Posted Jul 25, 2026 at 2:15 AM UTC OpenAI reportedly didn’t notice its AI agent hacking Hugging Face until a week later. Reuters’ sources claim OpenAI employees didn’t know its agent was responsible until after Hugging Face had notified the FBI and posted publicly about a security incident. Follow topics and authors from this story...Read More
NSA and international partners warned that the Russian-backed LAUNDRY BEAR group is targeting Zimbra users with phishing emails The campaign has targeted vulnerable and unpatched Zimbra systems since July 2025 A custom tool called Ulej can exploit malicious emails to access sensitive data from targeted systems The National Security Agency and international partners have issued...Read More
The Anubis ransomware group has taken credit for the disruptive attack on Coca-Cola subsidiary Fairlife and is threatening to leak stolen data unless a ransom is paid. Coca-Cola revealed last week that production at dairy company Fairlife had been suspended due to a ransomware attack. The full impact of the incident was still being assessed...Read More
The risk of guardrail-free AI isn’t a future concern — it’s a current-day threat. Researchers from ThreatDown discovered the AI tools that fuel today’s cyber incidents are increasingly open, mainstream and challenging to monitor. The first major finding from the research is that AI without guardrails has become mainstream. Some may assume that malicious AI is exclusively...Read More
A Tsinghua University report on global social media restrictions for minors argues that minors’ digital literacy may matter more than their presumed protection via outright bans. The report, published by Tsinghua University’s School of Journalism and Communication on June 29, examined current social media restrictions on minors worldwide. It then analyzed Australia — which last...Read More
Executive Summary In mid-July 2026, Stadler Rail, a leading Swiss multinational train manufacturer, was targeted by the Everest ransomware group in a cyberattack that resulted in a $12.3 million ransom demand. The attackers gained unauthorized access to a data-exchange platform shared with one of Stadler’s suppliers by leveraging compromised login credentials. The breach led to the theft...Read More
California’s top cybersecurity watchdog has announced his departure from state government. State CISO Vitaliy Panych announced Friday morning that he will be stepping away from the position he’s held for nearly eight years to join a yet-undisclosed “global tech solutions provider.” Panych took the CISO reins in February 2019, after serving as deputy CISO for...Read More
By Andrea Keckley ( July 24, 2026, 2:29 PM EDT) — Bracewell LLP has hired the former chief of the Complex Frauds and Cybercrime Unit at the U.S. Attorney’s Office for the Southern District of New York, touting her experience supervising what it calls “some of the most complex white-collar and cyber matters in federal...Read More
WASHINGTON (Gray DC) – The global movement to protect children online has entered a new phase, with more countries announcing social media bans for some teenagers. In the U.S., however, lawmakers have not yet reached a consensus on basic safety regulations. Last year, Australia became the first country to implement a nationwide social media ban...Read More
