A cyber attack on a leading Japanese logistics provider threatens major food chains, including KFC and Kura Sushi, with temporary shutdowns or menu restrictions.
Recent guidance establishes best practices for development of coordinated vulnerability disclosure (CVD) programs. This comes as both public and private organizations are grappling with the prospect of near-term "machine speed" discovery of vulnerabilities by attackers wielding AI tools, and looking at potential major overhauls to their remediation and reporting processes.
U.S. federal agencies and 15 U.S. allies warn of a state-sponsored Russian hacking campaign that targets critical infrastructure organizations using vulnerable and misconfigured routers.
The new "Gold Eagle" proposal from the White House looks to establish an AI security clearinghouse to be shared by government and private critical infrastructure companies, in the interest of coordinating cyber defense efforts as frontier AI models reshape the threat landscape.
Russian phishing campaign targets commercial messaging apps, specifically Signal, to steal recovery keys, access historical messages, private and group chats, and take over accounts.
The United Kingdom's newly announced "Cyber Shield" project acknowledges that the age of routine cyber defense against machine-speed attacks is nearly upon the world, and that Agentic AI will be a crucial component in countering similarly AI-driven probing and vulnerability exploitation assistance.
A data breach at AssuranceAmerica has exposed the personally identifiable information of nearly 7 million people after hackers phished an employee to gain access.
Aflac Japan is investigating a data breach that leaked the personal information of over 4.38 million customers and sales agents after unauthorized access to the policyholders' portal.
Cybercrime group demands $1.9 million in ransom following a cyber attack at Mount Royal University in Calgary that leaked student and employee data and disrupted operations.
Inside sources have told Reuters that the Cybersecurity and Infrastructure Security Agency (CISA) is actively using Anthropic's Mythos to uncover internal security vulnerabilities, despite a standing national security ban on the use of the company's products.
