The ‘SalesBleed’ set of weaknesses in Salesforce’s Agentforce agents exposed CRM data to attackers via prompt injection and DNS exfiltration

The CISA plan provides guidance and resources for election officials to secure systems such as voter registration databases and voting machines

The newly-discovered trojan abuses the Android Accessibility Service to gain control over victim devices and collect sensitive banking credentials

EfficientIP says it flagged AliExpress phishing domains before they were registered

Ransom notes by n0n ransomware claim to take double extortion to a new level of danger for victims

CISA has set out a new framework to improve CVE data quality as vulnerability volumes rise

Whitehall is shifting from mandatory cyber controls to service-led governance following a critical audit exposing failures of its 2022 cyber strategy

Australian PM Anthony Albanese criticized OpenAI’s response to the incident, which occurred in June 2026

ShareGate study claims to reveal a governance ‘crisis’ as AI usage grows

SANS Institute report claims data rather than skills is now the main hurdle for threat hunters

GitGuardian finds 474 leaked GitHub App keys still authenticating, including keys with admin access

Qrator found a Windows botnet advertised with AI API draining, credential theft and SOCKS5 proxying

A total of 1073 firms fell victim to ransomware attacks globally in August, with the industrial sector the most affected, according to new NCC data

Infamous threat group ShinyHunters claims to have personal information on thousands of FBI employees

The EU Court of Auditors has criticized EU shortcomings in responding to major cyber incidents

WaterPlum compromised 30,000 devices and took funds or credentials from 7000 crypto wallets

A new report by ISACA found that 71% of orgs have not run AI incident response exercises as teams face rising pressure

Forescout warns that incomplete network segmentation is widening the potential blast radius of attacks

Akamai report warns of increase in bot traffic, API threats, chatbot leaks and other AI-related threats

Gartner warns that CISOs must update incident response playbooks as AI-powered deepfakes make social engineering attacks more convincing and harder to detect

The Irish DPC found that Google users were unaware that their location was being used to influence them with ads

Sekoia said Exvicy, a new ClickFix MaaS framework, reused code from rival service ErrTraffic

CloudSEK linked GHAPPIER to a compromised npm package with valid trusted-publishing provenance

ShinyHunters has claimed responsibility for hacking the Clop ransomware group, defacing its leak site and alleging theft of key operational data

A breach at image-sharing service Gyazo on September 11 affected over 23 million customers

Following a major data breach, Revolut customers are being sent convincing phishing messages

Huntress researchers highlighted a new ransomware variant, named Settra, and the post-compromise techniques used in two recent attacks

The US cybersecurity agency is moving to a new vulnerability coordination platform called VINCE-NT

Black Kite has found that manufacturing remained the most targeted sector for ransomware attacks, and saw a big jump in incidents in H1 2026

ESET said FamousSparrow has replaced SparrowDoor with SparroWocky

CISA released guidance on using cyber decoys to detect & disrupt malicious activity inside networks

Researchers at Zimperium have uncovered a new Android malware strain, dubbed RatHat, with spyware and backdoor capabilities

New government figures reveal a 20% annual increase in certifications

Cisco urged ISE customers to apply a software update, as well as check for signs of exploitation

Spanish data protection agency AEPD reveals the country’s first AI-powered data breach

Attackers are exploiting a critical flaw in a third-party WooCommerce plugin to upload PHP webshells

CISA and NIST issued final guidance to help protect cloud identity tokens and assertions

Hiscox highlighted the huge financial and operational costs of cyber-attacks, with the average cost of an incident at $52,000

OPSWAT researchers find two zero-days in TP-Link cameras

A group of cyber threat detection providers, including CrowdStrike, Palo Alto Networks and Sophos, have joined SE Labs’ PIVOT program

The UK’s National Cyber Security Centre says Iranian Chosen Brick spyware is designed to snoop on dissidents

A new report highlights the vast growth in fraudulent candidates, presenting significant insider threat challenges to organizations

Fenix24 found only four of more than 800 clients came close to stated ransomware recovery targets of 24-48 hours

Alleged Black Axe leaders extradited to the US over romance scams, BEC and money laundering claims

IANS finds AI is dominating net-new budgets even as overall funding for the function is flat

Microsoft has been forced to issue an out-of-band fix for several issues stemming from this month’s Patch Tuesday

Socket has discovered a Twitch browser extension forwarding users' OAuth tokens to a Russian bot service

A human attacker exploited a Marimo RCE and reached an SSH bastion in eight seconds

MarketsandMarkets has projected the cyber warfare market to double by 2031, amid growing demand for defensive and offensive cyber capabilities in the military

An unauthorized party used a legitimate government email domain to fraudulently request Revolut customer data