Mention Trend — Last 20 Issues

Live Stories (71)

ALERT Compromised jscrambler npm 8.14.0 Release Drops Rust Infostealer Targeting Claude Desktop, Cursor, Windsurf, VS Code and Zed Config Files

thehackernews.com · 2026-07-11 · Score: 28

Microsoft Warns Customers AI Will Mean Busier Patch Tuesdays — Discloses 'MDASH' Multi-Model Agentic Scanning Harness Finding More Windows Vulnerabilities

theregister.com · 2026-07-10 · Score: 19

European Commission Unveils EU Action Plan on Cybersecurity and AI — Pre-Market Model Evaluation, 'Structured Access' Blueprint, EU Grand Challenge for Homegrown Cyber-AI

commission.europa.eu · 2026-07-07 · Score: 25

Keyfactor Raises $1B+ From Summit Partners for AI Security and Post-Quantum Machine Identity Platform — Insight, Sixth Street Retain Stakes

securityweek.com · 2026-07-07 · Score: 22

Reuters: CISA's Attack Surface Evaluation Team is Using Anthropic's Mythos to Scan Government Code Repositories — Already Uncovered a 'Large Number' of Vulnerabilities

reuters.com · 2026-07-06 · Score: 23

VentureBeat VB Pulse Survey: Just 1 in 10 Enterprises Can Automatically Catch a Failing AI System in Production — 79% Have Already Paid for an Agent Going Rogue

venturebeat.com · 2026-07-04 · Score: 21

Ex-NSO Founder Shalev Hulio's AI Cyber Startup Dream Opens Four Latin American Offices After $260M Raise at $3B Valuation — Targets Milei's Argentina and Colombia's De la Espriella

thenextweb.com · 2026-07-03 · Score: 26

'DuneSlide' Cursor IDE CVEs Disclosed — Two Zero-Click Prompt Injection Flaws (CVE-2026-50548/50549, CVSS 9.8) Let Attackers Escape Sandbox and RCE Developer Machines

thehackernews.com · 2026-07-01 · Score: 26

Cybersecurity Unicorn Aikido Acquires Israel's Root for $70–100M to Defend Open Source Against AI-Powered Attacks — Patches Vulnerabilities Without Forcing Upgrades

siliconangle.com · 2026-06-30 · Score: 22

Straiker Raises $64M Series A to Secure Autonomous AI Agents Against Prompt Injection and Tool Misuse

axios.com · 2026-06-29 · Score: 23

Google VP of Security Warns EU DMA Plans to Open Android and Search Data Could Enable Widespread Fraud Within Weeks

wired.com · 2026-06-29 · Score: 19

Engadget Investigation: 100,000+ Flock AI License Plate Readers Exposed Live Footage Without Passwords — Dozens of Officers Arrested for Stalking via System

engadget.com · 2026-06-28 · Score: 21

OpenAI Codex Has No Way to Exclude Sensitive Files — HN-Popular GitHub Issue Proposes .codexignore Standard to Block Credentials and Keys From AI Agent Access

github.com · 2026-06-28 · Score: 20

ONNXStego: PoC Tool Hides Encrypted Messages in ONNX Model Weights via Least-Significant Mantissa Bits — Model Validity Preserved

github.com · 2026-06-27 · Score: 17

WSJ: Z.ai's GLM-5.2 Matches Top US Models at Finding Security Bugs — Researchers Demand US Close Open-Model Export Control Gap

wsj.com · 2026-06-28 · Score: 23

Cybersecurity Firms Targeted by Fraudulent OpenAI Organization Invites Designed to Harvest Corporate Data

bleepingcomputer.com · 2026-06-26 · Score: 19

Clean GitHub Repo Tricks AI Coding Agents Into Executing Invisible Malware

bleepingcomputer.com · 2026-06-27 · Score: 23

ALERT OpenAI GPT-5.6 Safety Card: Sol Shows 3× Higher Self-Reasoning Control Rate, All Three Models Reach 'High' Bio and Cyber Capability for First Time

deploymentsafety.openai.com · 2026-06-26 · Score: 29

Amazon Q Developer CVE-2026-12957 (CVSS 8.5): Malicious Git Repo's MCP Config File Executes Code and Steals Live AWS Credentials — Full Disclosure June 26

thehackernews.com · 2026-06-26 · Score: 22

Gaslight: DPRK-Attributed macOS Backdoor Uses Prompt Injection to Fool LLM-Assisted Malware Analysis — First Documented Use of the Technique Inside Malware Itself

thehackernews.com · 2026-06-25 · Score: 27

ALERT Anthropic Accuses Alibaba of Running World's Largest AI Distillation Attack — 29 Million Claude Exchanges via 25,000 Fraudulent Accounts, Letter Sent to US Senators and White House

thenextweb.com · 2026-06-24 · Score: 38

Nature: Membership Inference Attacks Achieve Near-Perfect Success at Identifying Patients in Medical AI Training Sets — Underrepresented Groups at Highest Risk

theregister.com · 2026-06-24 · Score: 19

Cordyceps: CI/CD Flaws in 300+ High-Profile GitHub Repos Let Any Unauthenticated User Steal Credentials and Push Malicious Code — Microsoft Azure Sentinel, Google AI Agent Dev Kit, Apache, Cloudflare, Python PSF Confirmed Affected

thehackernews.com · 2026-06-24 · Score: 25

'By Design' Flaw in MCP Could Enable Widespread AI Supply Chain Attacks — Unsanitized Commands Execute Silently in Agent Pipelines

securityweek.com · 2026-06-24 · Score: 23

Tata Electronics Confirms Cyberattack as World Leaks Gang Publishes 630 GB of Files Allegedly Including Apple Production Docs and Tesla Schematics

cnbc.com · 2026-06-23 · Score: 23

Malicious npm Packages Disguised as PostCSS Utilities Deliver Multi-Stage Windows RAT With Chrome Credential Theft and Registry Persistence

thehackernews.com · 2026-06-23 · Score: 18

Varonis Explores Potential Sale After PE Interest From Blackstone, Thoma Bravo, and Vista Equity — VRNS Surges 14%

bloomberg.com · 2026-06-23 · Score: 17

Two Scattered Spider Members Plead Guilty on Day 1 of UK Trial — TfL Hack, US Healthcare Breaches, $115M in Ransom Collectively Attributed

krebsonsecurity.com · 2026-06-23 · Score: 17

Trump Signs Executive Order Accelerating Federal Post-Quantum Cryptography Migration to 2030 Deadline — Four Years Earlier Than Prior Target

thehackernews.com · 2026-06-22 · Score: 18

Fake AI Agent Skill Bypasses All Marketplace Scanners and Reaches 26,000 Agents — Full Agent Access Could Read Files and Hit Internal Systems

thehackernews.com · 2026-06-23 · Score: 25

LastPass Notifies Customers Personal Data and Support Case Records Were Stolen in Klue Breach

techcrunch.com · 2026-06-23 · Score: 26

ShapedPlugin Premium WordPress Plugins Backdoored via Build Pipeline in Supply Chain Attack — 400,000+ Sites Exposed, CVSS 10.0, Credentials and WooCommerce Order Data Exfiltrated

thehackernews.com · 2026-06-22 · Score: 24

DifyTap: Four CVEs in Dify AI Workflow Platform Allow Cross-Tenant Exfiltration of Private AI Conversations — CVSS 9.4 Path Traversal Remains Unpatched at Disclosure

thehackernews.com · 2026-06-22 · Score: 22

LiteLLM AI Gateway CVE-2026-42271 Added to CISA KEV — Unauthenticated RCE Chain Via MCP Endpoints Exposes All Configured OpenAI and Anthropic API Keys

thehackernews.com · 2026-06-22 · Score: 23

Leaked Files Reveal Russia's 'Project 2026' — State-Sponsored Operation to Manipulate AI Chatbot and Search Engine Training Data

bloomberg.com · 2026-06-23 · Score: 23

23 ClawHub Plugins Squatted Official OpenClaw Namespaces — Code-Executing AI Agent Tools Impersonated Trusted @openclaw/ Scope

helpnetsecurity.com · 2026-06-22 · Score: 21

64% of Analyzed iOS Apps Expose LLM API Credentials — 282 of 444 Apps Vulnerable, Only 28% Patched After 90-Day Disclosure

helpnetsecurity.com · 2026-06-22 · Score: 25

OpenAI Launches GPT-5.5-Cyber and Patch the Planet Initiative to Secure Open-Source Software With Trail of Bits and 30+ Projects

wired.com · 2026-06-22 · Score: 23

Squidbleed (CVE-2026-47729): Claude Mythos AI Finds 29-Year-Old Squid Proxy Memory Leak Exposing User HTTP Credentials

thehackernews.com · 2026-06-22 · Score: 22

Bloomberg Opinion: Japan Is Right to Fear AI 'Black Ships' — Country Absorbed 22% of All Global Cyberattacks in 2024, More Than Any Other Nation

bloomberg.com · 2026-06-21 · Score: 16

AryStinger Botnet Hijacks 4,000 D-Link Routers as Remotely Controlled Proxy Network for Malicious Traffic

bleepingcomputer.com · 2026-06-21 · Score: 17

New Prinz Eugen Ransomware Prioritizes Recent Files for Encryption, Uses Go and ChaCha20-Poly1305 — Standard Bank Among Five Known Victims

bleepingcomputer.com · 2026-06-20 · Score: 21

Gravity SMTP WordPress Plugin CVE-2026-4020 Exploited in 17 Million Attempts to Steal API Keys Across 100,000 Sites

thehackernews.com · 2026-06-20 · Score: 15

Microsoft Attributes Mastra AI Framework npm Supply Chain Attack to North Korean Sapphire Sleet Hackers

bleepingcomputer.com · 2026-06-20 · Score: 24

7,000 Langflow Servers Under Active Exploit — LangGraph SQL Injection and LangChain Path Traversal Expose Shared Attack Surface Across Three Major AI Agent Frameworks

venturebeat.com · 2026-06-19 · Score: 23

Shadow AI's Real Risk Is Access Control, Not Data Leakage: 65% of Enterprise AI Agent Credentials Are Dormant But Active

thehackernews.com · 2026-06-19 · Score: 15

Apple Patches High-Severity Beats Studio Buds Bluetooth Flaw That Let Nearby Attackers Eavesdrop via Microphone

thehackernews.com · 2026-06-19 · Score: 15

AutoJack Attack Lets One Malicious Webpage Hijack AutoGen Studio AI Agent for Host-Level Remote Code Execution

thehackernews.com · 2026-06-19 · Score: 23

Splunk Enterprise CVE-2026-20253 Exploited Within Eight Days of Disclosure — CISA Adds to KEV Catalog With Three-Day Federal Deadline

securityweek.com · 2026-06-19 · Score: 24

Gentlemen Ransomware Gang's Proprietary EDR-Killing Framework GentleKiller Targets 400+ Processes Across 48 Security Vendors, ESET Finds

bleepingcomputer.com · 2026-06-18 · Score: 18

Operation Endgame Disrupts SocGholish Botnet Linked to Evil Corp — 106 Servers Seized, 15,000 Sites Cleaned in International Law Enforcement Sweep

helpnetsecurity.com · 2026-06-18 · Score: 21

Cisco Patches Critical CVSS 9.1 RCE Flaw in Identity Services Engine — Root Escalation With Admin Credentials

securityweek.com · 2026-06-18 · Score: 18

FortiBleed Leak Exposes VPN Credentials for 73,932 Fortinet Firewalls Across 194 Countries

bleepingcomputer.com · 2026-06-18 · Score: 22

Dream Security Raises $260M at $3 Billion Valuation to Build Sovereign AI and National Cyber Defense for Governments

securityweek.com · 2026-06-18 · Score: 21

Microsoft Details Active Windows Clipboard-Hijacking Campaign Using USB LNK Worms and Bundled Portable Tor for Stealthy C2

thehackernews.com · 2026-06-18 · Score: 17

INC Ransomware-as-a-Service Claims 830-Plus Victims Since 2023, Rewrites Encryptors in Rust for Cross-Platform Evasion

thehackernews.com · 2026-06-18 · Score: 18

F5 Patches Two Critical NGINX Flaws (CVSS 9.2) Enabling Unauthenticated Remote Code Execution via HTTP/3 and HTTP/2

thehackernews.com · 2026-06-18 · Score: 23

DragonForce Deploys Backdoor.Turn via Microsoft Teams TURN Relay — First Documented Abuse of TURN Infrastructure for Malicious C2

thehackernews.com · 2026-06-18 · Score: 25

Accenture Acquires Dragos Majority Stake Plus runZero and NetRise for $4.18B to Build Industrial Cybersecurity Platform

securityweek · 2026-06-18 · Score: 25

Atlassian Publishes 100 Security Bulletins Addressing Critical CVEs in Axios, Apache Tomcat, and Netty Across All Data Center Products

securityweek.com · 2026-06-18 · Score: 16

Klue OAuth Breach Lets 'Icarus' Threat Actor Raid Customer Salesforce CRM Data at 1,000 Queries per 15 Minutes

bleepingcomputer.com · 2026-06-18 · Score: 23

NastyC2 npm Supply-Chain: Three Malicious Developer Packages Deliver Rust-Based Post-Exploitation Framework With 80+ Commands Comparable to Cobalt Strike

thehackernews.com · 2026-06-18 · Score: 22

NeuralTrust Closes $20M Seed — Europe's Largest-Ever Cybersecurity Seed Round — to Secure and Govern Enterprise AI Agents

tech.eu · 2026-06-17 · Score: 18

Tenet Security Emerges From Stealth With $6M Seed to Stop Rogue AI Agents Before They Execute

securityweek.com · 2026-06-17 · Score: 16

Crypto Clipper Campaign Weaponizes AI-Generated Narrators and Coordinated Fake Reviews to Build Legitimacy for Wallet-Stealing Bots

thehackernews.com · 2026-06-17 · Score: 15

Microsoft Confirms RoguePlanet Defender Zero-Day CVE-2026-50656 (CVSS 7.8): SYSTEM Shell on Fully Patched Windows, No Patch Available

thehackernews.com · 2026-06-17 · Score: 20

Magnitude Emerges From Stealth With $10M Seed Led by Ballistic Ventures to Apply Autonomous AI Agents to Third-Party Risk Management in AI-Heavy Supply Chains

securityweek.com · 2026-06-16 · Score: 16

CISA Adds LiteSpeed cPanel Plugin Privilege-Escalation Flaw CVE-2026-54420 to Known Exploited Vulnerabilities Catalog, 48-Hour Federal Patch Deadline Issued

thehackernews.com · 2026-06-16 · Score: 17

CISA Adds Maximum-Severity Joomla JCE Flaw (CVSS 10.0) to Known Exploited Vulnerabilities Catalog — Unauthenticated PHP Code Execution Active in the Wild

thehackernews.com · 2026-06-17 · Score: 26

ALERT Trump Signs Executive Order Promoting Advanced AI Innovation and Security

whitehouse.gov · 2026-06-02 · Score: 28

HN: 'Graphs That Explain the State of AI in 2026' — Data-Driven Benchmark and Attack-Trend Snapshot Draws High Engagement

news.ycombinator.com · 2026-05-09 · Score: 16

Newsletter Issues (30)

#2 Washington bloqueou um laboratório de IA. A China colocou 56 empresas na lista negra.

2026-06-22 · 1 mentions

#2 Washington bloqueó a un laboratorio de IA. China puso a 56 empresas en la lista negra.

2026-06-22 · 1 mentions

#508 The Cutting Edge, Across the Board

2026-06-28 · 1 mentions

#507 Anthropic Says Alibaba Stole 29 Million Conversations With Claude

2026-06-25 · 1 mentions

#506 Washington Blocked One AI Lab. China Blacklisted 56 Companies.

2026-06-22 · 2 mentions

AI Safety, Security & Ethics: train one trait, get alignment free

2026-06-21 · 1 mentions

AI Regulation: export-control law just became an AI kill switch

2026-06-21 · 3 mentions

#3 Votre IA peut désormais dépenser votre argent — Visa l'a branchée sur ChatGPT

2026-06-11 · 1 mentions

#504 America blocked its best AI. China just raised $7.4 billion.

2026-06-17 · 1 mentions

#497 AI's labor war just went global

2026-05-29 · 2 mentions

#496 Anthropic's Pentagon model is now everyone's model

2026-05-27 · 2 mentions

AI Regulation: Trump killed his own AI oversight order at the door

2026-05-26 · 2 mentions

AI Careers: Meta cuts 8,000, reshuffles 7,000 into AI

2026-05-26 · 1 mentions

AI Careers: 11,000 jobs cut in a day, one role is booming

2026-05-21 · 1 mentions

#493 Meta hired $145B in capex and fired 8,000 people

2026-05-19 · 3 mentions

AI safety: do-not-release model leaked, supply chain on fire

2026-04-25 · 1 mentions

#486 Apple is replacing Tim Cook because of AI

2026-04-22 · 3 mentions

AI Applications: The agent is not a product anymore

2026-04-18 · 1 mentions

AI Safety: Treasury called an emergency AI meeting

2026-04-18 · 2 mentions

Generative AI: Anthropic just retook the frontier, quietly

2026-04-18 · 1 mentions

#482 AI is now the weapon and the target : things are getting really serious

2026-04-10 · 7 mentions

#481 Musk wants Altman fired, Anthropic passes OpenAI, Meta goes closed

2026-04-09 · 3 mentions

#480 Monday Edition : npm compromised by North Korea, Iran targets AI data centers, and nobody wants OpenAI stock

2026-04-06 · 1 mentions

#478 The machines are hacking back — and so is everyone else

2026-04-03 · 7 mentions

#476 Weekly Intelligence Briefing: Tech, AI & Policy

2026-03-27 · 1 mentions

#430 Issue #430 : Here’s why Google pitched its $32B Wiz acquisition as ‘multicloud’

2025-03-20 · 2 mentions

#463 Issue #463: All about The

2026-02-02 · 2 mentions

#465 Issue #465: the DOOM edition : 5 ways AI could destroy everything

2026-02-12 · 1 mentions

#467 Issue #467: Anthropic has receipts. And nobody wants to pay for AI.

2026-02-26 · 1 mentions

#471 The AI civil war? Anthropic blasted and Open AI sees users flee

2026-03-11 · 1 mentions