30 stories. Latest 29 Oct.
Details concerning the names, offices, contact information, and assignments of over 41,000 U.S. Department of Homeland Security (DHS) personnel have surfaced following a data leak.
28 October
Our jobs as developers are changing.
28 October
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems.
28 October
The realization that security teams would grant AI such rapid trust to operate within the Security Operations Center was a major oversight.
28 October
Attackers can exploit critical flaws like PHP2Shell before organizations even have time to apply security patches, highlighting that limiting the permissions of service accounts, API keys, and AI…
28 October
An engine developed by Cisco to monitor AI agents has been released as open source, designed to help security teams stop rogue agents from behaving dangerously, similar to the Hugging Face hack.
28 October
UK domain registrar 123 Reg (no relation – Ed) says it was the victim of an “AI-driven cyberattack” that exposed customer data.
28 October
Cybersecurity is undergoing a parallel shift, mirroring the broad adoption of Artificial Intelligence (AI) across various sectors.
28 October
The slow pace of patching vulnerabilities leaves applications vulnerable to attack.
28 October
ScubaGear v2.0 and ScubaGoggles v1.1.0 have been released by CISA.
28 October
An unreleased Anthropic AI model uncovered security vulnerabilities across multiple operating systems and browsers.
28 October
27 October
27 October
27 October
27 October
27 October
Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project's infrastructure.
27 October
27 October
27 October
27 October
Attackers are finding it simpler and more convincing to create fraudulent login pages thanks to generative AI.
27 October
27 October
Security firm Xint demonstrated that OpenAI's compaction feature, designed to reduce the size of extensive conversations, might allow users to extract a model's concealed reasoning in readable text.
27 October
26 October
Payload blobs, ranging from 12.9 to 13.7 MB, were large enough to bypass standard GitHub code searches, allowing a stealthy attack to take hold.
26 October
On September 8, 2026, we were alerted by a security researcher, Gadi Evron from Knostic, to a tenant isolation issue affecting the GLM-5.3 Workers AI model (@cf/zai-org/glm-5.3) starting on August 27, 2026.
