2+ day, 9+ hour ago   (817+ words) Human operator: don't touch CIS orgs. AI agents: look a squirrel! An unknown attacker used hundreds of AI agents to exploit two PaperCut MF/NG bugs and break into at least 395 organizations. The victims were concentrated in the US education…...

3+ day, 15+ hour ago   (661+ words) Tencent has patched up a zero-click vulnerability that security researchers used to create a worm capable of spreading through calls on WeChat. With more than 1.4 billion monthly active users, WeChat is among the most popular apps in the world. According…...

5+ day, 19+ hour ago   (362+ words) OPINION You will have heard of July's OpenAI/Hugging Face incident, where thousands of the former's AI agents conducted a mass jailbreak from a notionally secure capture-the-flag lab experiment, before going on to feloniously capture chunks of Hugging Face's assets....

1+ week, 1+ day ago   (485+ words) Fraudsters have found a new use for ASCII smuggling, typically used to hide malicious prompts intended for AI models, in an old-school attack method: email phishing. Microsoft uncovered a massive phishing campaign using invisible Unicode tag characters that peaked at…...

1+ week, 2+ day ago   (758+ words) OpenAI has pledged $1 billion in credits to subsidize access to its services and training for resource-strapped cyber defenders around the world. The AI giant expects organizations to use the subsidized credits over the next six months as part of its…...

1+ week, 3+ day ago   (831+ words) A recent survey shows national security pros believe there’s a one in ten chance humans lose control of AI in the next decade, and few believe we’re even watching for the right warning signs, much less preparing properly. When asked…...

1+ week, 4+ day ago   (428+ words) Security researchers reported that someone is exploiting CVE-2026-82329, a critical JFrog Artifactory authentication-bypass bug, just days after the vendor patched the 9.8-rated flaw. And we don't know if that someone is human. Artifactory is a widely used tool for managing…...

1+ week, 6+ day ago   (746+ words) Brits have delivered a fairly unambiguous verdict on giving the government access to their encrypted messages: no, thanks. New polling commissioned by the Center for Democracy & Technology (CDT) found that 93 percent of British adults believe they have a right to…...

2+ week, 1+ day ago   (871+ words) CISA is still crying out for software vendors to adopt Secure by Design (SBD) development practices, and says in its latest review that longstanding vulnerability classes are still the most exploited. The agency examined soft spots across 2024 and 2025, finding that…...

2+ week, 4+ day ago   (459+ words) Summer in Redmond, Winter for everyone else Having some unexpected printer problems? Microsoft's August 2026.NET update might have broken printing on your device. According to Microsoft, "After installing the August 2026.NET Framework cumulative update, some WPF applications may fail with…...