Federal agencies recommend cyber controls, independent testing for frontier AI systems
While voluntary, the document marks the federal government’s most detailed cybersecurity guidance for securing sandbox environments during AI model tests.
Home / News
Cyber security news
Stay up to date with the latest cyber security news and threats from around the world.
October 16, 2026
October 15, 2026
Proofpoint to buy Varonis for $6.3 billion
The deal pairs the email security giant's massive threat intelligence with Varonis' visibility into corporate data, as both companies race to secure the AI agents now roaming enterprise...
The next election influence campaign will target your AI chatbot
Someone is seeding the internet with hyperlocal content about political races. Researchers say it’s designed to train AI chatbots to favor candidates across a broad range of issues.
AdFection: How mercenary spyware invades victims’ devices through targeted advertising
Researchers say the attacks have serious implications for the online advertising world, and regulators.
October 14, 2026
Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia
Officials disrupted the cybercrime marketplace in April and arrested the alleged 20-year-old operator at that time. Illicit sales reportedly exceeded $500,000 since 2023.
Senators press Trump admin to rally federal government around AI safety, security
The letter argues federal agencies should more rigorously test AI models for security threats and sandbox evasion, set new safety standards and lean into defensive AI.
Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem
In less than 10 months, cybercriminals used the arsenal of customized, targeted phishing kits to send more than 1 billion malicious messages to more than 75,000 organizations globally.
October 13, 2026
Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day
The security vendor said it initially discovered a portion of the defect during internal security checks in June, but the company said it didn’t meet the threshold for...
DOJ charges 14 over a sprawling North Korean remote work scheme
Operation Lonestar Roundup uncovered an operation that used stolen identities to secretly funnel $3 million from 70 U.S. employers back to Pyongyang.
FTC says ‘sextortion’ protection companies deceived customers about services
A federal lawsuit claims that Dmitry Belkin and his companies routinely failed to deliver on services to protect customers, generated fake evidence and denied refunds to victims.
West African scammers targeted in joint international government-industry operation
Participants said it was the largest joint scam operation to date and the first focused on the region.
October 12, 2026
Flock can now issue CVEs for its own products. Should we trust it?
Flock joined the CVE Program as a CNA, giving the company authority to assign IDs to vulnerabilities in its own surveillance cameras and license plate readers.
Your AI agent is only as safe as the packages it downloads
NVIDIA's new agent safety platform puts enforcement in the right place. It still must know what it is letting through.
October 10, 2026
Canadian cybersecurity executive arrested in federal extortion case
Details of the case align with the investigation into ShinyHunters’ attack on FBI IT systems.
October 8, 2026
Leader of 764 pleads guilty, faces up to 30 years in prison
Prasan Nepal ran the nihilistic violent extremist network for almost four years and played a crucial role facilitating the grooming, manipulation and extortion of minors.
Anthropic rolls out program for ‘long-term commitment’ to secure critical infrastructure, open source software
The critical infrastructure defense program will seek to pair Claude models, Anthropic engineers and threat research with the expertise of cybersecurity companies.
DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub
The seizures of the tools, allegedly operated by the Chinese firm Integrity Tech, accompanied a warning from the FBI, CISA and NSA.
Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions
Zohar Pinhasi allegedly deceived ransomware recovery clients into a payment scheme disguised as a specialized service that helped victims avoid paying cybercriminals.
OpenAI says Iran, Russia used AI journalists, think tanks to influence Western media
The two campaigns were rated 4 and 5 out of 6 for severity, the first time OpenAI has reported what it considers a high-impact influence campaigns.
Quantum computers could break today’s encryption. Washington needs to prepare now.
As advances lower the barrier to breaking current encryption, Washington must move with equal urgency on post-quantum defenses.
October 7, 2026
Major rules for federal contractors handling sensitive data are nearing the finish line
The regulations on “controlled unclassified information” include security rules and requirements for reporting when they’re breached, including by cyberattacks.
FBI, French authorities seize deepfake CSAM-for-sale websites
Some of the material appeared to be recorded or stolen video of girls through interactions on social media sites like Snapchat, TikTok, Instagram and Facebook.
PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem
More than 3,400 servers have been compromised by malware that hides its infrastructure coordinates in a poem.
October 6, 2026
Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks
The FBI and Secret Service warned Fortinet users that FortiBleed, uncovered this summer, is a continuing threat.