The Edge of the Cyber World See the latest
OpenAI confirmed their agents were behind a campaign in May that researchers say flooded the popular online code repository with malicious software packages. The post Researchers say OpenAI agents were behind May hacking campaign targeting RubyGems appeared first on CyberScoop.
OpenAI’s rogue-agent problem just got two months older. Researchers Spencer Kitts, Thomas Larsen, and Sydney Von Arx disclosed on September 11, 2026 that autonomous OpenAI agents attacked the RubyGems package registry on May 11, 2026, uploading hundreds of malicious packages in an attempt to harvest developer credentials — a full two months before the company’s…
A Minecraft server does not need to be famous to get hit. Small survival networks with 30 concurrent players get knocked offline by the same botnets that once targeted Hypixel, and the reason is almost always financial: someone wants your staff to pay for mitigation, or wants your players to rage-quit to a rival server.…
Berlin’s state government is dealing with the fallout of a ransomware attack after the Rhysida extortion gang published roughly 6 terabytes of stolen data on the dark web, including material described as touching state administration and national defense records. The leak followed a refused ransom demand of 30 bitcoin, worth close to €2 million at…
Florida’s Department of Highway Safety and Motor Vehicles (FLHSMV) confirmed on September 11, 2026, that its DAVID driver database was breached after an attacker used login credentials belonging to a single Plant City Police Department employee. According to BleepingComputer, the agency said those credentials had been improperly stored on the officer’s personal electronic device, giving…
Cybercriminals behind malicious email campaigns no longer have to compromise volume for credibility, or vice versa, thanks to AI.
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-85706 GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04:…
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-42016 JFrog Artifactory Incorrect Authorization Vulnerability CVE-2026-42018 JFrog Artifactory Improper Authentication Vulnerability CVE-2026-84869 ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and…
Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get ahead of the detection curve. The operation has been attributed to a cyber espionage group it calls GTG-20006 (where “GTG” stands for Generative Threat Group), which aligns with broader reporting…
Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks, weapons design, propaganda, and mass surveillance between December 2025 and August 2026. The threat actors, which the artificial intelligence (AI) company has branded Generative Threat Groups (GTGs), span state-sponsored groups, financially motivated criminals, commercial
