AI is the biggest priority for net-new budget dollars, with around a quarter of US CISOs expecting to aggressively grow their spend next year, according to new data from IANS. The cyber research and advisory firm compiled its 2026 Security… Read More "AI the Top Priority for New Spend as Cyber Budgets Flatline"
OpenAI Investigates Report Linking AI Agents to RubyGems Attack
OpenAI has launched an investigation after researchers reported that its AI agents are likely responsible for the attack that forced RubyGems maintainers to suspend new account registrations in May. RubyGems.org, the official Ruby gem hosting service, was targeted in May… Read More "OpenAI Investigates Report Linking AI Agents to RubyGems Attack"
Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point
Introduction Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the phishing simulation? Does this SIEM rule fire on this particular technique? And, in more… Read More "Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point"
Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds
Ravie LakshmananSep 15, 2026Vulnerability / Malware With artificial intelligence (AI) shrinking the window between vulnerability discovery and exploitation and lowering the barrier to entry for bad actors, new findings from Sysdig show that skilled human operators can move just as… Read More "Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds"
240,000 Hit by Data Breach at Japan’s Digital Agency
Japan’s Digital Agency has disclosed a data breach affecting the personal information of approximately 240,000 individuals. The incident, it says, was discovered in late June, after the hackers accessed files from its Government Solution Service (GSS) using a maintenance and… Read More "240,000 Hit by Data Breach at Japan’s Digital Agency"
China-Linked APT Expands Proxy Network With New Malware
A China-linked hacking group has been observed expanding a network of hijacked devices used to disguise cyber-attacks, arming it with several newly discovered pieces of custom malware, researchers have found. Cisco Talos said the actor, an advanced persistent threat (APT)… Read More "China-Linked APT Expands Proxy Network With New Malware"
Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases
Apple on Monday announced patches for a record number of vulnerabilities across its desktop and mobile operating systems, including more than 200 flaws patched with the latest major releases: iOS 27 and macOS Golden Gate 27. iOS 27 and iPadOS… Read More "Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases "
RedWing Android Spyware Sold as a Service on Telegram
A new Android spyware strain has been observed being rented out to criminals through Telegram, giving even low-skilled attackers the tools to hijack phones and steal banking credentials, researchers have found. Zimperium’s zLabs named the malware RedWing and described it… Read More "RedWing Android Spyware Sold as a Service on Telegram"
Cybercriminals Plant Malicious AI Agents in Open Source Tools
Cybercriminals are increasingly turning to AI agents and chatbots to autonomously plan and carry out cyber-attacks, according to new analysis of hacker activity. Cybersecurity researchers at ESET examined 900,000 AI skills, small functional components used by AI agents, listed in… Read More "Cybercriminals Plant Malicious AI Agents in Open Source Tools"
Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints
Microsoft AI has published a draft “Humanist AI Code of Conduct” for its MAI Models, spelling out safety rules for offensive cyber capabilities, limits on autonomous AI agents, and a dedicated review track for cybersecurity and other specialized uses. According… Read More "Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints"