SecurityWeek

The hackers staged numerous scripts for reconnaissance and CVE probing, along with brute-force utilities and privilege escalation tools.

The incident occurred in May, when RubyGems maintainers suspended new account registrations due to what appeared like malicious activity.

Hackers exploited a vulnerability in a VPN product to steal the personal information of roughly 240,000 people.

The updates resolve kernel vulnerabilities that could lead to memory corruption, privilege escalation, system termination, and information leaks.

The Humanist AI Code of Conduct draws a line between defensive cyber research and operational attack capability.

Ads led to a ClickFix page designed to trick macOS and Windows users into installing malware.

An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.

China’s Ministry of Foreign Affairs responded to a question about Amodei’s essay by saying that all parties should work together on AI.

Concerns over the potential risks of the technology are rising as new AI models become more powerful, heightening both the potential for misuse by people with criminal aims.

The company unintentionally disclosed users’ information to a third party impersonating a government agency.

As researchers warn that misaligned AI could threaten human survival, even beneficial systems may erode the critical thinking that defines our humanity.

The Chinese-language input method editor for Windows can allow attackers to execute arbitrary code remotely.

Security leaders are struggling to modernize cyber hygiene and prevent over-privileged agents from causing unintended harm.

Stolen credentials were used in a multi-month campaign to access subscriber personal data and billing records.

The vulnerabilities can allow attackers to bypass authentication and elevate their privileges to administrator.

The flaw allows attackers to send files and execute them without authorization through an active remote session.

Dario Amodei warned that within six to 12 months AI could be capable of leading a swarm of agents that could take over the entire internet.

Multiple espionage-motivated threat actors have adopted BlueMoon in opportunistic, rushed deployments.

Anthropic said the users did not succeed in “fielding an operational device” but did carry out a failed test of a guided rocket.

Analysis of 2.47 million simulated attacks shows why organizations should measure credential leaks and reporting, not just clicks.