Cyber Threats
PHP flaws draw millions of hacking attempts amid global push for fixes
Cloudflare reported millions of attempts to exploit the widely used web software, while researchers warned that compromised sites could also put visitors at risk.
US agencies urge fixes for programming language flaws putting millions of web systems at risk
The flaws in the widely used website software known as PHP could expose data and let hackers seize control.
US moves to staff leaders for industry-partnered offensive cyber program
The Trump administration is laying groundwork to enlist companies against foreign cybercriminals, but payment arrangements and protections for participating firms remain unresolved.
FBI disrupts North Korean ‘laptop farm’ used to infiltrate US companies
Agents seized nearly 190 laptops across Texas in a crackdown on fraudulent remote workers whose earnings help fund Pyongyang’s weapons programs.
Cybersecurity executive who helped hacking victims arrested on federal extortion charges
Ed Dubrovsky’s arrest may be linked to the FBI’s investigation into ShinyHunters. He has built a career advising organizations on cyberattacks and ransom demands.
FBI arrests another ShinyHunters suspect after massive breach of employee data
The arrest follows action against suspected members in Jordan and the Netherlands as the bureau investigates the theft of its sensitive personnel information.
FBI seizes websites supporting Chinese contractor’s hacking operations
U.S. agencies targeted tools used to find security weaknesses and break into networks, warning of threats to critical infrastructure.
Recent Taiwan simulation highlights US cyberdefense gaps against China, experts warn
Organizers of a cyber conflict exercise say Washington needs to prepare for attacks that both disrupt civilian services and pressure Taipei without triggering outright military conflict.
The monsters of Cybersecurity Awareness Month are getting stronger
Familiar threats like phishing and ransomware have not gone away, but NIST’s 2026 Cybersecurity Awareness Month activities are increasingly confronting newer risks involving AI agents, secure software development and digital identity.
Pentagon personnel breach — undetected for months — renews cyber standard scrutiny
Unauthorized users accessed sensitive records for roughly nine months before discovery, exposing another government personnel data fiasco as the FBI confronts its own breach incident.
AI firms should be held liable for their models’ actions, lawmakers say
Sens. Josh Hawley, R-Mo., and Chris Murphy, D-Conn., have introduced legislation that would hold AI agent operators and developers criminally and civilly liable for hacking incidents.
Cairncross acknowledges AI risks but warns tighter oversight could slow innovation
The national cyber director said developers are strengthening safeguards after a series of unauthorized AI intrusions, while defending the administration’s push for rapid deployment.
China-linked hackers posed as former US officials, Anthropic employee to target AI experts
Proofpoint identified phishing campaigns that borrowed prominent figures’ identities to approach U.S. policy researchers before attempting to steal access to their cloud accounts.
FBI warns ShinyHunters members to come forward after alleged leader’s arrest
“You know how to find us, and we know how to find you,” said Brett Leatherman, assistant director of the FBI’s Cyber Division. “I suggest you reach out first while the choice is still yours.”
ShinyHunters says it won’t publish FBI data
The group’s new statement — which called the incident a “marketing campaign" — follows reports that the stolen material includes medical records and details about employees working in sensitive intelligence roles.
Updated
OpenAI agents accessed Census, SEC data and tried to hack Education website
The disclosure follows warnings from former officials in August that government systems could face unintended intrusions by autonomous AI agents.
Former Army soldier sentenced to nearly 6 years for telecom hacking, extortion
Cameron Wagenius stole sensitive phone records while on active duty and sought to sell information to a foreign intelligence service, prosecutors said.
AI scanning tools found security gaps at rail operator and hospitals, Wiz says
Researchers discovered access to rail administration systems, a hospital alert channel and sensitive records in a new effort aimed at organizations with limited cyber resources.
Stolen FBI data reveals employees’ roles in intelligence and surveillance
Exposed analysts work on areas including China, Russia and electronic surveillance. ShinyHunters claimed responsibility for the breach this week. The FBI said it’s investigating.
Updated
ShinyHunters claims FBI data theft, demands bureau retract cyber warning
The hacking group says it obtained sensitive employee and applicant records. The full scope of the claimed breach remains unclear.
