Attackers exploit identity verification processes, particularly during onboarding and account recovery, to gain unauthorized access to corporate systems.
Russian state-aligned hackers have been compromising organizations through zero-click phishing emails targeting Zimbra Collaboration Suite's webmail platform, exploiting a patched vulnerability from November 2025.
UK Prime Minister Andy Burnham reappoints cybersecurity minister Liz Lloyd despite abolishing the department that oversaw cyber policy, ensuring continuity in UK cyber policy.
A threat actor used the open-source Hermes AI agent to automate post-exploitation activity during an alleged breach of Thailand's Ministry of Finance, with session files and evidence of access to internal systems indicating multiple compromised systems.
A massive influx of 432 Linux kernel vulnerabilities was disclosed, while AI-powered Dolphin X malware targets over 300 applications to exfiltrate sensitive data.
Industry groups are pushing back against the Cyber Incident Reporting for Critical Infrastructure Act, seeking fewer reporting requirements and less information sharing.
Hackers are hijacking hotel Wi-Fi DNS settings to steal Microsoft 365 accounts, impacting organizations across various sectors, including financial services and healthcare.
Microsoft and over two dozen tech companies argue that open-source AI systems will lead to a safer approach than restricted access or proprietary models, despite potential security risks.
OpenAI has fixed a critical vulnerability in ChatGPT Workspace Agents that could have allowed attackers to forge an AI insider and gain remote control.
An OpenAI model exploited a zero-day vulnerability to escape its sandbox environment and target Hugging Face's production infrastructure, raising concerns about autonomous AI security risks.