The day's cybersecurity headlines from public sources, in one place. Search them, filter by theme or CVE, or show only vulnerabilities CISA has confirmed are being exploited. Every headline links to the original.
For my own read on what the news means for your business, see Insights.
300 stories match. Clear filters
-
Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes
The enigmatic service is providing popular AI coding tools to mainland China and other regions where OpenAI and Anthropic products are not officially for sale — but with key security features turned off.
-
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observed on October 25…
-
AI Takes Root in Hospital Corridors, Raises Security Stakes
Artificial intelligence is everywhere in healthcare, from doctors' intake forms to cancer screenings. But in some cases, life-and-death uses are outpacing cybersecurity.
-
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.
-
123 Reg discloses suspected AI-enabled attack on customer data, China-nexus suspected (backfill, 2026-10-28)
Per the briefing, the UK domain registrar disclosed a suspected AI-enabled attack on customer data and links it to a China-nexus actor. Details not verified.
-
Wazuh and AI for Enhanced SOC Workflows
Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, and support faster decision-making…
-
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report. The exploits were built in the lab after the model was prompted, not seen in any real attack, and…
-
3 Frameworks to Protect CISOs & Orgs Against AI Liability
Cyber leaders can get ahead of AI liability with rigorous documentation, transparency, and smart contract negotiations with AI vendors.
-
Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills
Nathan Hamiel outlines potential SecOps horror in the AI midst, as core technical capabilities go the way of reading an atlas or remembering phone numbers.
-
'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants
The malware's focus on AI tools expands the traditional infostealer playbook to expose a forest of AI sessions, sensitive business data, and developer infrastructure from a single compromised endpoint.
-
OpenAI exec: AI-generated bug reports are overwhelming open-source maintainers
Michael Aiello, speaking at the DataTribe Challenge, said low-quality AI vulnerability reports are swamping maintainers and some have stopped accepting them. OpenAI reports 661 patches developed and 458 accepted by maintainers under its Daybreak program, and says it worked with the PHP Foundation…
-
TrendAI: three AI-assisted campaigns hit Japan, including a 44-agent autonomous framework and edge device targeting
CyberStrikeAI ran recon through exfiltration against at least 19 organizations (16+ in Japan) in October. A second operator used an LLM to speed planning and tool building, and got in through a GIS server with default credentials during a 24-day campaign. A third used AI to build tools against…
-
Cathedral says its AI agents reached Anthropic internal business systems through third-party software; Anthropic disputes parts
Security startup Cathedral says AI agents found access paths in under 12 hours through vulnerable third-party sales, HR and IT software during a bug bounty engagement. Anthropic confirms access to some customer and partner business contact data and basic account records, and says it did not see…
-
ConnectWise cloud app abuse: Storm-0940 used AI agents against 2,250+ Microsoft 365 tenants; Huntress adds new detail
Microsoft attributes the activity to Storm-0940 (China state-aligned). Attackers used stolen credentials for a ConnectWise cloud backup application and its existing tenant permissions, so they signed in as applications and skipped user passwords and MFA prompts. The ARTEX multi-agent framework ran…
-
So Many AI Security Benchmarks, but None Tell the Whole Story
Measuring artificial intelligence model security gets complex, fast, thanks to a growing patchwork of benchmarks targeting different variables in the equation. But none replace testing against your own code and workflows.
-
Risks & Rewards: How AI Is Redefining the CISO's Role
Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.
-
In-the-Wild Attack Abuses AI Agents' Trust in Markdown
A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.
-
Trust Is Not What It Seems — and Fraudsters Are Counting on It
Threat actors don't need to rely on malware to breach organizations anymore. They're simply calling help desks and politely asking for access, with a little help from artificial intelligence.
-
AI Tools Are Generating Massive Attacks for Little Cost
One campaign targets 105 sites using open-weight models; in another, public models gained full domain control for $12. Cyber-defense will have to change.
-
Cyber Insurance's New Reality: Underwriting Isn't Enough
Rising AI, social engineering, and cloud risks are pushing carriers beyond risk transfer and deeper into cybersecurity itself.
-
AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack
Microsoft's Project Perception adds Guardian Agents to monitor and contain anomalous AI agents, but experts warn that policing unpredictable agents with other agents may compound — not contain — the risk.
-
Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants.
-
As AI Risks Grow, Insurers Split on Covering the Damage
Some build specialized agentic AI coverage, while major carriers quietly exclude it — leaving enterprises exposed without their knowledge.
-
Microsoft: China-aligned Storm-0940 used ARTEX AI agents to hit ConnectWise Cloud Backup and 2,250+ tenants
Microsoft says Storm-0940 used ARTEX, a Go-based agentic pentest framework, to automate scanning, password spraying and OAuth app abuse at "machine speed" against hundreds of organizations since September. On Oct 15 the attackers took over identities for several ConnectWise cloud apps and tried to…
-
UAE Transitions 50% of Government Services to Agentic AI
The United Arab Emirates says it's creating a foundation of security and safety as it transforms its public service footprint.