News & Map
3,914 items on Cyberstrategy — showing 2481–2520 · 3,101 without coordinates · Across the network · RSS
How AI hacked the Australian government and almost got away with it | About That
OpenAI says one of its models, while in testing, went rogue and hacked an official Australian government website in a se...
Australia · Sep 30, 2026 · WedgetailOpenAI reveals ‘novel’ encryption bypass used in distillation attack
The company said individuals associated with Chinese company MoonshotAI were behind parts of the attack, but did not off...
United States · Sep 30, 2026 · WedgetailMalicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure
In yet another ClickFix-style campaign, threat actors abuse legitimate domains from OpenAI and Google to fool unsuspecti...
United States · Sep 30, 2026 · WedgetailRussian state hackers use new RedFlick technique to push malware
The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed "RedFlick" to deploy its s...
Russia · Sep 30, 2026 · WedgetailDIVD says Zammad zero-days enabled AI-driven network breach
The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a...
Netherlands · Sep 30, 2026 · WedgetailHow the Intelligence Community Can Shape AI Trust With New Terminology
The Intelligence Community (IC) has an opportunity now to influence how we talk about, and thus how we approach, AI use ...
No location · Sep 30, 2026 · WedgetailAs AI Reshapes the SOC Career Ladder, Satisfaction Rises for 91%, but Entry Gets Harder for Nearly Half
New Swimlane research underscores a paradox: While AI detection and response is essential to giving defenders an edge, o...
No location · Sep 30, 2026 · WedgetailOver 543,000 valid credentials exposed in public GitHub repositories
More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform's secu...
No location · Sep 30, 2026 · WedgetailAttackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and a...
No location · Sep 30, 2026 · WedgetailAttackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks
Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RM...
No location · Sep 30, 2026 · WedgetailThe Coupang Breach and the Danger of Punishing the Headline Number
The headline number from the Coupang data breach — more than 33 million user accounts — sounds like a major incident tha...
No location · Sep 30, 2026 · WedgetailCISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik ...
No location · Sep 30, 2026 · WedgetailCisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to mana...
No location · Sep 30, 2026 · WedgetailRussia's Star Blizzard Ditches ClickFix to Widen Phishing Net
The APT actor is using a new tactic, dubbed "RedFlick," against Ukrainian-linked targets such as NGOs, think tanks, and ...
Russia · Sep 30, 2026 · WedgetailAttackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures
Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting v...
No location · Sep 30, 2026 · WedgetailCisco warns of new SD-WAN zero-day exploited in attacks
Cisco released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as CVE-2026-76504...
No location · Sep 30, 2026 · WedgetailVulnerability Discovery and Exploitation Trends in the AI Era
Written by: Robin Grunewald, Supriya Mazumdar, Kelli Vanderlee Introduction Google Threat Intelligence Group (GTIG) exam...
No location · Sep 30, 2026 · WedgetailAI-Found Vulnerabilities More Likely to Enable RCE, Google Says
AI-discovered vulnerabilities are more likely to enable RCE, as disclosures and exploitation rise
No location · Sep 30, 2026 · WedgetailUnauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
Microsoft Threat Intelligence examines CVE-2026-73570 exploitation in Zimbra, including observed attack paths, detection...
No location · Sep 30, 2026 · WedgetailUnauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
Microsoft Threat Intelligence examines CVE-2026-73570 exploitation in Zimbra, including observed attack paths, detection...
No location · Sep 30, 2026 · WedgetailMI5 China alert will send chill through UK’s cash-strapped universities
Institutions have for years turned to China for funding opportunities but national security concerns are mountingMI5 iss...
United Kingdom · Sep 30, 2026 · WedgetailMI5 warns UK universities over ‘theft of tech secrets by Chinese front company’
Security service says academics should stop working with and taking grants from firm backed by Chinese intelligenceMI5 C...
No location · Sep 30, 2026 · WedgetailAI Boosts SOC Analyst Capacity but Limits Skill Development
Swimlane finds that AI is reducing repetitive work for SOC teams but some feel their careers may suffer
No location · Sep 30, 2026 · WedgetailKnow Your Enemy: Browser-Based Attack Techniques in 2026
Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too...
No location · Sep 30, 2026 · WedgetailAttackers Combine ChatGPT Feature Abuse With ClickFix to Deliver Trojan Malware
Cybersecurity researchers at Huntress identify campaign to deliver potent trojan which targets users searching for ChatG...
No location · Sep 30, 2026 · WedgetailAI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub
AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub...
No location · Sep 30, 2026 · WedgetailI Want Better Reporting on AI Genie Behavior
AI systems are regularly completing tasks in ways that their prompters don’t want or intend. Some of them are disturbing...
No location · Sep 30, 2026 · WedgetailUS-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access
ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions co...
No location · Sep 30, 2026 · WedgetailChina-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
Cisco Talos uncovered a cluster of activity we track as UAT-11587 targeting government and policy organizations across A...
No location · Sep 30, 2026 · WedgetailWaterISAC reckons with range of threats after summer of cyberattacks
Internet-exposed tech, PLCs, outside integrators and inside protections are all factors the water sector’s information s...
No location · Sep 30, 2026 · WedgetailApple Patches CoreGraphics Zero Day Exploited in Attacks
Apple has patched CVE-2026-86950, a zero-day bug in the iOS CoreGraphics engine
No location · Sep 30, 2026 · WedgetailAttackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler ...
No location · Sep 30, 2026 · WedgetailOpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted
A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL s...
No location · Sep 30, 2026 · WedgetailThis month in security with Tony Anscombe – September 2026 edition
Autonomous AI agents go on a hacking spree, and Microsoft ships what used to be a year's worth of security patches in on...
No location · Sep 30, 2026 · WedgetailSouth Africa Seeks Help After Cyberattack Targets Air Traffic Control
As aviation infrastructure suffers more cyberattacks, air traffic systems are the latest target, with a ransomware toolk...
South Africa · Sep 30, 2026 · WedgetailCitrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution
Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetSca...
No location · Sep 30, 2026 · WedgetailTesting Europe's Resolve: The Growing Threat Against European Energy
As the Hormuz crisis strains supplies, Russia is likely to test Europe's resolve this winter, with cyberattacks on energ...
Europe · Sep 29, 2026 · WedgetailSoap Box: HD Moore talks OT security, frontier fearmongering and more
In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with industry legend HD Moore about ...
No location · Sep 29, 2026 · WedgetailPhishing Abuses RMM Tools for Persistent Access
Microsoft observed phishing campaigns that abused MSP360 RMM to deploy ScreenConnect, creating redundant remote-access c...
No location · Sep 29, 2026 · WedgetailPhishing Abuses RMM Tools for Persistent Access
Microsoft observed phishing campaigns that abused MSP360 RMM to deploy ScreenConnect, creating redundant remote-access c...
No location · Sep 29, 2026 · Wedgetail3,101 of 3,914 items have no coordinates and so are listed but not mapped.