Cybersecurity News — AI Trends, Updates & Tracker

Mention Trend — Last 20 Issues

Live Stories (101)

404 Media Sues ICE Over Paragon Spyware Contract — Agency Releases Only 77 of 673 Pages, Obscuring Graphite's Signal and WhatsApp Extraction Capabilities

404media.co · 2026-06-01 · Score: 22

Seqrite Uncovers Operation Dragon Weave: China-Linked APT Tunnels C2 Through Azure Blob Storage to Hit Czech Republic and Taiwan Tech and Government Sectors

thehackernews.com · 2026-06-01 · Score: 20

r/cybersecurity: Every SaaS Company Is Accidentally Building the Same AI Privilege-Escalation Vulnerability That Hit Meta Instagram

agilehunt.com · 2026-06-01 · Score: 17

ALERT Anthropic Grants EU Cybersecurity Agency ENISA First Non-US Access to Claude Mythos Through Project Glasswing

cryptobriefing.com · 2026-06-01 · Score: 28

Miasma: Supply Chain Attack Compromises 32 RedHat npm Packages via GitHub Actions OIDC, Harvests Cloud Credentials

wiz.io · 2026-06-01 · Score: 26

r/LocalLLaMA: CVE-Bench Finds LLM Agents' Worst Security-Patch Outcome Is a Convincing Fix That Passes All Tests but Ships Vulnerability Intact

giovannigatti.github.io · 2026-06-01 · Score: 18

Windows Netlogon CVE-2026-41089 (CVSS 9.8) Now Actively Exploited — Zero-Click RCE Enables Full Domain Takeover With No Authentication

cybersecuritynews.com · 2026-06-01 · Score: 21

Meta AI Instagram Chatbot Exploited to Bypass 2FA and Steal High-Value Accounts — Emergency Hotfix Deployed

thecybersecguru.com · 2026-06-01 · Score: 25

Wiz Discloses AI-Discovered GitHub RCE — CVE-2026-3854 Lets Any Authorized Git Push Hijack Enterprise Server via Header Injection

darkreading.com · 2026-06-01 · Score: 26

LLMReaper: Security Researcher Discloses DOM-Based AI Conversation Exfiltration PoC Targeting ChatGPT, Claude, and Gemini via Browser Extensions

thewhiteh4t.github.io · 2026-05-31 · Score: 20

r/ClaudeAI: Opus 4.8 Now Refuses to Analyze CTF Challenge Code — Developer Documents Immediate Refusals on Encryption, Obfuscation, and Custom VM Analysis

reddit.com · 2026-05-30 · Score: 20

Fortune: AI Cybersecurity Arms Race Has Already Started — Most Enterprise Defenses Are Still Calibrated for Human-Speed Threats

fortune.com · 2026-05-29 · Score: 20

NCSC CTO Week-Ending May 31 Security Summary: PAN-OS Active Exploitation, Langflow Campaigns, and Unexpected Windows EPSS Spike

ctoatncsc.substack.com · 2026-05-30 · Score: 16

CISA Adds Palo Alto PAN-OS GlobalProtect Authentication Bypass CVE-2026-0257 to KEV — Unauthenticated VPN Cookie Forgery Under Active Exploitation, Federal Patch Deadline June 19

thehackernews.com · 2026-05-29 · Score: 25

RedAccess Finds 380,000 Vibe-Coded Apps Deployed Publicly With No Access Controls — 2,000+ Actively Leaking Medical Records, Financial Documents, and Customer Data

thehackernews.com · 2026-05-29 · Score: 20

Malicious 'Sicoob.Sdk' NuGet Package Exfiltrates PFX Certificates and Banking Passwords From .NET Developers Integrating With Brazil's Largest Cooperative Bank

thehackernews.com · 2026-05-29 · Score: 21

FortiClient EMS CVE-2026-35616 Actively Exploited to Deploy EKZ Infostealer to All Managed Enterprise Endpoints via Fake Fortinet Patch

helpnetsecurity.com · 2026-05-29 · Score: 23

New Russia-Linked Threat Actor GREYVIBE Uses ChatGPT and Google Gemini to Power Five Parallel AI-Assisted Cyberattack Chains Against Ukraine

thehackernews.com · 2026-05-29 · Score: 23

TeamPCP Compromises Nx Console VS Code Extension Used by 2.2 Million Developers — 11-Minute Trojan Exfiltrates Cloud Secrets, GitHub Internal Repos Breached

thehackernews.com · 2026-05-29 · Score: 26

ALERT Sysdig Documents First Live Cyberattack Using an LLM Agent for Autonomous Post-Exploitation — AWS Database Exfiltrated via Marimo CVE in Under an Hour

thehackernews.com · 2026-05-29 · Score: 28

ChatGPhish: Permiso Security Discloses ChatGPT Prompt-Injection Vulnerability That Turns Web Summaries Into Phishing Surfaces

thehackernews.com · 2026-05-29 · Score: 24

Microsoft Threatens Security Researcher Nightmare Eclipse With Criminal Investigation After Windows Zero-Day Disclosures — Security Community Pushes Back

firethering.com · 2026-05-29 · Score: 24

Developer Discloses How 949 Bot Accounts Weaponized His Open Source Project to Phish 14,500 People in Three Hours

andrej.sh · 2026-05-29 · Score: 16

Dev Sneaks Data-Nuking Prompt Injection Into Open Source Java Library to Sabotage AI Coding Agents

arstechnica.com · 2026-05-29 · Score: 24

Dutch Police and NCSC Dismantle 17-Million-Device Asocks Residential Proxy Botnet Used for Phishing and DDoS

Ars Technica · 2026-05-29 · Score: 21

Malicious npm Package 'codexui-android' Silently Exfiltrates OpenAI Codex Auth Tokens at ~27,000 Downloads Per Week

Cybernews · 2026-05-29 · Score: 24

r/artificial: SOC Analysts Are Pasting Incident Data Into AI Tools for Triage — Enterprise AI Policies Never Covered This Use Case

reddit.com · 2026-05-29 · Score: 16

Disgruntled Windows 0-Day Researcher Threatens July 14 'Bone-Shattering' Dump — Three CVEs Already Actively Exploited

theregister.com · 2026-05-28 · Score: 19

Malicious npm Package 'microsoftsystem64' Conceals Full RAT and Routes Stolen Data Through HuggingFace as Novel C2 Infrastructure

safedep.io · 2026-05-29 · Score: 21

Critical Gogs Zero-Day RCE Unpatched After 2+ Months — CISA Adds to KEV, 2,400+ Servers Exposed With No Fix Available

thecybersecguru.com · 2026-05-29 · Score: 23

Japan's Three Megabanks — MUFG, SMBC, Mizuho — Get Access to OpenAI's GPT-5.5-Cyber in US-Japan Security Agreement

Nikkei Asia · 2026-05-29 · Score: 23

r/cybersecurity: Puck Scout — Open-Source Autonomous Endpoint Investigation via MCP, Read-Only, Returns Narrative Answers With Containment Recommendations

github.com · 2026-05-29 · Score: 17

CIFSwitch: AI-Discovered Linux Kernel Local Privilege Escalation Disclosed With Working PoC, Affects Mint, RHEL, SUSE, Kali

cybersecuritynews.com · 2026-05-28 · Score: 22

Microsoft Exposes Active Typosquatted npm Campaign Stealing Cloud and CI/CD Credentials From Developer Environments

microsoft.com · 2026-05-28 · Score: 25

r/ClaudeAI: User Finds 'Human1' Messages in Their Claude Conversation — Apparent Cross-User Prompt Leak on Claude.ai

reddit.com · 2026-05-28 · Score: 20

AI Models More Vulnerable Than Claimed When Faced With Iterative Attacks, New Research Finds

csoonline.com · 2026-05-27 · Score: 21

Hackers Are Targeting Signal Backup Recovery Keys in New Phishing Campaign — Journalists and Activists Confirmed Among Victims

techcrunch.com · 2026-05-28 · Score: 18

r/ClaudeAI: 1-in-4 Agent Skills Contained Security Vulnerabilities in Analysis of 31,132 Real Skills — Prompt Injection, Exfiltration, Privilege Escalation

reddit.com · 2026-05-28 · Score: 19

r/cybersecurity: Production Audit Finds Enterprise AI Agents Holding Service-Account Privileges Exceeding Any Human Sysadmin, Bypassing PAM Controls

reddit.com · 2026-05-28 · Score: 21

Zapier Fixes Bug Chain That Researchers Say Risked Widespread Account Takeover Across AI Automation Workflows

cyberscoop.com · 2026-05-28 · Score: 22

r/artificial: OpenClaw Is the AI Agent Sector's Most Complete Security Crisis — Full Timeline of 4 Chainable CVEs, 245,000 Exposed Instances, and Runtime Governance Collapse

reddit.com · 2026-05-28 · Score: 21

Geordie AI Raises $30M Series A Led by Balderton Capital for AI Agent Runtime Security and Governance Platform

fortune.com · 2026-05-28 · Score: 21

IBM and Red Hat Commit $5 Billion to AI-Augmented Open Source Security Initiative Project Lightwell, Backed by 11 Major Banks

ibm.com · 2026-05-28 · Score: 27

Google Cloud Launches AI Threat Defense: Always-On Autonomous Platform Fusing Gemini, Wiz, Mandiant, and CodeMender Against AI-Speed Cyberattacks

cloud.google.com · 2026-05-27 · Score: 25

ALERT ECB Holds Ad Hoc Emergency Meeting After Anthropic's Mythos AI Uncovers Thousands of Zero-Days in Banking Systems — European Banks Excluded From Model Access

itsecurityguru.org · 2026-05-27 · Score: 28

AI Chatbot Recommendations Weaponized in Active Cryptojacking Campaign, Microsoft Researchers Warn

thehackernews.com · 2026-05-27 · Score: 25

r/artificial: AI Coding Agents Are Creating a Systematic Credential Leakage Crisis That Existing Security Pipelines Cannot See

reddit.com · 2026-05-28 · Score: 19

Websites Have a New Way to Spy on Visitors: Analyzing Their SSD Activity — Novel Storage Side-Channel Attack Bypasses Existing Browser Fingerprinting Defenses

Ars Technica · 2026-05-27 · Score: 20

Malicious npm Package 'mouse5212-super-formatter' Targets Claude AI User Directory — 'Malware-Slop' Campaign Exfiltrates Files via GitHub, Downloaded 676 Times

thehackernews.com · 2026-05-27 · Score: 24

r/AI_Agents: Prompts Are Not Access Control for AI Agents — Developer Calls for Enforcement Layer Outside the Model

reddit.com · 2026-05-27 · Score: 18

Anthropic Launches Claude Compliance API With 28 Enterprise Security Integrations Including CrowdStrike, Palo Alto, Okta, and Wiz

securityweek.com · 2026-05-26 · Score: 21

Gitea CVE-2026-27771: Unauthenticated Attackers Can Pull Private Container Images From 30,000+ Deployments Worldwide

thehackernews.com · 2026-05-27 · Score: 23

Hunt.io Exposes Global Smishing Operation Hitting 19 Countries Across 3 Continents, Targeting Governments, Postal Services, and Telecoms

hunt.io · 2026-05-27 · Score: 21

ECB Tells Eurozone Banks to Invest More to Get Grip on AI Security Risk

reuters.com · 2026-05-27 · Score: 22

Anthropic Releases Free Security Guidance Plugin for Claude Code — Blocks 25 Vulnerable Patterns in Real Time, 157K Downloads in First 24 Hours

cybersecuritynews.com · 2026-05-26 · Score: 21

Meta Open-Sources mcpguard-dynamic: Kernel-Level eBPF Sandbox Blocks Malicious LLM Agent Tool Calls Before Execution

github.com · 2026-05-27 · Score: 23

CISA Adds LiteSpeed cPanel Plugin CVE-2026-48172 (CVSS 10.0) to KEV — Root Privilege Escalation Actively Exploited, Federal Patch Deadline May 29

haltingproblems.com · 2026-05-26 · Score: 26

CrowdStrike, Google, and Shadowserver Disrupt Glassworm Supply-Chain Botnet — 300+ GitHub Repos Compromised, VSCode and npm Ecosystem Poisoned Since 2025

crowdstrike.com · 2026-05-26 · Score: 27

r/AI_Agents: Developer Ships OS-Level Firewall for Local Coding Agents — Binary Shims for rm/git/kubectl/mysql Plus MCP Proxy Layer

reddit.com · 2026-05-27 · Score: 15

ALERT CVE-2026-48710 'BadHost': Critical Starlette Auth-Bypass Imperils Millions of AI Agents, FastAPI, vLLM, LiteLLM, and Every MCP Server

arstechnica.com · 2026-05-26 · Score: 28

r/ClaudeAI: User Receives Unsolicited GitHub Read/Write Permission Request Attributed to Claude While Not Logged In

reddit.com · 2026-05-27 · Score: 20

Microsoft Patches High-Severity SharePoint RCE CVE-2026-45659 Across On-Prem Server Versions — No Elevated Privileges Required

thehackernews.com · 2026-05-26 · Score: 20

r/artificial: Developer Documents Why Agentic AI Security Boundary Cannot Sit Inside the Model — Claude as Orchestrator Case Study

reddit.com · 2026-05-27 · Score: 16

Check Point 2026 Cloud Security Report: 78% of Organizations Report AI Security Incidents, 51-Point Gap Between Stated Strategy and Actual Architecture

checkpoint.com · 2026-05-26 · Score: 22

Iranian IRGC-Linked Nimbus Manticore Expands Attacks With AI-Assisted MiniFast Backdoor Targeting US and European Defense, Aviation, and Telecom Sectors

thehackernews.com · 2026-05-26 · Score: 25

Shai-Hulud Hackers TeamPCP: Lucky or Skilled Operators? Dark Reading Profiles the Group Behind 2026's Most Damaging Supply-Chain Worm Campaign

darkreading.com · 2026-05-26 · Score: 21

Wiz State of SDLC Security 2026: 1-in-5 Organizations Using Vibe-Coding Platforms Have Systemic Security Weaknesses, AI Commits Double Credential Leak Rate

wiz.io · 2026-05-27 · Score: 24

ALERT BNP Paribas Works With Mistral AI to Build European Cybersecurity Defense Against Mythos-Class AI Models

bloomberg.com · 2026-05-26 · Score: 29

Anthropic Engineering Post Discloses Two Real Security Incidents — AWS Credentials Exfiltrated in 24 of 25 Prompt-Injection Attempts, Pre-Trust Execution Bug in Claude Code

anthropic.com · 2026-05-25 · Score: 25

KnowledgeDeliver Flaw Exploited as Zero-Day to Install Persistent Web Shells Across Enterprise Sites

bleepingcomputer.com · 2026-05-26 · Score: 17

GitHub Actions Cache Poisoning Is Eating Open Source — Researcher Documents Systemic Attack Vector Enabling All Recent Supply-Chain Incidents

neciudan.dev · 2026-05-26 · Score: 18

Iranian State-Linked Hackers Blamed for March Breach of LA County Metro — 700GB Stolen, Transit Systems Disrupted, Weeks to Recover

techcrunch.com · 2026-05-26 · Score: 20

curl Maintainer Daniel Stenberg Publishes 'The Pressure' — AI CVE Slop Forces Bug Bounty Shutdown, Anthropic Mythos Confirms One Real Vulnerability via Linux Foundation Alpha Omega

daniel.haxx.se · 2026-05-26 · Score: 21

Perplexity Open-Sources Bumblebee: Read-Only Supply-Chain Scanner for Developer Endpoints

devops.com · 2026-05-26 · Score: 21

Trump Hobbled Top Cyber Agency Just as AI Learned to Hack

axios.com · 2026-05-26 · Score: 26

SF Chronicle Op-Ed: The Canvas Hack Was a Warning About Our AI Future — Anthropic Mythos Changes the Threat Model

sfchronicle.com · 2026-05-26 · Score: 21

Audit of 20 Production Repos After May GitHub Actions Supply Chain Attack Finds Every Single One Had At Least 3 of 8 Critical Misconfigurations

copilotkit.ai · 2026-05-26 · Score: 19

CERT-In Mandates 12-Hour Patching for Internet-Facing Flaws, Explicitly Cites AI-Accelerated Exploit Timelines

thehackernews.com · 2026-05-25 · Score: 22

AI Guardrails Stripped From Meta and Google Open-Source Models in Under 10 Minutes Using Free Tools

ft.com · 2026-05-25 · Score: 26

r/LocalLLaMA: New Local Model Reaches Near-Frontier on PII Removal at 9ms CPU Inference

screenpipe.github.io · 2026-05-26 · Score: 16

ALERT r/technology: Anthropic to Release Mythos-Class Models to the Public

The Register · 2026-05-25 · Score: 32

Lazarus Group Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms — North Korea Accounts for 76% of All 2026 Global Crypto Theft

thehackernews.com · 2026-05-25 · Score: 22

Ghost CMS CVE-2026-26980 Exploited in Large-Scale ClickFix Campaign — 700+ Sites Including Harvard, Oxford, and DuckDuckGo Compromised

thehackernews.com · 2026-05-25 · Score: 25

r/artificial: Sygnia 2026 CISO Survey — 73% Not Ready for Major Incidents, Only 1-in-3 Can Investigate an AI Agent Attack

reddit.com · 2026-05-25 · Score: 18

r/ClaudeAI: Multiple AI Assistants Hallucinate Official Discord Invite Links — Developer Flags Active Phishing Risk

reddit.com · 2026-05-25 · Score: 21

r/cybersecurity: Developer Argues CVE Framework Fundamentally Fails for AI Agents, Proposes AVE (AI Vulnerability Enumeration) Taxonomy With Dedicated AIVSS Risk Scoring

Reddit · 2026-05-25 · Score: 16

Cybersecurity Advisor Job Listings Rise 11% as Claude Mythos and GPT-5.4-Cyber Create New Threat Categories Requiring Human Expertise

ndtvprofit.com · 2026-05-25 · Score: 17

Crypto4A Launches QxVault: Quantum-Safe Secrets Manager With Integrated HSM Takes Direct Aim at AWS Secrets Manager and HashiCorp Vault

nerds.xyz · 2026-05-25 · Score: 18

TechCrunch: Google Cloud COO Says Entire AI Industry Navigating Security Without a Playbook — LinkedIn CISO Warns of Incoming 'Bug-Pocalypse'

techcrunch.com · 2026-05-24 · Score: 22

Hackers Are Learning to Exploit Chatbot 'Personalities' as AI Assistants Become a Distinct Attack Surface

theverge.com · 2026-05-25 · Score: 18

r/cybersecurity: SHub 'Reaper' Variant Abandons Terminal ClickFix After Apple Paste Restrictions — Pivots to Modular macOS Persistence

reddit.com · 2026-05-25 · Score: 20

r/AI_Agents: Developer Essay Warns Teams Give AI Agents Full Database and Payment API Access — Then Ship Without Production-Level Monitoring

reddit.com · 2026-05-25 · Score: 17

New Zealand Is at the Wild Frontier of AI Superhacking Threats

rnz.co.nz · 2026-05-24 · Score: 17

ALERT TrapDoor Supply-Chain Attack Targets npm, PyPI, and Crates.io With Novel AI-Assistant Poisoning — Hidden Unicode Injected Into .cursorrules and CLAUDE.md Config Files

thecybersecguru.com · 2026-05-23 · Score: 33

r/OpenAI: Developer Banned After Reporting Live Credential Hijack — OpenAI Admitted Account Was 'Broken' in Writing, Seven Months of Forensic Receipts Posted

reddit.com · 2026-05-24 · Score: 17

Politico Explainer: What to Know About the AI Models Jolting Washington — Mythos, the Oversight Gap, and the Policy Battle Ahead

politico.com · 2026-05-24 · Score: 20

r/artificial: Environmental Prompt Injection Is the AI Agent Attack Vector Most Teams Still Ignore — Every External Input Is a Potential Weapon

reddit.com · 2026-05-24 · Score: 16

Zero-Click Spyware Attacks Targeting Journalists Require No User Interaction — TechCrunch Surveys Apple, Google, and Meta Defense Features

techcrunch.com · 2026-05-23 · Score: 16

r/ClaudeAI: Developer Builds Local Cybersecurity MCP Server Giving Claude Real-Time WHOIS, DNS Enumeration, Nmap Port Scanning, and SSL Certificate Inspection

reddit.com · 2026-05-24 · Score: 17

r/artificial: LLM Guard Scored 0/8 Detecting Crescendo Multi-Turn Jailbreak — Developer Documents Alternative Cross-Turn Monitor That Caught It

reddit.com · 2026-05-24 · Score: 17

HN: 'Graphs That Explain the State of AI in 2026' — Data-Driven Benchmark and Attack-Trend Snapshot Draws High Engagement

news.ycombinator.com · 2026-05-09 · Score: 16

Newsletter Issues (24)

#497 AI's labor war just went global

2026-05-29 · 2 mentions

#496 Anthropic's Pentagon model is now everyone's model

2026-05-27 · 2 mentions

AI Regulation: Trump killed his own AI oversight order at the door

2026-05-26 · 2 mentions

AI Careers: Meta cuts 8,000, reshuffles 7,000 into AI

2026-05-26 · 1 mentions

AI Applications: the model makers want your consulting budget

2026-05-21 · 1 mentions

AI Regulation: the White House reverses course on AI safety

2026-05-21 · 2 mentions

AI Careers: 11,000 jobs cut in a day, one role is booming

2026-05-21 · 1 mentions

#493 Meta hired $145B in capex and fired 8,000 people

2026-05-19 · 3 mentions

AI Regulation: Brussels blinks, DOJ sues a state, Connecticut moves

2026-05-13 · 1 mentions

AI safety: do-not-release model leaked, supply chain on fire

2026-04-25 · 1 mentions

#486 Apple is replacing Tim Cook because of AI

2026-04-22 · 3 mentions

AI Applications: The agent is not a product anymore

2026-04-18 · 1 mentions

AI Safety: Treasury called an emergency AI meeting

2026-04-18 · 2 mentions

Generative AI: Anthropic just retook the frontier, quietly

2026-04-18 · 1 mentions

#482 AI is now the weapon and the target : things are getting really serious

2026-04-10 · 7 mentions

#481 Musk wants Altman fired, Anthropic passes OpenAI, Meta goes closed

2026-04-09 · 3 mentions

#480 Monday Edition : npm compromised by North Korea, Iran targets AI data centers, and nobody wants OpenAI stock

2026-04-06 · 1 mentions

#478 The machines are hacking back — and so is everyone else

2026-04-03 · 7 mentions

#476 Weekly Intelligence Briefing: Tech, AI & Policy

2026-03-27 · 1 mentions

#430 Issue #430 : Here’s why Google pitched its $32B Wiz acquisition as ‘multicloud’

2025-03-20 · 2 mentions

#463 Issue #463: All about The

2026-02-02 · 2 mentions

#465 Issue #465: the DOOM edition : 5 ways AI could destroy everything

2026-02-12 · 1 mentions

#467 Issue #467: Anthropic has receipts. And nobody wants to pay for AI.

2026-02-26 · 1 mentions

#471 The AI civil war? Anthropic blasted and Open AI sees users flee

2026-03-11 · 1 mentions