A coalition including the NSA, FBI, DOE, and EPA issued CISA advisory AA26-231A on August 19, 2026, confirming that threat actors are using AI-generated Python scripts to target Siemens S7 series PLCs…
A developer who built a vulnerability triage CLI called triage-lens admitted they initially did not understand the EPSS, KEV, or CVSS scores the tool relies on. The tool, which passed 373 tests and sh…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) reported that most of the vulnerabilities exploited in 2023 were known for years, some for decades, and should have been patched long a…
OpenAI published an open letter on Thursday with over 100 signatures calling for collective cyber defense, but a sector-by-sector analysis shows that no governments, hospitals, water utilities, or int…
Nucleus Security has expanded its exposure management platform with Nucleus Helix, an AI agent for natural-language interaction with security data, plus Nucleus Discover for early exposure detection a…
CyberUpdates365's threat intelligence desk reports that the cybersecurity landscape has shifted to agentic malware and deepfakes, citing the June 2026 CISA joint guidance on the 'Careful Adoption of A…
The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-62593, a critical remote code execution flaw in the Ray AI framework, to its Known Exploited Vulnerabilities catalog on Augus…
In March 2026, threat actor group TeamPCP published two backdoored versions of LiteLLM (1.82.7 and 1.82.8) to PyPI, live for roughly six hours, compromising more than 2,500 organizations and 434,000 C…
A joint advisory from the NSA, FBI, CISA, the Department of Energy, and the EPA warns that AI-generated exploitation scripts are actively targeting energy and water infrastructure, calling it 'not a t…
Mandiant published the architecture and early results of its Agentic Vulnerability Discovery Harness on August 18, reporting that the system found more than 100 true-positive critical vulnerabilities …
The RondoDox botnet began exploiting CVE-2025-62593 in Ray, a framework used by Amazon, Apple, and OpenAI to scale machine learning, on November 24, 2025, two days before the CVE was published, accord…
CyberUpdates365 Threat Intelligence Desk has published a continuously updated timeline of major data breaches in 2026, fact-checked against official corporate disclosures and CISA reports, noting that…
AI agents are increasingly being used to attack organizations, exposing new attack surfaces and introducing non-human identities that bypass traditional security policies, according to Matt Hartman, f…
JFrog's security team exposed a wave of fabricated SQLite vulnerability advisories, including a fake CVE-2026-51302 that was initially rated 10.0 critical, which had flowed through NVD, CISA, and Red …
CISA added CVE-2025-62593, a critical remote-code-execution flaw in Ray, the distributed AI framework used by OpenAI, Netflix, and Uber, to its Known Exploited Vulnerabilities catalog on August 17, gi…
Five U.S. federal agencies, including the NSA, CISA, the FBI, the Department of Energy, and the EPA, issued a joint advisory on August 19 warning that threat actors are using AI-generated Python scrip…
The NSA, CISA, FBI, Department of Energy, and Environmental Protection Agency issued a joint advisory Wednesday warning that threat actors are using AI to write exploit scripts targeting internet-expo…
The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-62593, a critical remote code execution flaw in the Ray open-source framework used by OpenAI, Uber, and Amazon, to its Known …
AI News Digest for August 20 reports 30 AI stories, including H200 chips quietly entering China despite export controls, CISA issuing an advisory about AI-generated malware, Japan requiring AI firms t…
The Forum of Incident Response and Security Teams (FIRST) announced VulnOptiCON 2026, a three-day technical colloquium scheduled for September 23-25, 2026, in Luxembourg, to address vulnerability trac…