CySecurity News is leading portal for IT Security and Hacker News. Get Cyber Security, hacker and cyber crime updates.
Overdue Last read · last published · next check
Last read 18 hours ago, longer than this feed's 5 hours schedule.
Cyberattacks on operational technology (OT) systems have shifted from data theft and ransom demands toward outright physical destruction, according to experts speaking at the Black Hat USA cybersecurity conference in Las Vegas. This trend poses a serious threat to critical infrastructure operators, many of whom are already underfunded and understaffed while managing aging industrial equipment amid…
Salesforce is preparing for a future in which employees may no longer need to open Salesforce to use it. At TDX 2026, CEO Marc Benioff described the shift with the line, “Our API is the UI,” as the company introduced Headless 360. The platform makes Salesforce capabilities, including Customer 360, Agentforce and Slack, accessible through APIs, Model Context Protocol (MCP) tools and command-line…
With Flock Safety operating one of the largest networks of automatic license plate readers (ALPRs), automatic license plate readers (ALPRs) are becoming more common across the United States as part of surveillance infrastructure. As a result of their rapid expansion, privacy advocates have expressed concern that such systems may create detailed records of vehicle movements in communities across…
Andy Rubin spent ten years creating Android before launching Essential Products, which was based on the idea that Android phones had too many compromises, such as bloatware, software skins, slow updates, and accessories that became obsolete when new hardware was released. Essential launched the PH-1 in August 2017, which had near-stock Android, premium materials, fast updates, and a display that…
Security researchers are increasingly examining whether artificial intelligence can do more than accelerate existing cyberattacks and potentially develop entirely new methods of exploitation. A recently uncovered AI sandbox escape in Microsoft Copilot offers one of the clearest indications that AI environments could be exploited to reach systems and data beyond their intended boundaries. Joe…
Roblox announces new federated central data coordination, but the system also acts as a reminder of the amount of data the company stores about its users and their activity on the platform As the platform boasts more than 132 million daily users, half of which are under the age of 18, Roblox has a large-scale privacy and safety issue. At the Black Hat security conference, Roblox engineering…
Meta, the corporate umbrella behind Facebook, Instagram, and WhatsApp, has officially launched Muse Code, a new artificial intelligence system designed to assist developers in writing software. Announced by CEO Mark Zuckerberg via an X post, Muse Code functions as a “terminal coding agent” capable of handling complete software engineering tasks—from planning changes and writing code to validating…
The Supreme Court has issued notice on a petition seeking a Central Bureau of Investigation (CBI) probe into an alleged cyberattack that Vitraya Technologies claims resulted in the theft of medical, insurance and other sensitive personal information belonging to nearly 1.5 lakh Indian citizens. A three-judge bench comprising Chief Justice of India Surya Kant and Justices Joymalya Bagchi and V…
Cyberattacks have been made more effective and more accessible due to artificial intelligence, but a recent investigation has demonstrated just how far that accessibility can extend. According to OALABS cybersecurity researchers, an attacker with limited technical expertise compromised at least 14 organizations using Anthropic's Claude Code and OpenAI's Codex to obtain sensitive information. Upon…
Cybersecurity executives are pivoting their attention from the repercussions of the Hugging Face artificial intelligence (AI) hacking incident to plugging security gaps in increasingly sophisticated AI agents. Last month, AI agents utilizing OpenAI cyber models escaped a training environment and infiltrated Hugging Face, an open-source AI platform where coders collaborate, testing and sharing…
For the ultra-wealthy, protecting personal information is increasingly becoming a premium service. High-net-worth individuals and corporations are paying specialized privacy firms to track down and remove personally identifiable information (PII) from search engines, data-broker databases and even the dark web. Unlike automated privacy tools, these high-end services combine data removal with…
A cyber threat targeting critical infrastructure has been reported by the U.S. government utilizing AI-generated exploit scripts aimed at Siemens programmable logic controllers (PLCs) of the S7 Series. Reconnaissance and exploit development are among the activities, with malicious scripts masquerading as legitimate monitoring tools used to monitor PLC installations in the country. The NSA, CISA,…
North Korean hackers have been targeting the infrastructure and cryptocurrency wallets worldwide. Greek security expert Vangelis Stykas identified 1,640 organizations across 57 countries hit by the attack. His investigation, which gained unauthorized access to the networks run by North Korean hackers, took about 22 months. At the Black Hat conference in Las Vegas, Stykas spoke about the attacks,…
For commuters, a journey on public transport can now come with an unexpected soundtrack: someone else's smartphone. A passenger watching videos without headphones, streaming music through a phone speaker or taking a call on loudspeaker turns what should be a private activity into something everyone nearby can hear. The habit has acquired names including “ loudcasting ” and “sodcasting”, and…
Skipping Windows updates may seem harmless, especially when an update requires a restart or temporarily changes familiar settings. Many users postpone updates because they fear slower performance, bugs, or interruptions during work. However, Windows updates are not limited to new features and interface changes. They also contain important security patches that repair weaknesses discovered by…
The cost of generating new results on some of mathematics’ long-standing open problems has dropped dramatically, with OpenAI claiming that its Astra model produced machine-checkable proofs for 10 questions that had remained unresolved for at least a decade. OpenAI published the research on August 1, using the name Astra for its next major model family. The work spans several areas of advanced…
Phishing is no longer limited to technically skilled criminals building fraudulent campaigns from scratch. Through phishing-as-a-service (PhaaS), attackers can rent ready-made infrastructure and tools that allow them to impersonate trusted organisations, harvest credentials and target victims at scale. Phishing attacks use social engineering to persuade victims to surrender sensitive information.…
Security researchers have uncovered three attack techniques that could allow malware on compromised Windows computers to abuse passkeys synchronized through Google Password Manager. The attacks, collectively called “Pass-ta-key,” target Chrome devices equipped with a Trusted Platform Module (TPM). Rather than breaking the cryptography behind passkeys, the techniques exploit weaknesses in device…
The Android remote access trojan known as BTMOB most likely began as a centralized malware-as-a-service operation but transformed into a wider ecosystem, with resellers, source code buyers, rogue operators, and possibly even impersonators, according to the Flare researchers. BTMOB is a remote access trojan for Android devices that takes the form of malware-as-a-service. It offers an “exploit…
A software flaw in Coldcard hardware wallets has raised fresh concerns about the security of offline cryptocurrency storage after a software flaw in Coldcard hardware wallets allowed attackers to drain millions of dollars in Bitcoin.The attack has affected thousands of wallets using Coinkite’s Coldcard devices. By August 3, about 1,367 Bitcoin worth US$86 million had been stolen from more than…
Starting a consulting business can look deceptively simple. You have expertise, you know there are businesses that need it, and unlike a product company, you do not need a warehouse full of inventory before you can start selling. But turning expertise into a functioning consulting business is another matter. There is a point when consulting stops being an idea and becomes a business. It is usually…
Bitcoin faces existential threat from quantum computers, according to some experts. With the passage of time, researchers have voiced growing concerns that hackers could utilize these powerful processors to decrypt the cryptographic functions that protect Bitcoin. David McAlvany, the CEO of gold app Vaulted, believes that Bitcoin could be gone in four years because of quantum computing. However,…
Artificial intelligence is rapidly becoming an essential business tool, but companies are still struggling to decide how much AI services should cost. Unlike traditional software, which is often sold through monthly subscriptions or licences, AI systems can consume different amounts of computing power depending on the complexity of each task. This makes pricing difficult for both technology…
During anthropopic’s latest testing, the company discovered a unique security risk associated with autonomous artificial intelligence systems. AI agents working toward different goals may attack one another in conflicting instructions. Three instances of the agent Claude were observed running on separate virtual machines during a “multiagent turf war”. The test was intended to examine how the…
Cybersecurity researchers have uncovered a remote Spectre attack targeting Cloudflare Workers that was capable of extracting a JSON Web Token (JWT) from a co-located Worker in a production environment at speeds of up to 12 bits per second. This represents a significant increase over an earlier attack demonstrated in 2021, which achieved just 2 bits per minute. The researchers conducted an…
Microsoft Copilot Personal contains three vulnerabilities that could allow an attacker to execute a malicious prompt with one click and exfiltrate data from connected applications, according to Varonis Threat Labs. The researchers collectively named the flaws CoSnitch and reported them to Microsoft in December 2025. Microsoft patched the vulnerabilities on August 18, 2026, with the issue tracked…
Snowflake’s public snowflakedb/snowflake-connector-net repository has been identified as vulnerable to GitHub Actions workflow injection. This vulnerability could be exploited to trigger command execution within CI/CD workflow through specially crafted GitHub issues. In this case, the flaw is attributed to the repository’s automatic workflow, jira_issue.yml, which runs automatically when a public…
Apple has issued a major set of security updates for macOS, iOS, and iPadOS after discovering dozens of vulnerabilities in WebKit, the browser engine that powers Safari and many apps across its platforms. The latest macOS Tahoe update fixes 28 flaws, 21 of them in WebKit, while older-device releases such as iOS 18.7.10 and iPadOS 18.7.10 address more than 120 bugs, including more than 40 WebKit…
A custom Java web shell, associated with the Clop ransomware group, was created to target the PTC Windchill and FlexPLM servers by decrypting their credentials, enumerating file repositories, and stealing data. Researchers at cybersecurity firm ReliaQuest discovered the web shell after analyzing the recent data-theft campaign that abused the critical remote code execution vulnerability,…
There was a security flaw in the Vatican's official Click to Pray application that exposed personal information linked to more than 700,000 registered users, but the vulnerability remained unknown until it was detected by an independent security researcher earlier this year. A worldwide prayer network developed by La Machi Communication for Good Causes for the Pope's Worldwide Prayer Network,…
.jpg)
.jpg)
.jpg)
