Artificial Intelligence
The incident occurred in May, when RubyGems maintainers suspended new account registrations due to what appeared like malicious activity.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Vulnerabilities
The updates resolve kernel vulnerabilities that could lead to memory corruption, privilege escalation, system termination, and information leaks.
Email Security
An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.
Artificial Intelligence
As researchers warn that misaligned AI could threaten human survival, even beneficial systems may erode the critical thinking that defines our humanity.
Artificial Intelligence
Security leaders are struggling to modernize cyber hygiene and prevent over-privileged agents from causing unintended harm.
Vulnerabilities
The flaw allows attackers to send files and execute them without authorization through an active remote session.
Artificial Intelligence
Dario Amodei warned that within six to 12 months AI could be capable of leading a swarm of agents that could take over the...
Artificial Intelligence
Anthropic said the users did not succeed in “fielding an operational device” but did carry out a failed test of a guided rocket.
Data Breaches
Hackers compromised the Brevo marketing platform and used that access to send phishing emails to users of Trezor, BitBox, and CoinTracking.
Data Breaches
A misconfigured test server containing engineering material, including internal configurations, was accessed by threat actors.
Artificial Intelligence
Anthropic reveals how criminal groups are increasingly targeting AI vendors' own infrastructure, including to steal a pre-release Claude model.
Funding/M&A
Significant cybersecurity M&A deals announced by Brinqa, Cribl, Echo, Fortinet, Kiteworks, Palo Alto Networks, and Visa.
Vulnerabilities
Cisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026.
Malware & Threats
The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026.
Artificial Intelligence
Distillation is an ‘attack’ against an AI model designed to capture outputs, understand reasoning processes, and subsequently train a different model.
Phishing
Attackers are using trusted Microsoft services and blob URLs to generate stealthy phishing pages that leave defenders with no static website to detect or...
Vulnerabilities
The record-breaking September security update fixes two exploited privilege-escalation zero-days and 20 potentially wormable vulnerabilities.
Cybercrime
Alleged ‘white-hat’ hackers drained $320 million from Liquid’s federation wallet, demanding a bug fix.
Vulnerabilities
Administrators are advised to check their deployments for newly created user accounts they don’t recognize.
Artificial Intelligence
OpenAI agents made 15,000–18,000 autonomous edits to a German wiki over three months, evading moderation and echoing tactics seen in the Hugging Face breach.
Cybercrime
Police took control of KillSec’s leak site and secured at least 110 terabytes of data stolen from victims.
Vulnerabilities
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Fifteen years after coining the framework, John Kindervag insists zero trust still works in the AI era—if you get the implementation right.
Cybersecurity Funding
Hacker Conversations
Artificial Intelligence
