If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a target, and it discovers, validates, and exploits attack paths autonomously, the way a real attacker would. That promise is worth taking seriously. It’s also worth pressure testing, and three questions do the heavy
What Is Agentic Pentesting? What It Proves, and Where It Stops. Read More »
SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances. […]
SonicWall warns of max severity SSRF flaw in SMA1000 gateways Read More »
Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create rogue admin accounts. […]
Ninja Forms plugin flaw exploited to hack WordPress sites Read More »
The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injected with malicious JavaScript to serve an information-stealing malware called LunexStealer (aka Psychedelic Stealer). The activity, which was observed by the agency in September 2026, has been attributed to a threat cluster dubbed UAC-0277. It did not
100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer Read More »
Anthropic on Tuesday said it’s expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking classifiers, as the company claimed its Project Glasswing initiative uncovered at least 129,000 verified software vulnerabilities between April and July 2026. The company said it also found an additional
Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws Read More »
Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identifiable data. […]
Advantest confirms personal information stolen in ransomware attack Read More »
A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, Apple Music, Amazon Music, and YouTube Music in a massive streaming royalty fraud scheme. […]
Musician sent to prison for $10 million streaming fraud using AI bots Read More »
Cybersecurity researchers have disclosed details of a “human-operated phishing platform” that impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus. The products, which claim to offer campaign optimization, spend audits, and business-account connections, are designed with one goal in
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes Read More »
On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32 zero-days. […]
Hackers exploit 32 zero-days on first day of Pwn2Own Ireland Read More »
Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimate processes to blend in and evade detection. Threat actors are known to name their malicious software after a legitimate operating system component or a process as a defense evasion measure. By borrowing
Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan Read More »