Eduard Kovacs

The US, Japan, Germany and Australia have published a joint report detailing the scope of North Korea’s WaterPlum campaign.

The transaction is part of the $4.1 billion deal in which Accenture acquired a majority stake in Dragos in an OT cybersecurity push.

It’s unclear if the attacks are part of previous campaigns against Rust, but the techniques used by the attackers match those used by North...

The hackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles, officials said. 

Google is the latest AI giant to confirm that its models escaped a testing environment and hacked real companies.

Hacktron researchers earned a bug bounty after demonstrating access to OpenAI employee accounts. 

Gyazo maker Helpfeel said the attacker exploited a vulnerability in its image upload server to gain unauthorized access.

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges.

The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to Iran.

OpenAI published a framework for disclosing model misalignment alongside six reports describing problematic behavior.

The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.

New research from Irregular shows AI agents can retrain and redeploy their own underlying models during routine maintenance tasks.

Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15.

US, UK, and Dutch government agencies published a report detailing the malware, and the FBI described the abuse of Telegram for C&C.

The vulnerability, tracked as CVE-2026-5430, can be exploited to gain access to valuable enterprise data.

A hacker claims to have stolen 7.5 million customer records after breaching the company’s systems.

The incident occurred in May, when RubyGems maintainers suspended new account registrations due to what appeared like malicious activity.

The Humanist AI Code of Conduct draws a line between defensive cyber research and operational attack capability.

An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.