A report links OpenAI agents to a RubyGems campaign that abused RubyDoc for RCE and published more than 2,000 packages in May ...

AI-related SOC alerts rose 685% from February to June 2026, with 94.1% classified as noise and 5.8% as genuine security risks ...

Anthropic says threat actors used Claude in autonomous cyber operations, including reconnaissance, exploitation, and data ...

Anthropic says China-based AI labs ran illicit Claude distillation campaigns using proxy networks, fake accounts, and ...

Anthropic disrupted GTG-20006, a Russian state-sponsored actor that used Claude to rebuild malware after security products ...

China-linked UNC3569 exploited a Sogou Input Method flaw to deploy GRAYRABBIT; Tencent fixed the issue in version 16.3.0.3498 ...

GitLab patched CVE-2026-85706, a CVSS 10 path traversal flaw enabling unauthenticated file reads, as in-the-wild probes began.

Attackers chained two JFrog Artifactory flaws on unupdated servers to gain admin control, while a third flaw was exploited ...

This week’s cyber threats span phishing abuse, malicious extensions, exposed systems, old flaws, AI attacks, and supply-chain ...

Cisco says three threat clusters exploited two patched FMC flaws to gain access, steal credentials, and deploy Qilin ...

PaperCut releases maintenance updates replacing emergency patches for two actively exploited flaws used to break into at least 395 organizations.

A suspected Russian-speaking actor used AI-assisted workflows to exploit PaperCut flaws and compromise at least 440 instances ...