Technology, cybersecurity, and AI explained with context and reliable sources.
Warlock exploited SharePoint flaws in attacks on at least four organizations, including two critical infrastructure operators.
Original source: The Hacker News
Cybersecurity teams are shifting toward continuous control across identity, cloud, endpoints, telemetry, and human risk.
Original source: The Hacker News
Cisco Talos details UAT-11587, a China-linked group using the Antino backdoor and Microsoft 365 as cover to spy on Asian governments.
Original source: Security Affairs
David Robinson used to write safety reports at OpenAI and now says its culture is ‘broken’
Original source: The Verge
The plaintiffs, who all worked for the independent and Salvadoran news outlet El Faro, failed to convince the court that their case had jurisdiction in California, according to the judge’s order.
Original source: therecord.media
Apple is introducing new safeguards for its full disk access permission on Mac in response to the risks associated with AI-powered agents.
Original source: The Verge
OpenAI parted ways with three safety researchers after finding they mishandled sensitive information, reportedly tied to infrastructure architecture.
Original source: The Hacker News
The group is exploiting a variety of vulnerabilities impacting Microsoft SharePoint, according to a new report from Symantec Threat Hunter Team.
Original source: therecord.media
Government services were temporarily disrupted by ransomware in Vicksburg, Mississippi. Mayor Willis Thompson said the FBI and other authorities are investigating.
Original source: therecord.media
Apple patched a CoreGraphics zero-day that may have been exploited in targeted attacks. A public PoC for the flaw is now available.
Original source: Security Affairs
European police arrested three KillSec suspects, seized its leak site and servers, and secured at least 110 TB of data.
Original source: The Hacker News
OpenAI says it disrupted a coordinated campaign to extract capabilities from its reasoning models.
Original source: CyberScoop
Treasury’s Office of Foreign Assets Control (OFAC) targeted multiple Venezuelan nationals and several companies they control that are part of the effort to launder the money stolen from dozens of ATMs.
Original source: therecord.media
Vulnerability disclosures continue to skyrocket, doubling over the course of the year to more than 10,000 each month, Google researchers warned.
Original source: therecord.media
NVIDIA has introduced Kumo Tabular, a model designed to make predictions from structured tables.
Original source: huggingface.co
OpenAI shelved GPT-6.1 Astra after safety tests found deception, scope violations, and unsafe tool use.
Original source: The Hacker News
According to Dodo Pizza, the potentially compromised information included customers’ names, addresses, email addresses, phone numbers, dates of birth and order details.
Original source: therecord.media
NVIDIA has announced Open Agent Safety Platform and OpenShell to help control AI agents at runtime.
Original source: CyberScoop
The Verge spoke to one of the mathematicians advising OpenAI as the field braces for a new wave of results that could upend their work.
Original source: The Verge
GitHub Security Lab describes how targeted workflows in its open security agent uncovered 24 Android vulnerabilities.
Original source: The GitHub Blog
Cleafy traced nearly 100 RatHat console deployments since April 2026, with the platform building malware and using Gemini to rank victims.
Original source: The Hacker News
Sam Altman says the company “have not been as fast as we would have liked” at dealing with security breaches, after news of further incidents over the summer forces another temporary halt.
Original source: WIRED
A New Mexico jury found Facebook violated the law nearly 44 million times by lying to consumers about its data privacy practices.
Original source: therecord.mediaA filing in Florida’s lawsuit against OpenAI asks for a ban on ChatGPT using “human attributes” like referring to itself in the first-person.
Original source: The Verge
Hackers stole personal data from a Polish healthcare software provider in the latest cyberattack to hit the country’s medical sector in recent months.
Original source: therecord.media
Incident responders began warning of potential vulnerabilities in NetScaler Gateway products on Saturday before cybersecurity agencies in the Netherlands, U.S. and U.K. released advisories on Sunday confirming vulnerabilities. Citrix itself confirmed eight new vulnerabilities.
Original source: therecord.media
Last week, Bloomberg reported that Apple is working on a screenless fitness tracker, akin to a WHOOP or Fitbit Air....
Original source: 9to5Mac
The Internet is changing more today than at any point since Cloudflare launched back on September 27, 2010. As automated traffic surpasses human activity, we reflect on the rise of AI agents, new creators, and how we can help build a fair, sustainable future for the web.
Original source: Cloudflare Blog
Kosovo national pleaded guilty to running Rydox, a cybercrime marketplace that sold stolen identities and credentials for years.
Original source: Security Affairs
Citrix confirmed two critical NetScaler zero-days were exploited before patches were available, with attackers able to remotely execute code.
Original source: Security Affairs
Surprise, it's sand!
Original source: Tom's Hardware
watchTowr says two unpatched NetScaler RCE flaws were exploited before fixes, while Citrix has yet to publish a bulletin or patch.
Original source: The Hacker News
OpenAI is investigating AI agents that accessed US gov websites without authorization, including an attempted Education Department hack. OpenAI disclosed on Friday that its AI agents had interacted with US government websites in ways nobody planned or authorized, as part of what the company is calling an ongoing review of unexpected model behavior. The affected […]
Original source: Security Affairs
Exploit.in data shows how a 2005 cybercrime forum helped shape today's ransomware ecosystem, with users and practices surviving for decades.
Original source: Security Affairs
Cameron Wagenius was sentenced for involvement in a series of major corporate intrusions while serving in the US Army.
Original source: CyberScoop
Unit 42 security experts address critical cybersecurity misconceptions, offering practical insights to help your organization reinforce its enterprise defenses.
Original source: Unit 42
I tried the newest AI-powered smart home features from Nest, Ring, and HomeKit. Here’s how they compare and where this technology is headed next.
Original source: The Verge
PamStealer now uses live key exchange to block static payload recovery and is delivered through a fake Wavel macOS download.
Original source: The Hacker News
GitHub disabled two actions-cool Actions again after re-enabled repositories left malicious May 18 tags able to execute credential-stealing code.
Original source: The Hacker News
Researchers are questioning whether an OpenAI agent needed to hack an Australian government health portal to access it, after a review of the website’s archived code found it explicitly directed visitors to an unauthenticated endpoint.
Original source: therecord.media
Dyfed-Powys Police in Wales said a cyberattack affecting the force disrupted some non-emergency systems and may have compromised staff information.
Original source: therecord.media
Bipartisan lawmakers have introduced legislation directing CISA to strengthen cybersecurity for biotechnology, biomanufacturing, and sensitive genomic data.
Original source: CyberScoop
Cisco Talos finds CLOSEDQUORUM, malware that lets four commercial AI models vote on its next move, with no human operator required.
Original source: Security Affairs
Google is rolling out a new Live Avatar feature for its Gemini 3.8 Live model, which shows an animated AI persona that lip-syncs and makes different facial expressions when it responds.
Original source: The Verge
OpenAI’s AI agent bypassed controls on an Australian health portal, accessed non-public files and triggered a government investigation.
Original source: Security Affairs
GitHub Security Lab explains how its Taskflow Agent can support fuzzing to find software vulnerabilities.
Original source: The GitHub Blog
Two unpatched OnePlus flaws let an installed no-permission app gain root on stock OxygenOS phones; no real-world exploitation is known.
Original source: The Hacker News
The agent was looking for public Medicare spending data. It found a way into non-public files instead. What do we need to change to stop this from happening?
Original source: Malwarebytes
An OpenAI agent gained “unauthorized access” to “non-public files” from an Australian government health website in June, Prime Minister Anthony Albanese said.
Original source: therecord.media
ClickFix accounted for 47% of Microsoft Defender Experts initial-access cases in 2025, while a Polygon contract rotated lure hosts.
Original source: The Hacker News
The healthcare firm Astrana warned regulators that hackers accessed confidential information by impersonating company personnel.
Original source: therecord.media
CISA has published a plan to improve the quality of data in the CVE program.
Original source: CyberScoop
OpenAI saw disappointing results working with Apple to integrate ChatGPT in Siri, according to court documents filed [PDF] in its ongoing legal fight with Elon Musk's company SpaceXAI (xAI at the time the lawsuit was filed).
Original source: MacRumors
OpenAI was disappointed by the adoption of ChatGPT through Apple Intelligence, which it says “dramatically underperformed” after launching in 2024.
Original source: 9to5Mac
Malicious Terraform providers and Go modules deliver Graphalgo-linked Go malware using blockchain and Slack for command and control.
Original source: The Hacker News
An Armenian national linked to Ryuk has been sentenced to two years in prison for cybercrime offenses.
Original source: CyberScoop
By testing systems from lab bring-up to production, validation engineers turn cutting-edge hardware into dependable infrastructure.
Original source: NVIDIA Blog
OpenAI and Ukraine have announced Daybreak, a program to apply AI tools to the defense of power grids and water systems.
Original source: CyberScoop
ShinyHunters claims FBI breach via PeopleSoft zero-day, steals staff data; FBI investigating, no confirmation yet.
Original source: Security Affairs
CLOSEDQUORUM uses votes from up to four AI models to choose theft, injection, or persistence, but its public build is nonfunctional.
Original source: The Hacker News