2+ day, 1+ hour ago   (602+ words) Multiple espionage groups have been using a new exploit kit dubbed BlueMoon in seemingly opportunistic and rushed deployments, cybersecurity firm Proofpoint reports. The China-linked APT Violet Typhoon (also tracked as APT31, JungleBamboo, TA412, and Tide Castle) was the first to use it…...

2+ day, 16+ hour ago   (483+ words) Mandiant founder and cybersecurity veteran brings more than 30 years of public and private sector experience to Amazon’s board. Amazon has appointed cybersecurity veteran Kevin Mandia to its board of directors, strengthening the technology giant’s security expertise at the board level....

2+ day, 21+ hour ago   (678+ words) Both Anthropic and OpenAI have seen high-profile resignations in recent years that were tied to safety concerns. An Anthropic researcher said he is resigning from the company over concerns the artificial intelligence firm and its competitors are not acting responsibly…...

3+ day, 21+ hour ago   (1376+ words) Vinnie Liu was recruited by the NSA when he was just 17 years old. He is now the CEO of Bishop Fox. He says little about his work at the NSA, only that “My first year was on the red team,…...

2+ day, 23+ hour ago   (267+ words) September 10, 2026 at 1PM ET – Register to Attend AI is accelerating vulnerability discovery, putting more pressure on IT teams to close the gap between detection and remediation. But manual processes, disconnected tools, and inconsistent workflows continue to slow endpoint operations. Join SecurityWeek…...

3+ day, 25+ min ago   (460+ words) Tracked as CVE-2026-19490, the authentication bypass flaw has been exploited in the wild since at least September 3. The US Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday warned that threat actors have been exploiting a critical-severity NetScaler vulnerability in attacks....

3+ day, 57+ min ago   (816+ words) Anthropic is most concerned about Claude Mythos 5’s reckless behavior after recent incidents in which real systems were hacked. Anthropic disclosed a previously unreported incident involving unauthorized access to a real system, in a report that also revisits three cases…...

3+ day, 2+ hour ago   (578+ words) Cisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026. Cisco and the cybersecurity agency CISA on Wednesday flagged the exploitation of a Cisco Secure Firewall Management Center (FMC) vulnerability disclosed earlier this year. The security hole,…...

3+ day, 3+ hour ago   (397+ words) The exploit provides full System privileges on Windows machines running the September 2026 patches. The proof-of-concept (PoC) exploit code demonstrates an arbitrary file read with System privileges, according to Nightmare Eclipse, also known as Chaotic Eclipse, Infinite Nightmare, and MSNightmare. However,…...

3+ day, 6+ hour ago   (436+ words) Threat actors have been exploiting an unauthenticated remote code execution (RCE) vulnerability in Fortinet products to deploy a Node.js RAT, SOCRadar reports. Tracked as CVE-2025-25249 (CVSS score of 7.4) and described as a heap-based buffer overflow issue, the high-severity bug…...