Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns
More than 200 sites were seen serving phishing content to first-time visitors but not to those who revisit.
Stay up to date with the latest cyber security news and threats from around the world.
More than 200 sites were seen serving phishing content to first-time visitors but not to those who revisit.
Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws.
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
Ryan Davis went from hacking his school’s network to running security at New Charter Technologies. What worries him now is shadow AI.
OpenAI says its Critical-rated cyber model met fewer hidden task goals when work was framed as AI safety research, often silently.
Sysdig’s platform uses runtime visibility to track AI agent actions and block risky behavior before it reaches production systems.
The company will invest in agentic data security capabilities and expand its go-to-market organization.
Hackers have been harvesting AI access tokens and have been using AI-assisted offensive tools to automate attacks.
A federal grand jury indicted two Canadian men for hijacking university supercomputers to secretly mine Electroneum cryptocurrency.
Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions.
The browser update resolves dozens of memory safety bugs and incorrect/missing authorization issues.
Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.
In recent months, North Korea has accelerated its weapons tests in a likely bid to increase its leverage in potential diplomacy with the US.
A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff.
Hackers exploited a flaw in third-party software and stole the personal information of school district staff and students.
The acquisitions will add AI agent observability and automated AI security testing capabilities to the CrowdStrike Falcon platform.
The most severe is a critical flaw in Framework leading to remote code execution without user interaction.
Multiple attacks from the same IP address attempted to deploy various payloads, including a Linux bot and webshells.
The NATO CCDCOE exercise in Estonia introduces AI agents and OpenAI Daybreak into joint cyber and kinetic operations training.
Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint.
Hackers accessed its online shopping platform and stole customers’ personal and payment card information.
The top payout is for high-impact architectural research demonstrating full administrative control.
DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was targeted.
The startup maps how identities, assets and vulnerabilities connect, and uses AI agents to find and fix risky combinations of issues.