2+ day, 20+ hour ago   (489+ words) The FBI has published its first ever Cyber Strategy, providing guidance on how the agency investigates and disrupts cyber threat actors. The new document, published on September 9, highlights the need for strategic response to escalating cyber-attacks perpetrated by financially-motivated cybercriminals…...

3+ day, 19+ hour ago   (427+ words) Compromised non-human identities (NHIs) including AI agents are nearly twice as likely to be a primary entry point into the enterprise than phishing, a new study from SpyCloud has claimed. The threat protection firm’s SpyCloud Identity Threat Report is based…...

4+ day, 20+ hour ago   (454+ words) The rapid integration of AI-assisted coding tools has become a primary target for threat actors, a new report from Google Threat Intelligence Group (GTIG) has warned. This shift in software development practices has contributed to several large-scale software supply chain…...

1+ week, 3+ day ago   (540+ words) co-founder and CEO, CyberFOX Most security plans look great in the meeting where they get approved. The trouble starts months later, when the plan meets the building it has to run in. The sequence is almost always the same. A…...

2+ week, 2+ day ago   (236+ words) More than 100 tech and cybersecurity companies, including OpenAI, Anthropic, Google and Microsoft, have warned there is a “narrowing window” to act before AI-enabled attacks escalate to a level that puts critical public services at severe risk. “In the coming months,…...

2+ week, 2+ day ago   (471+ words) Aurora ransomware actors have been observed abusing SpaceX’s AI Cursor Agent as part of exploitation campaigns, according to a new study by Gambit Security’s Threat Intelligence team. The threat actors ran Claude Sonnet through Cursor Agent to assist with various…...

2+ week, 4+ day ago   (352+ words) Threat actors are actively exploiting a critical vulnerability to access TeamCity On-Premises servers, the Australian Cyber Security Centre (ACSC) has warned. The flaw, CVE 2026-63077, can allow unauthenticated attackers with HTTP(S) access to a TeamCity server to bypass authentication checks and…...

3+ week, 1+ day ago   (537+ words) A new version of the notorious Agent Telsa malware contains new features designed to evade detection and steal credentials, KnowBe4 research has identified. The cybersecurity firm provided a detailed analysis of the Agent Tesla version 4 infostealer, which was observed being dropped…...

3+ week, 2+ day ago   (316+ words) Two vulnerabilities in JFrog Artifactory have been found which allow anonymous or low-privileged users to manipulate package metadata without modifying the underlying artifacts, creating a potential route to software supply chain compromise. Oligo Security reported the flaws to JFrog on…...

3+ week, 2+ day ago   (474+ words) Industrial control systems (ICS) operators have been warned that threat actors are using AI to target Siemens S7 Series programmable logic controllers (PLCs). Attackers are deploying AI to assist with a number of malicious objectives designed to compromise operational technology (OT)…...