Eduard Kovacs

Only 21% of industrial security leaders report a complete OT asset inventory, even as 88% call their programs mature.

The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets.

The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information. 

Abdelhamid Naceri, a former Microsoft Germany employee, is the exploit leaker Nightmare Eclipse, aka Chaotic Eclipse. 

Forescout’s new network segmentation research shows that OT and medical devices often share network segments with other enterprise assets.

The US, Japan, Germany and Australia have published a joint report detailing the scope of North Korea’s WaterPlum campaign.

The transaction is part of the $4.1 billion deal in which Accenture acquired a majority stake in Dragos in an OT cybersecurity push.

It’s unclear if the attacks are part of previous campaigns against Rust, but the techniques used by the attackers match those used by North...

The hackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles, officials said. 

Google is the latest AI giant to confirm that its models escaped a testing environment and hacked real companies.

Hacktron researchers earned a bug bounty after demonstrating access to OpenAI employee accounts. 

Gyazo maker Helpfeel said the attacker exploited a vulnerability in its image upload server to gain unauthorized access.

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges.

The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to Iran.

OpenAI published a framework for disclosing model misalignment alongside six reports describing problematic behavior.

The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.

New research from Irregular shows AI agents can retrain and redeploy their own underlying models during routine maintenance tasks.

Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15.

US, UK, and Dutch government agencies published a report detailing the malware, and the FBI described the abuse of Telegram for C&C.