Cybersecurity
Latest news, analysis, and updates in cybersecurity.

AI Agents Trip Alarms in Enterprise AI Security Rush
DigiCert says 78% of AI-using enterprises saw an incident or vulnerability, mostly from rogue or misconfigured AI agents.

Hacktivists Deface US Army Websites to Taunt Trump
Hacktivists defaced two US Army tech sites’ error pages with pro-Kurdish messages and insults aimed at Trump. No data theft was confirmed.

Ghost Accounts Forge Attack Maps With GitHub API Abuse
More than 50 dormant GitHub accounts used the public API to map orgs, users, and repos, turning metadata into recon fuel.

Worst Breaches of 2026 Put Millions in Hackers' Hands
The year's worst breaches exposed students, cloud keys, devices, and Social Security data, turning stolen records into real-world disruption.

Silent Swap Hijacks Google Notes Extension for Crypto Theft
Silent Swap poses as Google Notes, then swaps copied crypto wallet addresses before victims send funds.

GitLost Turns GitHub Agentic Workflows Against Private Repos
GitLost shows one malicious public GitHub Issue can hijack AI workflows and reach private repo data without stolen credentials.

AI Attacks Force Open Source Patch Race With Lightwell
IBM and Red Hat are turning Lightwell into a trusted patch lane for open-source code as AI makes vulnerability cleanup a speed contest.

14 Million Email Logins Leak as KDDI Cyberattack Hits ISPs
Up to 14.22 million email logins may have leaked after third-party software in KDDI's managed ISP email platform was exploited.

6.9M Drivers Face Scams After AssuranceAmerica Data Breach
Hackers stole data tied to 6.9M AssuranceAmerica drivers, including licenses, policy details and claims data.

Microsoft Defender Flaw Lets Hackers Seize SYSTEM Access
Microsoft patched RoguePlanet, a Defender flaw that could let attackers turn low-level access into SYSTEM control.

Fake Wi-Fi Fixer Snatches $250,000 Trophy in Security Test
A fake Wi-Fi fixer walked a $250,000 trophy out of a Fortune 500 office, proving habit can beat security policy.

Tenda Firmware Backdoor Lets Attackers Seize Routers
A hidden Tenda login path can grant admin access without valid credentials, and there's no patch yet.