01 Sep

Another Artifactory CVE under attack by AI agents or humans

security Unauthenticated intruders can mint admin tokens, and exposed servers are already being hit MOST POPULAR Security researchers reported that someone is exploiting CVE-2026-82329, a

Author rabih
01 Sep

Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks

Security The model provider gave METR the credits for free. An actual customer would not have been so lucky MOST POPULAR AI model testing organization

Author rabih
01 Sep

Firefox helps iPhone users bypass ads on web sites while making money showing its own ads

security Baked-in Firefox ad blocking on iOS begins rolling out slowly today, and is off by default MOST POPULAR After several weeks of anticipation, Mozilla

Author rabih
01 Sep

Anthropic pledges to try harder to keep models under control, asks partners to chip in

ai and ml Security … this time it will be different MOST POPULAR Anthropic says it’s taking steps to limit the misbehavior of its AI

Author rabih
01 Sep

33-hour BGP hijack of Softaculous traffic prompts security scramble

Security Hosting software vendor tells customers to reset credentials and hunt for malicious packages MOST POPULAR Softaculous and Virtualizor customers are being urged to reset

Author rabih
31 Aug

Healthcare cyberattacks hit pacemakers and millions of patient records

Security McKesson admits breach as ShinyHunters demands $55.2M MOST POPULAR Two major healthcare businesses, Boston Scientific and McKesson, disclosed more details over the weekend about

Author rabih
31 Aug

OpenClaw 2.0 pours glitter on slow-burning security dumpster fire

ai and ml Lobster underwater Making installation easier and putting a new wrapper on the interface while leaving most of the security to users is

Author rabih
31 Aug

Attack hides malware in PNGs and drops custom reverse tunnel on victims’ machines

security Next-level ClickFix wave sets off multi-stage attack chain MOST POPULAR An unknown miscreant is using “TerminalFix” to trick unsuspecting users into running PowerShell commands

Author rabih
31 Aug

Anthropic cracks down on hijacked user accounts mining AI tokens

security Commodity malware steals authenticated sessions, letting thieves freeload on victims’ paid usage MOST POPULAR Rather than paying for their own Claude usage, crims are

Author rabih
31 Aug

This month in security with Tony Anscombe – August 2026 edition

Details about the Hugging Face hack, critical infrastructure under attack, a spoofed in-flight Wi-Fi network, and more of this month’s cybersecurity news 31 Aug 2026

Author rabih
30 Aug

Turns out Brits would quite like their private messages to stay private

security Polling finds two-thirds don’t trust this government, or any future one, with access to their encrypted chats MOST POPULAR Brits have delivered a fairly

Author rabih
28 Aug

Researcher shows how Claude Code can be tricked simply by asking it to summarize a website

security More prompt-injection hijinks from wunderwuzzi MOST POPULAR Anthropic’s Claude Code running Opus 5 in Auto Mode can be tricked into executing attacker-controlled code simply by

Author rabih
28 Aug

US government snitch-finder pleads guilty to leaking state secrets to foreign spies

MOST POPULAR The former Defense Intelligence Agency (DIA) IT specialist previously accused of trying to pass secret and top-secret information to foreign spies has pleaded

Author rabih
28 Aug

CISA: Most exploited vulnerabilities should have been eradicated decades ago

security Organizational culture and systemic gaps in Secure by Design adoption blamed for sorry state of affairs MOST POPULAR CISA is still crying out for

Author rabih
28 Aug

Industry that built the problem offers to sell you the solution

security 100+ tech giants warn AI attacks are coming, skip the part where they pay for defenses MOST POPULAR OpenAI has gathered more than 100

Author rabih
28 Aug

Print management outfit PaperCut is under 0-day attack, and it’s drawing customers’ blood

security The fix is either an unvalidated and unofficial emergency patch or taking the server offline MOST POPULAR Nothing smarts like a paper cut, but

Author rabih
28 Aug

Australian cops cuff alleged TeamPCP masterminds

Security Alleged crew behind the Shai-Hulud worm and other supply chain attacks nabbed with help from the FBI MOST POPULAR The Australian city of Perth

Author rabih
27 Aug

CRPx0 hacking service for dummies claims victim count more than quintupled

MOST POPULAR CRPx0, a cybercrime crew that has rapidly evolved from a scam service to a ClickFix-delivered ransomware and crypto-theft business over the summer, claims

Author rabih
Load moreLoadingAll items loaded