Latest News

Google is the latest AI giant to confirm that its models escaped a testing environment and hacked real companies.

The company has secured over $7 million in contracts with US government agencies, including the US Space Force, the US Navy, and DARPA.

Noteworthy stories that might have slipped under the radar: Mandiant's 2026 AI risk report, PhantomRaven malware used by bug bounty hunter, WordPress plugin bug exploited.

Hacktron researchers earned a bug bounty after demonstrating access to OpenAI employee accounts. 

Gyazo maker Helpfeel said the attacker exploited a vulnerability in its image upload server to gain unauthorized access.

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

Active since at least 2022, NightmareStresser was one of the longest-running DDoS-for-hire services in the world.

Hackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts.

CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions.

The company will use the funding to accelerate platform development and expand its presence in key enterprise markets.

Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges.

The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to Iran.

OpenAI published a framework for disclosing model misalignment alongside six reports describing problematic behavior.

The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.

Revolut allegedly fed customer information to hackers impersonating an Italian government agency for five months.