The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

October 10, 2026 at 04:30PM In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party produc…

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

October 10, 2026 at 02:48PM Anthropic on Friday said it's cutting off live internet access for all its internal evaluations f…

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

October 10, 2026 at 12:44AM Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has com…

FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack

October 9, 2026 at 11:15PM The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on…

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

October 9, 2026 at 01:41PM Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScal…

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions

October 9, 2026 at 12:09PM The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disr…

ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories

October 8, 2026 at 11:28PM The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for …

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

October 8, 2026 at 11:16AM The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tenso…

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

October 7, 2026 at 09:47PM SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remot…

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

October 7, 2026 at 01:37PM Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals …

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

October 6, 2026 at 11:54PM Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguisin…

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

October 6, 2026 at 12:26PM The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged r…