Cybersecurity News — AI Trends, Updates & Tracker

Mention Trend — Last 20 Issues

Live Stories (102)

Bloomberg Opinion: Japan Is Right to Fear AI 'Black Ships' — Country Absorbed 22% of All Global Cyberattacks in 2024, More Than Any Other Nation

bloomberg.com · 2026-06-21 · Score: 16

AryStinger Botnet Hijacks 4,000 D-Link Routers as Remotely Controlled Proxy Network for Malicious Traffic

bleepingcomputer.com · 2026-06-21 · Score: 17

ALERT NSA Director Told Senator Warner That Anthropic's Mythos 5 Breached 'Almost All' U.S. Classified Systems in Hours, Reframing Fable 5 Ban as Autonomous-Capability Problem Rather Than Jailbreak

bankwatch.ca · 2026-06-21 · Score: 30

New Prinz Eugen Ransomware Prioritizes Recent Files for Encryption, Uses Go and ChaCha20-Poly1305 — Standard Bank Among Five Known Victims

bleepingcomputer.com · 2026-06-20 · Score: 21

Gravity SMTP WordPress Plugin CVE-2026-4020 Exploited in 17 Million Attempts to Steal API Keys Across 100,000 Sites

thehackernews.com · 2026-06-20 · Score: 15

Microsoft Attributes Mastra AI Framework npm Supply Chain Attack to North Korean Sapphire Sleet Hackers

bleepingcomputer.com · 2026-06-20 · Score: 24

7,000 Langflow Servers Under Active Exploit — LangGraph SQL Injection and LangChain Path Traversal Expose Shared Attack Surface Across Three Major AI Agent Frameworks

venturebeat.com · 2026-06-19 · Score: 23

Shadow AI's Real Risk Is Access Control, Not Data Leakage: 65% of Enterprise AI Agent Credentials Are Dormant But Active

thehackernews.com · 2026-06-19 · Score: 15

Apple Patches High-Severity Beats Studio Buds Bluetooth Flaw That Let Nearby Attackers Eavesdrop via Microphone

thehackernews.com · 2026-06-19 · Score: 15

Cornell Tech's WARP Attack Shows 13-Word Reddit Comment Can Steer ChatGPT Deep Research and Gemini Toward Fake Products at 38–62% Success Rate

tech.yahoo.com · 2026-06-19 · Score: 22

Nintendo Confirms TinyPulse HR Vendor Breach as Shadowbyt3$ Demands $2M Ransom, Refuses Payment

techtimes.com · 2026-06-19 · Score: 16

MaXSS and Spyder: Unpatched Critical Flaws in 10M-Install AI Chrome Extensions SiderAI and MaxAI Enable Full Browser Session Takeover Without User Interaction

gbhackers.com · 2026-06-19 · Score: 24

AutoJack Attack Lets One Malicious Webpage Hijack AutoGen Studio AI Agent for Host-Level Remote Code Execution

thehackernews.com · 2026-06-19 · Score: 23

Kodak Confirms Data Breach as ShinyHunters Claims 2.2 Million Records Stolen, June 18 Leak Deadline Passes

malwarebytes.com · 2026-06-18 · Score: 22

South Korea Ministry of Science and ICT Signs AI Safety and Cybersecurity MOU With Anthropic — Red-Team Evaluations of Autonomous Agents and Korean-Language Risk Assessment Planned Amid Ongoing Export Ban

thelec.net · 2026-06-18 · Score: 21

Splunk Enterprise CVE-2026-20253 Exploited Within Eight Days of Disclosure — CISA Adds to KEV Catalog With Three-Day Federal Deadline

securityweek.com · 2026-06-19 · Score: 24

Researcher Uncovers 10,000 GitHub Repositories Distributing Trojan Malware via ZIP Archives That Evade VirusTotal URL Scanning

orchidfiles.com · 2026-06-18 · Score: 20

Gentlemen Ransomware Gang's Proprietary EDR-Killing Framework GentleKiller Targets 400+ Processes Across 48 Security Vendors, ESET Finds

bleepingcomputer.com · 2026-06-18 · Score: 18

Operation Endgame Disrupts SocGholish Botnet Linked to Evil Corp — 106 Servers Seized, 15,000 Sites Cleaned in International Law Enforcement Sweep

helpnetsecurity.com · 2026-06-18 · Score: 21

Cisco Patches Critical CVSS 9.1 RCE Flaw in Identity Services Engine — Root Escalation With Admin Credentials

securityweek.com · 2026-06-18 · Score: 18

FortiBleed Leak Exposes VPN Credentials for 73,932 Fortinet Firewalls Across 194 Countries

bleepingcomputer.com · 2026-06-18 · Score: 22

Dream Security Raises $260M at $3 Billion Valuation to Build Sovereign AI and National Cyber Defense for Governments

securityweek.com · 2026-06-18 · Score: 21

Microsoft Details Active Windows Clipboard-Hijacking Campaign Using USB LNK Worms and Bundled Portable Tor for Stealthy C2

thehackernews.com · 2026-06-18 · Score: 17

INC Ransomware-as-a-Service Claims 830-Plus Victims Since 2023, Rewrites Encryptors in Rust for Cross-Platform Evasion

thehackernews.com · 2026-06-18 · Score: 18

F5 Patches Two Critical NGINX Flaws (CVSS 9.2) Enabling Unauthenticated Remote Code Execution via HTTP/3 and HTTP/2

thehackernews.com · 2026-06-18 · Score: 23

DragonForce Deploys Backdoor.Turn via Microsoft Teams TURN Relay — First Documented Abuse of TURN Infrastructure for Malicious C2

thehackernews.com · 2026-06-18 · Score: 25

Accenture Acquires Dragos Majority Stake Plus runZero and NetRise for $4.18B to Build Industrial Cybersecurity Platform

securityweek · 2026-06-18 · Score: 25

Atlassian Publishes 100 Security Bulletins Addressing Critical CVEs in Axios, Apache Tomcat, and Netty Across All Data Center Products

securityweek.com · 2026-06-18 · Score: 16

Klue OAuth Breach Lets 'Icarus' Threat Actor Raid Customer Salesforce CRM Data at 1,000 Queries per 15 Minutes

bleepingcomputer.com · 2026-06-18 · Score: 23

Splunk AI Toolkit Critical Flaw (CVE-2026-20266, CVSS 9.1) Lets Admins Execute Arbitrary OS Commands — No Detection Mechanism Exists

cyberpress.org · 2026-06-18 · Score: 24

NastyC2 npm Supply-Chain: Three Malicious Developer Packages Deliver Rust-Based Post-Exploitation Framework With 80+ Commands Comparable to Cobalt Strike

thehackernews.com · 2026-06-18 · Score: 22

NeuralTrust Closes $20M Seed — Europe's Largest-Ever Cybersecurity Seed Round — to Secure and Govern Enterprise AI Agents

tech.eu · 2026-06-17 · Score: 18

Tenet Security Emerges From Stealth With $6M Seed to Stop Rogue AI Agents Before They Execute

securityweek.com · 2026-06-17 · Score: 16

Crypto Clipper Campaign Weaponizes AI-Generated Narrators and Coordinated Fake Reviews to Build Legitimacy for Wallet-Stealing Bots

thehackernews.com · 2026-06-17 · Score: 15

Microsoft Confirms RoguePlanet Defender Zero-Day CVE-2026-50656 (CVSS 7.8): SYSTEM Shell on Fully Patched Windows, No Patch Available

thehackernews.com · 2026-06-17 · Score: 20

Magnitude Emerges From Stealth With $10M Seed Led by Ballistic Ventures to Apply Autonomous AI Agents to Third-Party Risk Management in AI-Heavy Supply Chains

securityweek.com · 2026-06-16 · Score: 16

CISA Adds LiteSpeed cPanel Plugin Privilege-Escalation Flaw CVE-2026-54420 to Known Exploited Vulnerabilities Catalog, 48-Hour Federal Patch Deadline Issued

thehackernews.com · 2026-06-16 · Score: 17

CISA Adds Maximum-Severity Joomla JCE Flaw (CVSS 10.0) to Known Exploited Vulnerabilities Catalog — Unauthenticated PHP Code Execution Active in the Wild

thehackernews.com · 2026-06-17 · Score: 26

15 Malicious JetBrains Marketplace Plugins Steal AI Provider API Keys From 70,000+ Developers — DeepSeek and OpenAI Integrations Used as Cover

thehackernews.com · 2026-06-17 · Score: 27

ALERT 144 Mastra AI Framework npm Packages Backdoored via Hijacked Contributor Account — 1.1M Weekly Downloads Exposed to Info-Stealing Dropper

thehackernews.com · 2026-06-17 · Score: 33

FulcrumSec Claims 1.3TB Theft From Novo Nordisk Including Private AI Models — $25M Ransom Refused, Private Data Sales Threatened

securityweek.com · 2026-06-16 · Score: 25

Google Vertex AI SDK 'Pickle in the Middle': Unit 42 Discloses Bucket-Squatting Flaw That Let Attackers Hijack ML Model Uploads for Cross-Tenant RCE — Fully Patched in SDK v1.148.0

thehackernews.com · 2026-06-16 · Score: 24

China-Linked FishMonger Group Expands SprySOCKS Backdoor to Windows With Kernel-Level Stealth Drivers That Hide Processes, Network Connections, and Registry Keys

thehackernews.com · 2026-06-16 · Score: 20

North Korea's Contagious Interview Campaign Targeted 100 Organizations via VS Code, Cursor, and npm — $12M in Crypto Stolen, 26,584 Wallets Exfiltrated From Developer Systems

thehackernews.com · 2026-06-15 · Score: 22

ShinyHunters Claims 297GB Theft From Council of Europe via Oracle PeopleSoft Zero-Day — June 16 Leak Deadline Issued for 429,000 Documents Including Employee Medical and Banking Data

bleepingcomputer.com · 2026-06-15 · Score: 23

Chinese Espionage Group UNC6508 Spent Two Years Inside North American Medical and Military Research Networks via REDCap Backdoor, Abusing Google Workspace for Silent Exfiltration

bleepingcomputer.com · 2026-06-15 · Score: 26

Fake LinkedIn Recruiter Hides npm Backdoor in GitHub Code Review Request — Developer Catches It With AI Agent Sandbox

roman.pt · 2026-06-15 · Score: 18

Attackers Actively Exploit Three Fortinet FortiSandbox Flaws Rated CVSS 9.1 — Unauthenticated Code Execution on Security Sandboxes

The Hacker News · 2026-06-16 · Score: 22

SearchLeak: One-Click Attack Chains Three Microsoft 365 Copilot Bugs to Exfiltrate Emails, MFA Codes, and Files

The Hacker News · 2026-06-15 · Score: 23

ALERT 100+ Cybersecurity Leaders Demand US Reverse Fable 5 Ban — 'Fix This Code' Prompt Was the Trigger, Not a Jailbreak

The Register · 2026-06-15 · Score: 28

FIRST Projects AI Autonomous Discovery Will Push 2026 CVE Count to 66,000 — Human Patching Capacity Now the Binding Constraint

Help Net Security · 2026-06-15 · Score: 19

SoftBank Launches OpenAI-Powered 'Patching as a Service' to Protect Japan's Top 3,000 Critical Infrastructure Companies From AI-Amplified Cyberattacks

SoftBank · 2026-06-16 · Score: 20

Arcade Raises $60M Series A to Build MCP Authorization and Governance Layer for Production AI Agents — 25× Tool Call Growth in Six Months

Las Vegas Sun · 2026-06-15 · Score: 20

CDN Supply-Chain Attack Compromises Awesome Motive Plugins — Malicious JS in OptinMonster, TrustPulse, and PushEngage Creates Rogue Admin Accounts on 1.2 Million WordPress Sites

bleepingcomputer.com · 2026-06-15 · Score: 26

NewCore Emerges From Stealth With $66M to Build AI-Native Identity and Access Management for Enterprise Agents

techcrunch.com · 2026-06-15 · Score: 21

LiteLLM Three-CVE Chain (CVSS 9.9): Any Low-Privilege User Can Take Over AI Gateway Server and Execute Arbitrary Code

thehackernews.com · 2026-06-15 · Score: 27

China-Linked Velvet Ant Backdoored Linux PAM and OpenSSH Since 2016, Hiding for Nearly a Decade by Corrupting the Authentication Layer Itself

thehackernews.com · 2026-06-12 · Score: 20

Over 400 Arch Linux AUR Packages Hijacked in 'Atomic Arch' Supply Chain Attack — Rust Credential Stealer and eBPF Rootkit Target Developer Keys, Tokens, and SSH Credentials

thehackernews.com · 2026-06-12 · Score: 23

ALERT 'Agentjacking' Attack Hijacks Claude Code, Cursor, and Codex via Fake Sentry Errors — 85% Exploitation Rate, 2,388 Organizations Exposed

thehackernews.com · 2026-06-12 · Score: 28

Google Sues AI-Powered Chinese Phishing Ring 'Outsider Enterprise' — 9,000 Fake Sites, 1M Fraudulent Domains, $1.9B Estimated Losses Since 2023

techcrunch.com · 2026-06-12 · Score: 27

Check Point Discloses LangGraph CVE Chain: SQL Injection + Unsafe Deserialization Chain to Full RCE on Self-Hosted AI Agent Deployments

thehackernews.com · 2026-06-12 · Score: 26

Nottingham University Data Breach Affects 454,600 Students — ShinyHunters Steals Passports, Ethnicity and Disability Data via Oracle PeopleSoft

bleepingcomputer.com · 2026-06-11 · Score: 24

Security Researcher Uses Claude AI and MCP to Fuzz Google's 1,500+ APIs, Earns $500,000 in Bug Bounties Over Three Months

brutecat.com · 2026-06-11 · Score: 20

SiderAI (10M Installs) and MaxAI (1M Installs) Chrome Extensions Left Unpatched With UXSG and UXSS Vulnerabilities — Vendors Unresponsive

rebora.io · 2026-06-10 · Score: 24

JDY Botnet: China-Linked 1,500-Device Reconnaissance Network Evolved Independently After KV-Botnet FBI Takedown, Now Active for Volt Typhoon

thehackernews.com · 2026-06-10 · Score: 17

Proto6: Six CVEs in Protobuf.js Enable Code Injection and RCE Across Google Cloud, Node.js Apps, and CI/CD Pipelines

thehackernews.com · 2026-06-10 · Score: 18

Miasma Supply-Chain Worm Source Code Deliberately Leaked to GitHub Through Compromised Developer Accounts

bleepingcomputer.com · 2026-06-10 · Score: 21

FBI and DOJ Seize 13 Chinese Intelligence Websites That Used AI-Generated Fake Personas to Recruit U.S. Security Clearance Holders

nextgov.com · 2026-06-10 · Score: 20

GitHub to Disable npm Install Scripts by Default in npm v12 to Block Supply Chain Attacks

thehackernews.com · 2026-06-11 · Score: 25

ShinyHunters Claims Breach of Oracle PeopleSoft Servers at 100-Plus Organizations, Student and Health Records Taken

techcrunch.com · 2026-06-10 · Score: 25

r/PromptEngineering: White-Text PDF Injection Bypasses Input-Only Prompt Filters — Developer Documents Near-Miss in Production RAG System

reddit.com · 2026-06-11 · Score: 19

Nearly a Million Passports and Photo IDs Left Unprotected on the Public Internet via Cannabis Club App PuffPal

theverge.com · 2026-06-10 · Score: 22

Unpatched Langflow CVE-2026-5027 (CVSS 8.8) Enables Unauthenticated RCE on AI Dev Platform — 7,000 Exposed Instances Being Actively Exploited

thehackernews.com · 2026-06-10 · Score: 24

r/artificial: Claude Fable 5 Security Guardrails Bypassed With Fake Homework Assignment — Educational Framing Overrides Hard Blocks on Exploit Assistance

reddit.com · 2026-06-10 · Score: 18

CrowdStrike: China-Linked Groups Are Now Top State-Sponsored Threat to Tech Sector — AI Companies Named High-Value Targets Aligned With 2030 Dominance Goal

techwireasia.com · 2026-06-10 · Score: 19

CISA Issues BOD 26-04 Requiring Federal Agencies to Patch Highest-Risk Vulnerabilities Within 3 Days — AI Acceleration Cited as Driver

cyberscoop.com · 2026-06-10 · Score: 19

r/MachineLearning: Comprehensive 75-Day AI Agent Security Reference Synthesizes 18 Articles Covering April–June 2026 — 'Theoretical Concern to Operational Crisis'

reddit.com · 2026-06-10 · Score: 17

Veeam Backup & Replication CVE-2026-44963 (CVSS 9.4): Authenticated Domain User Achieves RCE on Backup Servers

thehackernews.com · 2026-06-09 · Score: 18

r/artificial: Multi-Turn Prompt Injection Is Already the Default Threat Posture for Production AI Agents — Not a Hypothetical

reddit.com · 2026-06-10 · Score: 15

Anthropic and OpenAI Are Now Cybersecurity's Kingmakers — Both Labs Building Formal Vetting Programs to Control Who Gets Unrestricted Frontier AI

axios.com · 2026-06-09 · Score: 23

MiniPlasma Windows Zero-Day Still Unpatched After June Patch Tuesday — SYSTEM Privilege Escalation Active on All Fully Patched Windows 11

darkreading.com · 2026-06-10 · Score: 23

arXiv 2606.03811: AI-Driven Worm Propagates Across Heterogeneous Networks by Parasitically Acquiring Compute for Autonomous Reasoning

arxiv.org · 2026-06-09 · Score: 23

Anthropic Expands Claude Mythos to 150 More Organizations Including EU ENISA While Only 14% of 10,000+ Discovered Vulnerabilities Have Been Patched

thenextweb.com · 2026-06-09 · Score: 26

r/LocalLLaMA: RedThread — Open-Source CLI for Repeatable LLM and Agent Red-Team Campaigns Argues Test Fixtures Beat Clever Jailbreaks

reddit.com · 2026-06-10 · Score: 18

Research from Toronto, Cambridge, and ServiceNow Demonstrates AI Malware Worm That Autonomously Adapts Exploits to New Targets in Real Time by Ingesting Live CVE Advisories

decrypt.co · 2026-06-09 · Score: 24

watchTowr: Ivanti Sentry CVE-2026-10520 — Pre-Authenticated OS Command Injection Grants Unauthenticated Root RCE, CVSS 10/10, Patch Available

labs.watchtowr.com · 2026-06-10 · Score: 27

FBI Operation Riptide: International Takedown of 'First VPN Service' Used by 25 Ransomware Groups Since 2014

bostonglobe.com · 2026-06-09 · Score: 22

ServiceNow Confirms Security Incident — Unauthenticated REST Endpoint Exposed Customer Instance Data Including IT Tickets, Employee Records, and Security Incident Reports

bleepingcomputer.com · 2026-06-09 · Score: 24

RoguePlanet: New Windows Defender Zero-Day PoC Drops on Patch Tuesday — Race Condition Achieves SYSTEM Shell on Fully Patched Windows 10 and 11, No CVE, No Fix

github.com · 2026-06-09 · Score: 25

ALERT DPRK-Linked Multi-Stage Backdoor Found Loitering in VS Code Marketplace — Three Extensions Use Microsoft Graph API and SharePoint for C2, 3/71 VirusTotal Detection

yeethsecurity.com · 2026-06-09 · Score: 29

Fortune: AI Is Supercharging Cyberattacks and Most Companies Aren't Ready — Exploit Creation Now Takes Hours, Not Weeks

fortune.com · 2026-06-09 · Score: 17

North Korean Hackers Posing as Remote IT Workers Are Behind Nearly Half of All Tech Firm Cyberattacks, New Report Finds

forbes.com · 2026-06-09 · Score: 22

Microsoft June 2026 Patch Tuesday: 200 Flaws Fixed Including Three Zero-Days — YellowKey BitLocker Bypass, CTFMON Privilege Escalation, and HTTP/2 Bomb

bleepingcomputer.com · 2026-06-09 · Score: 27

Exodus Intelligence Publishes Full Exploit for CVE-2026-23111 — Linux nf_tables Use-After-Free Grants Local Root With Greater Than 99% Reliability, Container Breakout Confirmed

securityaffairs.com · 2026-06-09 · Score: 24

Checkmarx Survey: 30% of Developers Knowingly Deploy Vulnerable AI-Generated Code to Production — Orgs at 81–100% AI Adoption Breach at 3.4× the Rate

theregister.com · 2026-06-09 · Score: 21

WinGet Abused for Stealthy Code Execution and Security Tool Evasion via YAML PowerShell DSC Files — No CVE, No Patch

ipurple.team · 2026-06-09 · Score: 16

Miasma Supply Chain Toolkit Internals Published: Dead-Man Switch Destroys Home Directory, C2 Hidden in GitHub Commits, 13 AI Coding Tools Targeted Including Claude Code and Cursor

safedep.io · 2026-06-09 · Score: 26

r/ClaudeAI: Developer's Prompt Injection Detection API Finds Audio-Layer Attacks Survive Accurate Transcription — 'The Transcription Is Fine. That's the Problem.'

Reddit/r/ClaudeAI · 2026-06-09 · Score: 17

ALERT Anthropic Mythos Cybersecurity AI Set for Public Release as Soon as June 9 — Prediction Markets Surge to 75.8% for June 15

Crypto Briefing · 2026-06-08 · Score: 32

Google Patches Fifth Chrome Zero-Day of 2026 — CVE-2026-11645 V8 Engine Heap Corruption Actively Exploited in the Wild

bleepingcomputer.com · 2026-06-09 · Score: 23

ALERT Trump Signs Executive Order Promoting Advanced AI Innovation and Security

whitehouse.gov · 2026-06-02 · Score: 28

HN: 'Graphs That Explain the State of AI in 2026' — Data-Driven Benchmark and Attack-Trend Snapshot Draws High Engagement

news.ycombinator.com · 2026-05-09 · Score: 16

Newsletter Issues (26)

AI Safety, Security & Ethics: train one trait, get alignment free

2026-06-21 · 1 mentions

AI Regulation: export-control law just became an AI kill switch

2026-06-21 · 3 mentions

#3 Votre IA peut désormais dépenser votre argent — Visa l'a branchée sur ChatGPT

2026-06-11 · 1 mentions

#504 America blocked its best AI. China just raised $7.4 billion.

2026-06-17 · 1 mentions

#497 AI's labor war just went global

2026-05-29 · 2 mentions

#496 Anthropic's Pentagon model is now everyone's model

2026-05-27 · 2 mentions

AI Regulation: Trump killed his own AI oversight order at the door

2026-05-26 · 2 mentions

AI Careers: Meta cuts 8,000, reshuffles 7,000 into AI

2026-05-26 · 1 mentions

AI Regulation: the White House reverses course on AI safety

2026-05-21 · 2 mentions

AI Careers: 11,000 jobs cut in a day, one role is booming

2026-05-21 · 1 mentions

#493 Meta hired $145B in capex and fired 8,000 people

2026-05-19 · 3 mentions

AI safety: do-not-release model leaked, supply chain on fire

2026-04-25 · 1 mentions

#486 Apple is replacing Tim Cook because of AI

2026-04-22 · 3 mentions

AI Applications: The agent is not a product anymore

2026-04-18 · 1 mentions

AI Safety: Treasury called an emergency AI meeting

2026-04-18 · 2 mentions

Generative AI: Anthropic just retook the frontier, quietly

2026-04-18 · 1 mentions

#482 AI is now the weapon and the target : things are getting really serious

2026-04-10 · 7 mentions

#481 Musk wants Altman fired, Anthropic passes OpenAI, Meta goes closed

2026-04-09 · 3 mentions

#480 Monday Edition : npm compromised by North Korea, Iran targets AI data centers, and nobody wants OpenAI stock

2026-04-06 · 1 mentions

#478 The machines are hacking back — and so is everyone else

2026-04-03 · 7 mentions

#476 Weekly Intelligence Briefing: Tech, AI & Policy

2026-03-27 · 1 mentions

#430 Issue #430 : Here’s why Google pitched its $32B Wiz acquisition as ‘multicloud’

2025-03-20 · 2 mentions

#463 Issue #463: All about The

2026-02-02 · 2 mentions

#465 Issue #465: the DOOM edition : 5 ways AI could destroy everything

2026-02-12 · 1 mentions

#467 Issue #467: Anthropic has receipts. And nobody wants to pay for AI.

2026-02-26 · 1 mentions

#471 The AI civil war? Anthropic blasted and Open AI sees users flee

2026-03-11 · 1 mentions