“After expert review, screening, and deduplication, the model identified 2,436 vulnerabilities across 269 projects, including 1,097 medium-to-high severity issues,” the statement added. The findings cover system kernels, operating systems, browser engines, open-source infrastructure, Web applications and network protocols, Zhipu said.… Read More "Zhipu says new coding AI developed advanced cyber skills faster than expected"
Several companies have disclosed that they were affected by a breach of business intelligence provider Klue, including a number of cybersecurity firms. Huntress, Recorded Future, Jamf and Tanium have all acknowledged using Klue’s intelligence services and confirmed that the breach enabled… Read More "Klue Breach Enables Hackers to Compromise Cybersecurity Firms"
AI safety testing firm Irregular has published its account of an incident in which models being evaluated inside one of its testing environments took offensive security actions against real systems rather than the simulated targets they were meant to attack. … Read More "Irregular Details How a Naming Error Let AI Models Attack a Real Company "
Enterprise malware has been a whole new ballgame over the last ten years. The days of traditional viruses and malicious executable files are gone as cybercriminals try to use other techniques to break into systems. Rather, they rely on ransomware,… Read More "How Fidelis Endpoint Strengthens Enterprise Malware Protection"
Ravie LakshmananAug 17, 2026Malware / Botnet Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1Bot that derives its core functionality from the Mirai botnet source code and is equipped to turn internet-facing devices into SOCKS proxies. “While… Read More "Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies"
The loader takes a number of steps to make the payload harder to notice, Jamf said. It extracts the binary into “/tmp,” gives it a hidden Apple-looking filename, removes the macOS quarantine attribute, applies an ad-hoc code signature and launches… Read More "New macOS malware turns stolen browsers into attacker-controlled sessions"
Technology standards across Europe are evolving to prepare manufacturers for the EU Cyber Resilience Act (CRA) that takes full effect in December 2027. The European Telecommunications Standards Institute (ETSI), one of the three official standards organizations recognized by the EU,… Read More "ETSI Proposes 17 Cybersecurity Standards to Support EU CRA"
Anthropic has published new research showing that Claude-based AI agents, when placed in situations with competing objectives, deployed self-replicating malware against one another. The finding comes from an experiment designed to mirror behavior Anthropic says it has already observed in… Read More "Conflicting Test Goals Pushed Claude Agents to Deploy Self-Replicating Malware"
The manufacturer of a popular cryptocurrency hardware wallet has told tens of thousands of its customers to be on the lookout for phishing attempts after it suffered a data breach. SafePal published an update on August 16 claiming that order… Read More "SafePal Data Breach Hits Tens of Thousands of Customers"
Crypto hardware wallet SafePal is notifying roughly 40,000 individuals that their personal information was stolen in a data breach. Hackers, it says, exploited a vulnerability in the order-tracking function of a customer order information plugin to gain access to customer… Read More "40,000 Impacted by SafePal Data Breach"
