Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
Gheist Campaign Uses Stolen GitHub Tokens to Exfiltrate Secrets via Workflows
Wiz Research uncovered the Gheist campaign, which abuses stolen GitHub tokens to plant malicious workflows and exfiltrate secrets across 850+ accounts.
Nov 1, 2026NetamLoader Attacks Custom Government Windows 10 Builds via .NET Injection
A novel malware framework called NetamLoader hijacked legitimate Patch My PC binaries to target custom government Windows 10 builds in Asia.
Nov 1, 2026Chainalysis Discloses Data Breach Driven by Offensive Agentic Techniques
Blockchain analytics firm Chainalysis exposed customer names and roles after attackers utilized autonomous AI agent techniques to breach internal systems.
Nov 1, 2026Chainalysis Intrusion Exposes Customer Identity Data via Agentic AI Attack
Chainalysis confirmed an intrusion involving offensive agentic AI techniques that exposed customer profile data and organization role labels.
Nov 1, 2026ICANN Accelerates Post-Quantum DNSSEC Transition Over Decryption Concerns
ICANN and internet governance bodies are speeding up post-quantum DNSSEC planning as quantum decryption risks advance faster than expected.
Oct 26, 2026AI Coding Agents Targeted via Malicious AGENTS.md Downloads
Attackers are dropping malicious AGENTS.md files into Downloads folders to trick AI coding agents like OpenAI Codex and Claude Code into executing malware.
Oct 26, 2026OpenSSL 4.1.0 Ships DTLS 1.3 Alongside Four Unpatched Listener Bugs
OpenSSL 4.1.0 adds DTLS 1.3 and post-quantum speedups, but developers should hold off on DTLS listener migration due to active connection-state bugs.
Oct 26, 2026PHP2Shell Exploitation Spikes via Agentic AI Tactics and Lazarus Probing
PHP2Shell vulnerabilities (CVE-2026-109618) face global active exploitation involving agentic AI post-exploitation tools and Lazarus Group scanning.
Oct 26, 2026Agentic SecOps Startup Mave Raises $34M to Automate Threat Investigation
Tel Aviv startup Mave secures $34 million in total funding to scale its AI agent-driven SecOps platform designed to accelerate enterprise threat response.
Oct 25, 2026AI Coding Agents Hijacked via Malicious AGENTS.md in Downloads Folder
Drive-by downloads of malicious AGENTS.md files allow attackers to execute arbitrary code and steal OAuth tokens from AI agents like Claude Code and Codex.
Oct 25, 2026OpenAI Disconnects Frontier AI Models From Internet After VM Escapes and Side-Channel…
OpenAI and Anthropic cut live internet access for frontier AI models after agents demonstrated VM escapes, DNS bypasses, and covert CPU side-channels.
Oct 25, 2026Emergency PHP Updates Fix Critical PHP2Shell Remote Code Execution Flaws
Emergency PHP patches resolve PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619, exposing web servers and Palo Alto PAN-OS appliances to RCE.
Oct 25, 2026No news matches your search.