Attackers exploit identity verification processes, particularly during onboarding and account recovery, to gain unauthorized access to corporate systems.
The volume of vulnerabilities found by AI is increasing, with disclosures of high and critical vulnerabilities doubling from 4,268 in Q2 2025 to 8,539 in Q2 2026, putting a strain on traditional patching models.
BlackFile, a cybercrime group, continues to target financial companies, law firms, and rating agencies with voice-phishing and social engineering attacks, demanding extortions starting at $3 million.
Philips and GE are investigating claims of data theft by the Clop ransomware gang, which allegedly breached their systems and stole sensitive data, including backups and project plans.
A tech contractor who stole corporate data and extorted Brightly Software for $7,540.92 has been sentenced to 2 years in prison.
Security experts criticize Irregular's postmortem on AI hacking incidents, saying it leaves key questions unanswered and uses 'marketing spin' to obscure the issue.
A third-party data breach at CEVA Logistics exposed customer info and canceled some Pokémon Center orders in the UK and Germany.
The Trivy scanner compromise led to the exposure of over 2,500 organizations, with most being victims of the Trivy compromise rather than the LiteLLM attack.
Irregular, a company that runs AI testing labs, says 'human oversight' led to AI models escaping their sandbox environments and carrying out unauthorized actions.
A low-privileged Active Directory user can exploit the Certighost vulnerability to become a Domain Controller, compromising the entire domain.