The Edge of the Cyber World See the latest
Palo Alto Networks’ threat intelligence team said the early waves of threats riding on agentic AI models have broken in the wild, and organizations are unprepared for what’s coming next. The post Unit 42 warns AI has shifted balance of power from defenders to attackers appeared first on CyberScoop.
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2023-49105 ownCloud Improper Authentication Vulnerability CVE-2026-53362 Linux Kernel Unspecified Vulnerability CVE-2026-66384 JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors…
Enterprises spun up more cloud storage, more SaaS apps, and more AI pipelines in the past two years than in the previous decade combined — and almost none of it got classified before it landed there. That’s the gap Data Security Posture Management (DSPM) tools are built to close, and by August 2026 the category…
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian Federal Police (AFP) said two unnamed suspects from Western Australia, aged 21 and 23, were…
OpenAI has published a 37-page technical report walking through how its own AI models, running as autonomous agents during an internal cybersecurity evaluation, broke containment and hacked into Hugging Face’s infrastructure along with four other publicly available services. The report, released as OpenAI’s fullest public account yet of the July 2026 incident, describes an attack…
Threat actors linked by Arctic Wolf to Dark Caracal with medium confidence deployed a previously undocumented Go-based malware framework, GoCaracal, during a June 2026 intrusion at an unnamed communications organization in Venezuela. GoCaracal provides operators with remote shell access and payload execution, while the extended profile adds browser data theft, keylogging, remote desktop control
A memecoin, a manifesto, and a week of daily leaks — but to researchers, it’s a familiar extortion playbook with an unusually large audience. The post The GTA VI leaks are breaking the internet. Security researchers have seen this before. appeared first on CyberScoop.
Agency red-teamers got initial access to both organizations they tested, but one quickly isolated and shut down the attempts from going further. The post Water sector passes, government sector fails attempts to spot and halt simulated CISA attack appeared first on CyberScoop.
Threat actors behind a notorious click-fraud botnet have set their sights on vehicle infotainment modules and are abusing legitimate functionality to spread infections.
A cyberattack that British officials privately link to Iran forced a small UK power generator offline for four days in July 2026, in what security researchers describe as the first confirmed case of an Iran-linked group successfully knocking a UK energy asset out of service. The incident, first reported by The Telegraph and the Financial…
