TrendAI analyzes three cyber campaigns involving autonomous and AI-assisted attacks, including CyberStrikeAI activity ...

Hackers exploited Cisco SD-WAN zero-day CVE-2026-20127 to deploy KeyDrift malware, steal encryption keys, and gain admin ...

Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create rogue ...

Financial News] Indications have emerged that real cyberattacks took place after a serious security vulnerability in PHP, a ...

Eclypsium found 16 advisories tied to CISA KEV flaws from Sept. 18 to Oct. 14, led by Ivanti, NetScaler and PHP2Shell.

Israel-based cybersecurity firm Dream Research said an attack exploiting a PHP vulnerability dubbed "PHP2Shell" seized top ...

Trend Micro disclosed three attacks on Japan-linked targets where AI handled parts of the intrusion, with one campaign delegating the full attack chain to 44 automated agents.

Silent Lynx, a Kazakhstan-linked hacking group tracked as UAT-6275 and TAG-193, exploited CVE-2025-8088, a WinRAR path-traversal flaw, to plant persistent backdoors in nine CIS governments -- seven ...

A Chinese-speaking hacker used AI agents to break into more than 100 company websites while spending an estimated $5,000 on AI tokens, according to a Reuters investigation in October.

The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X . ShinyHunters is the extortion group that said in September it had ...

A single hacker, working with off-the-shelf AI agents and roughly $5,000 in token spending, broke into websites belonging to ...

Ivanti VPN zero-days let attackers gain root access, steal credentials, evade detection, and prepare for wider network compromise.