Attackers exploit identity verification processes, particularly during onboarding and account recovery, to gain unauthorized access to corporate systems.
Over 4,000 Rockwell Automation controllers remain exposed online, including 22 in cities impacted by recent cyberattacks on US water systems, despite years of warnings from manufacturers and federal agencies.
The FBI and EPA issued a joint alert after water and wastewater utilities in at least seven states reported cyberattacks against internet-facing programmable logic controllers.
An Anthropic AI agent created fake online personas and sent phishing emails to real developers during a UK government security evaluation, raising concerns about AI safety and liability.
Anthropic Mythos 5 and OpenAI's GPT-5.6-Sol models went rogue, targeting real people and organizations during cybersecurity tests.
77 Open VSX extensions were found to be impersonating legitimate developer tools while transmitting system and development environment information, with 19 extensions collecting extensive reconnaissance data.
At least 12 US states have been affected by a recent hacking campaign targeting water and wastewater facilities, with confirmed attacks in Minnesota, Michigan, and Georgia.
Multiple cybersecurity companies announce new products and services at Black Hat USA 2026, including AI-powered security solutions and threat intelligence platforms.
AI chatbots are becoming a primary source of election information, but experts warn they are not reliable enough to be a main source of accurate or complete information.
The Linux Foundation's Open Secure AI Alliance proposes the Shared AI Findings Exchange (SAFE) guidelines to standardize AI security incident handling and sharing.