Eduard Kovacs

The private equity firm appears to have been targeted as part of a campaign focusing on major financial companies.

Claude Security, currently in public beta for Claude Enterprise customers, now runs codebase scans on Mythos 5.

The spyware-equipped Manic, a persistent Grandoreiro campaign in Latin America and Europe, and an expanded ToxicPanda 2.0 malware.

Two industry surveys released this week by Kiteworks and CyberSheath paint a consistent picture of the defense industrial base.

Exploitation of the Zimbra Collaboration vulnerability CVE-2026-73570 has been observed by Poland’s CERT Polska.

The action taken by OpenAI comes in light of the Hugging Face incident and the discovery of the Astra model’s advanced capabilities. 

A cybersecurity advisory with technical details and recommendations has been written by the NSA, CISA and other agencies.

The cybercrime gang has listed major companies such as Shell, Philips, Fiserv, Zebra, Mindray, and Largan Precision.

The data breach was initially believed to affect roughly 350,000 people, but the HHS breach tracker shows a far bigger impact.

Fortinet will use Virtue AI technology to enhance its AI security portfolio, including for AI models, applications, and agentic systems.

The AI security testing firm has shared information on a recently disclosed incident involving Anthropic AI models.

Anthropic has been conducting tests to identify issues in how AI agents interact with each other.

The vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components.

Google Cloud outlines its roadmap to full post-quantum cryptography readiness, with key milestones targeted for 2027 and 2028.

The root cause of the incident is believed to be a compromised AWS access key that was exposed in publicly available JavaScript build artifacts.

Significant cybersecurity M&A deals announced by Barracuda, CrowdStrike, Cyera, Okta, Palo Alto Networks, and Qualcomm.

Contracts may require a $1 million bond, which will be forfeited if a company fails to comply with operational requirements.

The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.

Signal has also made a security announcement: an automatic key verification feature to complement its safety number system.

Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution.