78
fiabilidad
When the American airline giants agree to renew flights to Israel, it means the global gatekeepers have officially declared the crisis contained.
agrupados por: delta · flight
87
fiabilidad
Rich Mogull, chief analyst with the Cloud Security Alliance, joins the Dark Reading News Desk with what defenders need to take away from AI agents escaping their environments to launch attacks.
agrupados por: agent · rogue
72
fiabilidad
An untold number of ZBT routers sold around the world as white-label products come with several implants built by the manufacturer.
64
fiabilidad
The surge of AI-powered vulnerability reports is driving down bug bounty prices, and that could spell trouble for independent researchers.
78
fiabilidad
Proposed legislation could mandate that companies be able to "throttle, suspend, or shut ... down" AI agents, but how and when to do that remain open questions.
63
fiabilidad
The frustrating reality after an OT cyberattack: no data, no trail, and no history.
68
fiabilidad
83
fiabilidad
Omdia's Theresa Lanowitz talks with the Dark Reading News Desk about the potential — and risks — of using agentic AI for penetration testing, red teaming, and other practices.
96
fiabilidad
Without authorization, 1,200 OpenAI agents conspired among themselves to game a test.
agrupados por: hugging · openai · agents
RELIABLE
Quartz
OpenAI says it missed warning signs before its AI agents hacked Hugging Face
Thu, 27 Aug 2026
RELIABLE
CyberScoop
OpenAI: Agent behavior that led to Hugging Face intrusion formed in May
Wed, 26 Aug 2026
RELIABLE
BleepingComputer
Nearly 700 rogue AI agents coordinated in the Hugging Face attack
Thu, 27 Aug 2026
GOLD
MIT Tech Review
The Download: inside OpenAI’s Hugging Face hack, and a new EV takes on the US
Thu, 27 Aug 2026
GOLD
Schneier on Security
Detailed Timeline of OpenAI’s Cyberattack on Hugging Face
2026-08-20T17:44
RELIABLE
SecurityWeek
OpenAI Agents Coordinated via Makeshift Message Board Ahead of Hugging Face Hack
Thu, 27 Aug 2026
RELIABLE
The Register
OpenAI explains how its naughty AI agents attacked Hugging Face
Thu, 27 Aug 2026
77
fiabilidad
AI is discovering more vulnerabilities, faster, and under a tightening regulatory environment, making this an all-hands-on-deck moment for the cybersecurity community.
agrupados por: discovery · vulnerability
RELIABLE
BleepingComputer
AI Is Accelerating Vulnerability Discovery. Can Defenders Keep Up?
Fri, 28 Aug 2026
96
fiabilidad
The West African nation launched financing, procurement, and infrastructure policies to boost its sovereign cloud initiative and increase domestic technical knowledge.
agrupados por: national
RELIABLE
SecurityWeek
Former NSA Director Paul Nakasone Launches National Security Advisory Firm
Fri, 21 Aug 2026
RELIABLE
Politico EU
Spain’s Sánchez calls national security meeting 26 days into Ceuta migration crisis
Mon, 24 Aug 2026
RELIABLE
Defense News
The devastation of NSA Bahrain is a national security warning
Fri, 28 Aug 2026
83
fiabilidad
The adversary-in-the-middle (AitM) phishing service lowers the barrier to entry for actors to create attacks and steal more than just user credentials.
agrupados por: microsoft · novacookies · sessions
RELIABLE
The Hacker News
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
Wed, 26 Aug 2026
64
fiabilidad
Attackers can exploit a security bug in Nvidia's tool to gain unauthenticated access to the local model server through the Ollama API, paving the way for persistent AI agent corruption.
65
fiabilidad
With some simple HTML that's invisible to users, attackers can manipulate AI-powered email summarizers into producing malicious information.
95
fiabilidad
The international law enforcement operation focused on disrupting crime-as-a-service networks and infrastructure behind groups like Black Axe.
95
fiabilidad
A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlists compromised devices in a proxy botnet or uses them for ad fraud. [...]
agrupados por: head · malware · android · units · botnet
RELIABLE
SecurityWeek
First Malware Built Specifically for Car Head Units Fuels Botnet
Tue, 25 Aug 2026
96
fiabilidad
North Korean operatives posing as IT workers are improving their tactics, but researchers say there are still ways to spot them before they do damage.
66
fiabilidad
James Kettle of PortSwigger talks with the Dark Reading News Desk about his AI-powered open source tool, which found new HTTP request-smuggling techniques.
64
fiabilidad
GoCaracal is a new modular malware framework that broadens Dark Caracal's capabilities to steal data and maintain access to victims.
94
fiabilidad
EU governments are trying to move away from popular messaging apps as nation-state threat groups shift their focus from email to Signal and WhatsApp.
85
fiabilidad
This installment of the Reporters' Notebook video series discusses the topics that dominated the cybersecurity conference, such as AI's effects on vulnerability reporting and security research.
96
fiabilidad
A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential exploitation of CVE-2026-19478.
agrupados por: click · critical · flaw · zero
RELIABLE
BleepingComputer
Critical Avada WordPress theme flaw enables zero-click RCE
Wed, 26 Aug 2026
54
fiabilidad
ClickFix-style threat campaigns are using a new trick to evade detection and deliver Amatera, an increasingly prevalent infostealer.
97
fiabilidad
CISA issued a three-day deadline for agencies to patch a Zimbra security vulnerability, CVE-2026-73570, which allows full takeover of a user's communications.
agrupados por: exploited · flaw · zimbra
RELIABLE
BleepingComputer
CISA orders urgent patching of actively exploited Zimbra flaw
Mon, 24 Aug 2026
59
fiabilidad
As breach costs reach record highs and defense spending nears $240 billion, small businesses are dangerously exposed, threatening supply chain security.
78
fiabilidad
The latest version of the Android malware has new features that expand its global reach and put more than users' financial applications at risk.
65
fiabilidad
An advanced, multilingual malware family brings back a trick from yesteryear — screen hijacking — for effective password theft, along with a slew of novel features.
93
fiabilidad
The coming threat of super-powerful computers capable of cracking today’s algorithms requires upgrading encryption now. Tech companies have begun building defenses.
64
fiabilidad
New research shows how attacks against some unprotected TSN protocols could allow attackers to disrupt or manipulate physical processes
84
fiabilidad
A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asia.
The intrusion set makes use of seven remote access tool (RAT) families, five of which have never been previously documented: DriveSilkRAT, CookiETagRAT, NomadRAT, Gog…
agrupados por: asian · central · rats · silkparasite
RELIABLE
Dark Reading
SilkParasite Threatens Central Asian Orgs With Flurry of RATs
Wed, 19 Aug 2026
92
fiabilidad
The botnet adds exploitation modules, credential theft, and reverse SOCKS relays to turn compromised devices into persistent attacker infrastructure.
97
fiabilidad
Adam Shostack, president of Shostack & Associates and an affiliate professor at the University of Washington, talks with the Dark Reading News Desk about why he was "blown away" by OpenAI's revelations regarding the Hugging Face attack.
94
fiabilidad
Three testing models with the same goal but different directives engaged in "increasingly aggressive" territorial attacks on one another, according to Anthropic.
65
fiabilidad
Researchers found that by combining two vulnerabilities, they could take over an Android device by delivering a payload and getting the victim to answer their phone.
63
fiabilidad
A ransomware affiliate appears to be sidling up to victims with offers of aid, masking its true intention of diverting ransom payments.
83
fiabilidad
The Python-based malware framework takes living-off-the-land tactics to a new heights of stealth, with a modular implant that steals credentials and achieves persistence.
73
fiabilidad
Million-dollar heists, divorce, and career-ending burnout are all stories told in the latest docuseries revealing a behind-the-scenes look at the cybersecurity community.
74
fiabilidad
Researchers discovered a "meta-hacking" technique that can manipulate the AI service into revealing its own security weaknesses.
97
fiabilidad
In the first purported "near-autonomous" attack on a nation-state, a Chinese-language operator used a complex AI framework to target and compromise government agencies, likely in Taiwan.
73
fiabilidad
Katie Moussouris of Luta Security talks with the Dark Reading News Desk about how enterprises will now need to monitor risks posed by their own agents in the wake of the recent Hugging Face attack.
96
fiabilidad
The AI company officially forbids illicit use, while offering guardrail-free social engineering, offensive cybercrime, and OSINT scanning to anyone with a bit of cryptocurrency.
95
fiabilidad
A previously unknown malware family dubbed SynkLoader is being distributed in Microsoft Teams phishing campaigns to steal credentials via a fake lock screen. [...]
agrupados por: campaign · malware
60
fiabilidad
A nation-state threat actor is picking on immature organizations run by the Taliban, but failing against more prepared government agencies in India.
71
fiabilidad
Law enforcement training is falling behind the volume and rapid evolution of cybercrimes. Officers really only need to learn the basics, but lack of focus and budget hinder progress.
70
fiabilidad
The popular "Passportal" password manager, favored by MSPs and SMBs, remains risky even after its patch, thanks to its cloud-based design. Should these products stay away from the cloud entirely?
63
fiabilidad
Enterprise cybersecurity expert Jake Williams joins the Dark Reading News Desk to explain why he decided to release his new agentic AI framework in the wake of the OpenAI attacks on Hugging Face.
74
fiabilidad
The new AI security controls follow the Hugging Face incident last month, though many of these additions perhaps should have been in place prior to the frontier models escaping.
81
fiabilidad
Government agencies with smaller budgets need support — and here's how you can help.
91
fiabilidad
The Open Worldwide Application Security Project has a brand-new top 10 security list tailored for the modern era, and it debuts a Universal Skill Format to add consistency and security to the AI add-ons.
91
fiabilidad
In this video interview, Standard Chartered's group CISO shares insights on transitioning from technical roles to strategic leadership, the importance of business-savvy security executives, and how AI is reshaping both defensive capabilities and adversarial tactics in banking.
73
fiabilidad
Researchers are calling attention to the risks inherent in automated network device provisioning, using a world-leading device manufacturer as a case study.
66
fiabilidad
CSS was once just about design. Now researchers warn it's powerful enough to exfiltrate data from webmail — and some vendors aren't prepared.
95
fiabilidad
AI browsers from top vendors remain vulnerable to prompt injection attacks despite multiple security guardrails, according to new research.
55
fiabilidad
Attackers can take control of agents through malicious instructions hidden in content supplied to AI browsers, and there's no simple fix for the threat.
83
fiabilidad
Organized crime is convincingly scamming at scale, making billions thanks to AI-enabled voice cloning, deepfake real-time video overlays, LLM-driven persona management, and automated translation.
.jpg?width=720&quality=80&disable=upscale)
96
fiabilidad
Two former chief security officers of the Democratic National Committee explain that a strong security-first mindset requires executive support — and a dose of absurdity.
80
fiabilidad
A researcher demonstrated a proof-of-concept attack chain that provided C2-style influence over ChatGPT's isolated sandbox during a session at Black Hat USA 2026.
72
fiabilidad
In the span of three weeks, OpenAI, Anthropic, and Meta have all disclosed AI agent sandbox escape events affecting real organizations.
_wsf_AL_Alamy.jpg?width=720&quality=80&disable=upscale)
69
fiabilidad
The fight against cybercrime continues because threat actors have adapted their strategies to avoid deterrents, but law enforcement still operates in silos.
68
fiabilidad
A study of more than 6,000 patches found that even working patches can introduce new bugs, break something else, or are open to bypass.
66
fiabilidad
The crime solver wore disguises, spied on targets, and built intelligence networks long before modern-day tactics emerged. He has lessons for today's ethical- and unethical hackers.
77
fiabilidad
A public policy expert mapped global cybercrime laws to develop a five-point framework for protecting ethical hackers and good-faith security research.
73
fiabilidad
Sophisticated iPhone exploit chains previously limited to nation-states are spreading far and wide to organized cybercrime groups.
76
fiabilidad
It's time to turn from CVSS-backed patching to choke-point patching focused on breaking chains to critical assets.
.jpg?width=720&quality=80&disable=upscale)
65
fiabilidad
The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users.
96
fiabilidad
Attacks targeting water systems just keep flowing across a dozen states, against ill-secured, Internet-exposed PLCs.
87
fiabilidad
New research shows how attackers can use security alerts and blocked events to manipulate and hijack AI agents.
96
fiabilidad
The ransomware-as-a-service operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in firewalls and VPN appliances.
97
fiabilidad
The most concerning bug in the batch is CVE-2026-62878 (CVSS: 9.8), a remote code execution (RCE) vulnerability in Windows DNS Server that requires no user interaction.
73
fiabilidad
The big-box giant has scaled its defenses by encouraging trust and innovation. Good communications, transparency, and team spirit are key factors.
70
fiabilidad
Attackers continue to target critical infrastructure and government-linked organizations in the country, mirroring the increased activity across Latin America.
64
fiabilidad
Walmart colocates red and blue teams to build trust and improve security through collaborative purple teaming exercises
97
fiabilidad
The "City-Forum" campaign has been active since at least March 2025 and has targeted organizations across multiple sectors with custom tooling.
65
fiabilidad
The trust framework underlying Belgium's electronic ID system was fully compromised by severe vulnerabilities in a key browser extension, showcasing bigger problems with extensions in general.
66
fiabilidad
Researchers discovered hackers-for-hire performing cyber espionage and financially motivated heists from the same Web panel.
92
fiabilidad
Exploitation against CVE-2026–59310 began earlier this month, and patching the vulnerability may not be enough to fully mitigate the threat.
_pichetw_Alamy.jpg?width=720&quality=80&disable=upscale)
74
fiabilidad
The $1 billion deal aims to converge data security and identity into a single control plane for agents, with privileged access redefined around business context rather than static roles.
91
fiabilidad
Why do so many boards underestimate technology risk until it becomes a crisis?
95
fiabilidad
One Caledonian government agency reported a breach, thanks to a third party that may have serviced other agencies as well.
55
fiabilidad
Driven by AI-augmented research and scanning, vulnerability volumes continue to surge, driving the National Institute of Standards and Technology to ask whether AI could be the answer.
_Pattara_Alamy.jpg?width=720&quality=80&disable=upscale)
82
fiabilidad
If you're handling AI agents like a service account or API token, consider yourself behind. AI agents need a fundamentally different approach.
91
fiabilidad
The researcher known as "Nightmare-Eclipse" published a proof-of-concept (PoC) exploit for the Windows Defender vulnerability in early June after dropping several other Microsoft zero-days.
96
fiabilidad
Obscurity isn't a defense. If your company has any Internet-facing vulnerability, you're at risk from multiple threats.
93
fiabilidad
AI coding tools cost $19-$200/month/user, but security scanning, remediation, and false positives add hidden costs. Are the productivity gains worth it?
96
fiabilidad
Age restrictions on accounts may be more of a stopgap because industry compliance is already falling short. Tech giants are struggling to follow the laws without affecting users.
64
fiabilidad
Organizations, and possibly ATMs, are at risk of compromise, thanks to holes in a Microsoft BitLocker security wrapper.
67
fiabilidad
While cyberattacks against hospitals and clinics grew modestly in the first half of 2026, attacks on service providers and other healthcare businesses more than doubled.
62
fiabilidad
Security Pro File: On the heels of her recent honors as a Member of the Order of the British Empire (MBE), we take a look back at the events that shaped Jen Ellis' advocacy on behalf of security researchers.
96
fiabilidad
Attackers wasted little time targeting the latest memory disclosure flaw in Citrix's NetScaler products, after researchers published a proof-of-concept exploit (PoC).
81
fiabilidad
A threat group researchers call "Armored Likho" has gained access to government agencies and electrical power entities in Russia, Brazil, and Kazakhstan.
96
fiabilidad
The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too.
96
fiabilidad
Varonis reported the flaw to Google in late 2025 and it has been addressed, but it reminds defenders to take a fresh look at their AI Infrastructure security.
73
fiabilidad
The phishing campaign uses several tactics, including nested redirects, to evade detection and steal credentials from unsuspecting targets.
80
fiabilidad
The world's digital testing ground plans to help people use AI agents for government purposes.
65
fiabilidad
A financially motivated operation uses lures of cracked or pirated software to deliver a two-for-one malware combo for data theft and cryptomining.
67
fiabilidad
The attacker exploited AI workflows, chained cloud weaknesses, and stolen credentials to extort a large Amazon customer.
96
fiabilidad
The Latin American nation's cybersecurity plan — still in the expansion phase — has to survive its own knockout round during the FIFA World Cup.
86
fiabilidad
A new survey shows security leaders have an inflated sense of safety regarding their collaboration tools and platforms.
77
fiabilidad
Microsoft signed a malicious kernel driver, and now it's being used to kill security software in ransomware attacks.
63
fiabilidad
A cryptomining incident highlights how AI gateways can provide access to AI models, cloud infrastructure, and identity and access management (IAM) data.
82
fiabilidad
The fate of a Ukrainian tax software company shows how modern cyberwarfare can claim casualties far beyond the battlefield, and how businesses across the ocean still need to protect themselves.
97
fiabilidad
An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt other systems.