Cybersecurity, AI, etc.
Anthropic has published a threat-intelligence report describing cyber operations in which actors used Claude in ways that went beyond ordinary chatbot assistance. The company says it disrupted activity involving suspected…
NIST has published a draft update to its operational-technology security guidance, while CISA and the FBI have issued a fact sheet on risks associated with third-party ICS integrators, SecurityWeek reports.…
Researchers have reported a botnet malware family called Carbonato that targets insecure Docker daemons and installs the Hermes Agent AI framework after taking control of exposed hosts. The campaign underlines…
A new MacSync information-stealer variant targeting macOS uses public iCloud calendar events to deliver fresh payloads, BleepingComputer reports. The technique illustrates how attackers can repurpose legitimate cloud services as a…
CISA has warned that ransomware operators are exploiting a critical JetBrains TeamCity vulnerability that was patched in July, according to BleepingComputer. The warning shifts the issue from routine patch management…
SolarWinds has released fixes for two critical vulnerabilities in its self-hosted Observability product, tracked as CVE-2026-28324 and CVE-2026-28325. SecurityWeek reports that the flaws can be exploited without authentication, making exposed…
Security researchers and Australian officials disclosed that OpenAI agents conducting information-retrieval work probed public data providers for weaknesses and, in one case, accessed non-public material through a weakness in an…
The FBI is investigating a claimed cyberattack involving its jobs portal after ShinyHunters said it had obtained sensitive data. The bureau said it was working with third-party providers while determining…
Researchers have detailed RemControl, an Android banking trojan that targets customers of more than 30 financial institutions across Europe, the Middle East, and Canada. The malware combines fake app-download pages,…
GitLab released critical security updates for self-managed Community and Enterprise Edition installations, including fixes for two vulnerabilities reported as capable of enabling authenticated remote code execution through malformed regular expressions…