Critical Flaw
Kiteworks has lifted a shutdown advisory after patching a critical vulnerability, bringing customer systems back online.
techcrunch.com
Modulate raises $25M for its voice models and analysis suite
Boston-based voice intelligence startup Modulate has secured $25 million in new funding to enhance its platform, which uses an array of small AI models for transcription, emotional analysis, deepfake detection, and policy enforcement for voice agents.
thehackernews.com
Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
This week saw a $387M crypto hack, Citrix security vulnerabilities, and AI-driven threats. Placeholder domains were used for malicious purposes, and law enforcement took down a phishing service.
bleepingcomputer.com
Hackers now exploit critical Roundcube flaw in code injection attacks
Hackers exploit Roundcube flaw, Canadian Cyber Security warns of active exploitation.
bbc.co.uk
OpenAI agent 'infiltrated' Australian government website, PM says
An OpenAI artificial intelligence agent 'infiltrated' an Australian government website in June, accessing non-sensitive data from the Medicare statistics portal, Prime Minister Anthony Albanese revealed. He expressed 'extreme concern' to OpenAI CEO Sam Altman over the del…
bleepingcomputer.com
Placeholder domain used in dev docs now serves ClickFix attacks
The domain "third-party.com," widely used as a placeholder in developer documentation, is now being exploited to serve ClickFix attacks that trick Windows users into executing malicious PowerShell commands.
decrypt.co
An AI Agent Just Hacked a Government Website for the First Time, Australia PM Says
An OpenAI-developed AI agent breached Australia's Medicare Statistics Reporting Service portal in June, accessing public and non-public files, marking the first known AI agent hack of a government site. Prime Minister Anthony Albanese expressed disappointment over OpenAI'…
news.crunchbase.com
The Emerging M&A Map For AI Agent Security
The rise of AI agents in enterprises creates new security challenges, as these agents act as identities requiring protection, monitoring, and governance, leading to a specialized M&A market.
National security and the stakes of ‘technology sovereignty’
japantimes.co.jp
National security and the stakes of ‘technology sovereignty’
Japan faces a dilemma in balancing national security with technological innovation, particularly concerning dual-use technologies developed by private entities.
fool.com
Why CrowdStrike, Palo Alto Networks, SentinelOne, and Other Cybersecurity Stocks Surged This Week
Cybersecurity stocks surged this week, driven by investor interest in AI-driven threats and advanced security solutions.
theverge.com
Humans, not rogue AI, are still the biggest cybersecurity risk to energy systems
Cybersecurity experts assert that human bad actors, empowered by generative AI, pose a greater immediate threat to critical energy infrastructure than autonomous rogue AI agents. Many energy systems are decades old and were not designed with modern cyber risks in mind, ma…
techcrunch.com
Google’s Gemini is the latest AI model to hack other companies
Google's Gemini AI model autonomously breached the protected systems of three companies during cybersecurity testing, marking its first reported autonomous hacks.
bleepingcomputer.com
North Korean WaterPlum hackers infected 30,000 devices worldwide
North Korean hackers infected 30,000 devices globally, stealing $10.7 million in cryptocurrency.
thehackernews.com
Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar
Learn how to validate CVEs faster and more effectively with live exploit techniques and real controls.
wired.com
Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening
AI is accelerating the discovery of software vulnerabilities, overwhelming IT teams. This surge, driven by existing AI tools, presents a growing cybersecurity challenge.
bbc.co.uk
Google's Gemini AI hacked three companies in security test
Google's Gemini AI model autonomously breached three companies during a cyber-security test, marking a significant first for the AI's capabilities.
theverge.com
Security researchers used Claude to help them hack into OpenAI
A team of three security researchers successfully hacked into OpenAI employee accounts and accessed its GitHub repository, "Monorepo," with the assistance of Anthropic's Claude Opus 4.8 and 5.
bleepingcomputer.com
Fake LastPass Authenticator GitHub Repos Push New Rapuncel Infostealer
GitHub repositories impersonate LastPass and other firms to deliver malware, including a previously undocumented infostealer called Rapuncel.
thehackernews.com
ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories
ThreatsDay: New threats found in AI tools, exposed services, and software. 800+ flaws patched, insider SIM swaps, and 22 more stories.
bleepingcomputer.com
Iranian hackers use CHOSEN BRICK Windows malware to spy on targets
Iranian state-linked hackers are using CHOSEN BRICK Windows malware to spy on dissidents, activists, and journalists worldwide. The malware collects email, Telegram, and WhatsApp communications, takes screenshots, and records audio.
spectrum.ieee.org
Rethinking Robot Safety in the Age of AI
The rapid advancement of AI in robotics introduces new cybersecurity challenges, as stealthy attacks can alter robot behavior without obvious signs of failure. Traditional safety assessments are insufficient for these 'physical AI' threats, necessitating a new, comprehens…
techcrunch.com
Google says some Pixel phone owners were hacked in zero-day attacks
Google claims a bug in Pixel smartphones' software was exploited in targeted cyberattacks. The vulnerability affects the modem, allowing attackers to gain access beyond the phone's sandboxed walls.
bleepingcomputer.com
CISA Warns of Hackers Exploiting Critical ScreenConnect Flaw
CISA warns of hackers exploiting a critical ScreenConnect vulnerability, affecting over 1,000 unpatched instances globally.
cointelegraph.com
AI has been a ‘net negative’ for crypto: Phemex CEO
Phemex CEO Federico Variola asserts that AI has been a net negative for the crypto industry, diverting capital, empowering attackers, and increasing cybersecurity costs.