Cyber Security News

Alice, the AI trust, safety, and security company formerly known as ActiveFence, has closed a $140 million funding round led by Apax Digital Funds, with new backing from SentinelOne, Samsung Electronics, Maj Invest, MoreTech, and Phoenix Insurance, alongside existing investors Resolute Ventures, Grove Ventures, CRV, Highland Europe, Vintage Investment Partners, Norwest, NFX, and Claltech. The […]

The post AI Security Startup Alice Raises $140 Million as Enterprise AI Threats Surge appeared first on Cyber Security News.

SynkLoader is using Microsoft Teams conversations to turn routine IT support requests into a route for malware delivery. The campaign relies on impersonation rather than a software flaw, placing the decision to install a supposed fix directly in front of an employee. Attackers contact targets through Teams messages and voice phishing, also called vishing, while […]

The post SynkLoader Mimic as IT Support Personnel Attacking Users Via Microsoft Teams appeared first on Cyber Security News.

ToxNetV2 is a Linux botnet that shows how artificial intelligence can move closer to real attack operations. Instead of using a model only to write text, the malware feeds system and botnet data into an AI service, then turns selected replies into proposed commands. That design gives operators a faster way to judge what to […]

The post ToxNetV2 Linux Botnet Uses NVIDIA AI to Generate Shell and Remote SSH Attack Actions appeared first on Cyber Security News.

WhatsApp has confirmed that more than 1 billion people now use passkeys to log into the messaging app, marking one of the largest passwordless authentication rollouts in consumer tech history. Alongside this milestone, Meta’s flagship messaging platform is rolling out a major upgrade to two-step verification, replacing the long-standing six-digit PIN with a full alphanumeric […]

The post WhatsApp Passkeys Reach 1 Billion Users as Two-Step Verification Gets Stronger Passwords appeared first on Cyber Security News.

ASOS US Sales LLC reported unauthorized access to customer accounts using credentials obtained from outside the company, detected on July 28 and confirmed the next day. In a breach notification dated August 21, 2026, ASOS said it identified unusual activity involving customer accounts and launched an investigation immediately. The retailer determined that an unauthorized third […]

The post ASOS Warns Customer Accounts Were Accessed Using Compromised Login Credentials appeared first on Cyber Security News.

A near-autonomous cyberattack using open-source AI agent frameworks compromised government systems in Asia, cracked 85 employee accounts, and stole more than 2,500 personnel records, according to research from Dream. The campaign demonstrates how coordinated AI agents can now execute large parts of an intrusion operation at machine speed. Dream researchers uncovered a 160 MB archive […]

The post Eight AI Agents Breach Government Systems, Crack 85 Accounts and Steal 2,500+ Records appeared first on Cyber Security News.

A new web-based scam is using fake Microsoft-branded security scans to frighten people into removing the antivirus software protecting their computers. The pages claim to inspect a device, report serious security failures, and insist that third-party antivirus products are no longer supported by Windows. The message is false, but it is designed to feel urgent […]

The post Fake Microsoft Security Scan Tells You to Remove Antivirus—Then Scammers Ask for Remote Access appeared first on Cyber Security News.

AliExpress’s homepage quietly builds hidden WebAudio processing graphs in the browser, a technique that appears to power an aggressive device-fingerprinting system while producing an unexpected real-world side effect: interfering with Bluetooth multipoint audio switching on connected headphones. Security researcher Laserphile, using multipoint Bluetooth headphones that stay simultaneously paired to a PC and a phone, noticed […]

The post AliExpress Uses WebAudio API and Zero-Gain Audio Graphs for Silent Device Fingerprinting appeared first on Cyber Security News.

A critical authentication flaw in Tata Nexarc, a B2B procurement platform for small and medium businesses in India, allowed attackers to take over accounts by knowing only a registered mobile number. The platform reportedly exposed the one-time password used for login within a decryptable API response, removing the need to intercept SMS messages, phish users, […]

The post Tata’s B2B Platform Flaw Enables Account Takeover Just by Knowing Victim’s Phone Number appeared first on Cyber Security News.

A cyberattack attributed to hackers linked to Iran forced a British power plant offline for four consecutive days last month, marking what officials describe as the first successful attack of its kind against UK energy infrastructure. The incident, first reported by The Telegraph, has raised fresh alarm over the vulnerability of critical infrastructure amid heightened […]

The post Iran-Linked Hackers Force UK Power Plant Offline in Unprecedented Four-Day Cyberattack appeared first on Cyber Security News.

This week’s bulletin captures a cybersecurity landscape increasingly shaped by artificial intelligence, both as a weapon and a shield. A ransomware affiliate weaponized Claude Code to autonomously steal LDAP credentials, backdoor VPNs, and exfiltrate SQL databases, while a separate criminal AI service called MessiahGPT surfaced on BreachForums offering uncensored malware generation to low-skill attackers. On […]

The post Weekly Cyber Security Newsletter Bulletin – Entra ID RCE, Claude Code Ransomware, T-Mobile Cable, Azure Credential Theft +20 Stories appeared first on Cyber Security News.

Microsoft has built a dedicated Windows 11 app that exists to put Bing in front of users who already chose another search engine. The utility, Microsoft Recommended Search Settings, arrives as a standalone 22.2 MB installer named MicrosoftSettings.exe. It is hosted on Microsoft’s official download servers rather than Windows Update or the Microsoft Store, and […]

The post Microsoft Windows 11 App Pushes Bing as Default Search in Chrome, Firefox and Brave appeared first on Cyber Security News.

Cisco Meraki scores highest in our 2026 evaluation of automatic Wi-Fi security solutions, combining cloud-managed simplicity with strong policy enforcement, while HPE Aruba leads on enterprise-grade wireless security depth, and Juniper Mist wins on AI-driven operations. Wi-Fi security solutions protect wireless networks through encryption (WPA3), authentication (802.1X), rogue access point detection, and client isolation, and […]

The post Top 10 Best Wireless / Wi-Fi Security Solutions in 2026 appeared first on Cyber Security News.

Wayne Anderson, Managing Director, Cybersecurity and Digital Innovation, BDO USA. First and foremost, the technical “walls” were reduced during the testing experience. One of the questions that many organizations have asked is, “Why wasn’t this run in an AI testing location?” The actual answer to that is, surprisingly, it was!  In fact, this specific AI testing […]

The post What specifically allowed the agent to reach a real company’s systems during testing?  appeared first on Cyber Security News.

The latest wp2shell vulnerability was one of the biggest WordPress security events in history. The critical vulnerability chain combined two flaws that allowed unauthenticated attackers to exploit vulnerable sites and ultimately execute malicious code remotely, potentially taking control of them. In the first week after the disclosure, more than 45 million exploit attempts from nearly 150,000 unique […]

The post What 45 Million wp2shell Exploit Attempts Reveal About the New Vulnerability Response Window appeared first on Cyber Security News.

A newly disclosed attack can turn a routine “summarize this page” request in xAI’s Grok web chat into a silent theft of the user’s name, coarse location, subscription tier, and the prompt history of the active conversation. Adversa AI said in a report shared with Cyber Security News (CSN) that the method, named Cryptographic Context […]

The post Grok Zero-Click Attack Steals Chat Data Using Encrypted Prompt Injection appeared first on Cyber Security News.

Anthropic has expanded access to its frontier AI cyber-defense capabilities by making Claude Mythos 5 available in Claude Security, enabling enterprise customers to scan codebases for vulnerabilities and receive AI-generated remediation guidance. The move is designed to give defenders stronger vulnerability discovery and patching support while keeping direct access to the model constrained by purpose-built […]

The post Claude Mythos 5 Now Available in Claude Security for Vulnerability Scanning appeared first on Cyber Security News.

Microsoft has started expanding primary mailbox storage for Microsoft 365 Business Basic, Business Standard, and Business Premium users. Eligible users can now receive up to 100 GB of Exchange Online mailbox capacity, doubling the previous 50 GB entitlement. The change is part of Microsoft’s 2026 packaging updates, which began rolling out in June and are […]

The post Microsoft Expands Mailbox Storage From 50 GB to 100 GB for Users appeared first on Cyber Security News.

Scammers are using WhatsApp groups to turn ordinary investors into an unwitting buying force. The operation does not need a hacked trading account or a stolen card. Instead, it persuades people to place real trades through legitimate brokerages, then leaves them carrying the losses when the price collapses. The campaigns pair short-lived deepfake advertisements with […]

The post Scammers Use WhatsApp Groups to Coordinate Millions in Victim Trades and Pump Real Stocks appeared first on Cyber Security News.

A Chinese-speaking cybercrime group is using AI-assisted tools to turn vulnerable web servers into entry points. It shows how familiar flaws become more dangerous when attackers automate the work around them. The group, tracked as UAT-10147, targeted internet-facing Windows and Linux systems in government, education, media, technology, and gaming. Victims were identified across several countries, […]

The post Chinese Hackers Use AI Agents to Exploit Web Servers and Automate Attacks appeared first on Cyber Security News.