SecurityWeek

WatchGuard has rolled out patches for 15 code execution, DoS, authorization, and path traversal bugs in Fireware OS.

Several security firms have confirmed seeing exploitation of the NetScaler vulnerabilities CVE-2026-88771 and CVE-2026-88772.

Some of the flaws could allow remote attackers to execute arbitrary code or escape the browser sandbox.

Attacks by autonomous AI agents are moving out of the lab and into the courtroom, raising unsettled questions about who is liable for what agents do.

The state-sponsored group has launched larger-scale phishing campaigns to deploy the CosmicPulse backdoor.

In the wake of a suspected leader’s arrest, ShinyHunters says it never intended to publish data stolen from the FBI.

Roughly a dozen vulnerabilities have been patched in each of the open source cryptographic libraries. 

The accord opened the door to future regulation but focused on four voluntary steps for the companies to take.

Altman made a slew of product announcements and updates, including the company’s new agents, called Dots.

The AIxCC competition winner will analyze messaging app code and compiled binaries for vulnerabilities, with technology that could also help commercial customers secure their software.

Branch Target Reuse (BTR) is a new Spectre v2 attack targeting JIT compilers in web browsers, language runtimes, and the operating system kernel

The company emerged from stealth mode with pre-seed funding from Osage University Partners and DataTribe.

The company will use the funds to expand its sales, partnerships, channels, and customer support teams.

The personalized versions of ChatGPT were used to impersonate legitimate products and trick users into executing PowerShell commands.

The data breach affects the Defense Manpower Data Center (DMDC), which maintains personnel records for the Department of Defense.

Rig provides an identity dependencies graph to distinguish between legitimate users and rogue AI agents

- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.

The GPT-6.1 Astra model was slated to debut in ChatGPT and Codex in October, but it fell short of expectations. 

Pepijn van der Stap was convicted in 2023 for hacking multiple organizations, stealing their data, and extorting them.

The malware framework uses a modular architecture and a custom executable file format for long-term persistence.