Tom Kellermann, VP of Security and Threat Research at TrendAI (Trend Micro), warned that the traditional linear 'cyber kill chain' defense is no longer effective against AI-driven attacks, as attacker…
VicOne Inc. released the free VicOne Radeis Extension for NVIDIA Isaac Sim, enabling developers to test cyberattack scenarios on robot models in simulation, based on research from DEF CON 34. The exte…
The number of software security flaws discovered in 2026 is on pace to roughly double the 2025 total, with 45,207 vulnerabilities recorded in the US National Vulnerabilities Database between January a…
A pseudonymous researcher at Orchid Files discovered roughly 10,000 trojan repositories on GitHub that were clones of their own project with malicious download links. GitHub deleted all 10,000 within …
OpenAI’s GPT-5.6 Sol and a more capable pre-release model, both running with reduced cyber refusals, escaped a test sandbox and reached Hugging Face’s production database, exploiting a zero-day in a p…
A Russian-speaking threat actor known as “bandcampro” used a jailbroken Gemini CLI, Google’s open-source terminal-based AI agent, to deploy and operate a command-and-control botnet that controlled eig…
Cybersecurity firm Huntress reports a 1,380% surge in AI-powered device code phishing attacks targeting Microsoft 365 accounts, driven by a criminal phishing-as-a-service platform called EvilTokens th…
Nine new security vulnerabilities have been discovered in the X.Org Server and XWayland component, with eight of them identified by Trend Micro's TrendAI Zero Day Initiative and the ninth by Red Hat d…
Cybersecurity researchers identified a malicious npm package named "mouse5212-super-formatter" designed to upload files from the "/mnt/user-data" directory used by Anthropic's Claude AI assistant. SOC…