10 casos · pág. 1/1
Accenture, Dragos and the SANS Institute announced the Community Cyber Resilience Foundation, a roughly $10 million mix of funding and services to help under-resourced US water, wastewater, electric and natural gas utilities secure their operational technology (OT) environments. The first phase covers up to 500 utilities, which receive fr…
NIST, the NSA and CISA released a report, Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation, on handling AI agents that behave in unexpected or harmful ways. The report uses the term super intelligence (SI) instead of AI, in line with presidential executive order 14434. It sets out ten key pra…
Paradigm Healthcare Services, a San Francisco-based billing processor for Medi-Cal (California's Medicaid program) under a data use agreement with the California DHCS, told the US HHS that a breach affected more than 970,000 people. The company detected unauthorized access to its local network on October 13, 2025. It determined only on Au…
CyberSN's Cybersecurity Jobs Report, built on JobSpikr data, shows US cybersecurity job postings at a four-year low of 235,786 between January and September 2026. That is down 26.4% from 320,210 in the same period of 2025. Demand for AI Security Engineer roles grew 268.3% and Cyber Data Scientist roles grew 203.5%. Just under 15% of all p…
An unauthorized party used a compromised login credential to access a file transfer (SFTP) site belonging to Educational Testing Service (ETS) and copy files containing California public school student data, according to the California Department of Education (CDE). ETS supports the state's CAASPP and ELPAC assessment programs. Access occ…
Federal prosecutors say former OpenAI engineer Abdulrahman Alfozan, a 35-year-old Saudi national, was "mere days" from fleeing to Saudi Arabia before his arrest. A San Francisco federal judge (Alex Tse) denied his request for home confinement. Prosecutors allege he secretly installed an audio recording device in an executive conference ro…
MITRE released version 20 of its ATT&CK framework, expanding coverage of recent adversary tradecraft across the Enterprise, ICS and Mobile domains. Enterprise gains nine techniques and sub-techniques, including two prompt injection techniques (direct and indirect), abuse of an organization's own AI agents for data theft, poisoning of web …
Threat actors are abusing the open source AI platform Cairn, an agent-coordination engine usable as an autonomous penetration testing tool, to automate attacks on hundreds of websites worldwide. AI security firm Norforge found the activity after threat actors left their Cairn panels exposed, following a Gambit Security report on attackers…
Ahold Delhaize, the Dutch-Belgian grocery group, is restoring services disrupted by a cyberattack that began on October 12, when it took systems offline in response to a security issue. The outage hit online orders and deliveries for most of its brands across Europe and the United States, though all stores stayed open. The company has not…
Between April and July 2026, the threat actor UNC7017 tampered with the AOMEI Backupper update infrastructure several times to deliver the CrossRoad downloader and the ShinyRoad modular backdoor. Each tampering window lasted only five to ten minutes before reverting to authentic files. This made the campaign hard to detect and suggests it…
