CyberNews Google’s Threat Intelligence Group has been sounding the alarm about a growing trend in cybersecurity threats: the increasing use of artificial intelligence (AI) by both nation-state actors and financially motivated attackers to automate and scale their attacks. This development is giving lesser-resourced groups unprecedented capabilities, making it essential for enterprises to be aware of this … Read more
HelmGuard, a UK-based startup founded in 2024 by former Palantir executive John Daley and Jack Miller, has secured $7.3 million in seed funding to further develop its agentic governance, risk, and compliance (GRC) and security platform. The investment round was co-led by Infinity Ventures and Frontline, with additional support from FinTech Collective, Stage 2 Capital, … Read more
A New AI Attack Vector Threatens Enterprise Data Security, Highlighting Authorization Flaws in Modern AI Pipelines Security researchers have identified a sophisticated artificial intelligence (AI) attack flow that can bypass standard security controls and hijack an organization’s sensitive data. Dubbed “workflow identity hijacking” by Noma Labs, the attackers exploit an authorization design flaw in modern … Read more
US Government Accuses Chinese Firms of Illicitly Extracting Capabilities from Top US AI Models In a shocking revelation, the US government has accused several Chinese artificial intelligence (AI) firms of engaging in massive “distillation campaigns” to covertly extract billions of tokens from leading US AI models. The FBI, National Security Agency (NSA), and Cybersecurity and … Read more
A staggering 90% of vulnerabilities discovered by Anthropic’s Claude Mythos AI model have failed to reach the disclosure stage, and only a tiny fraction of those that did have been fixed. This alarming gap highlights a human bottleneck in validating new flaws and coordinating their remediation, rather than in discovering them. The analysis, conducted by … Read more
US Government Accuses Chinese AI Firms of Stealing Proprietary Capabilities from US Models The US government has accused several top Chinese artificial intelligence (AI) firms of engaging in massive campaigns to extract proprietary capabilities from leading US AI models. The firms, which include Alibaba, DeepSeek, and Moonshot AI, allegedly used a process called distillation to … Read more
Cybersecurity’s Unholy Trinity: Mythos Vulnerability Firehose Hits a Human Bottleneck A new analysis of public data from Anthropic’s Project Glasswing has revealed a disturbing trend in the world of vulnerability research. Despite generating an astonishing 26,153 potential security flaws using its Claude frontier model, only a tiny fraction – less than 10% – have made … Read more
Google has just patched a seventh Chrome zero-day bug this year, with another high-severity vulnerability being actively exploited by attackers. The latest bug, CVE-2026-87491, affects the V8 JavaScript and WebAssembly engine in Google’s Chrome browser, allowing remote attackers to execute arbitrary code inside the web browser’s sandbox via crafted HTML pages. The security update was … Read more
A new zero-day exploit has been released by an anonymous security researcher, Nightmare Eclipse, that can grant SYSTEM access on fully patched Windows systems. The exploit, called ShieldCrash, bypasses a previously patched flaw in Microsoft Defender known as ShieldBreak, which itself was a fix for another issue disclosed in June. The ShieldCrash proof-of-concept exploit works … Read more
A notorious cyberstalker has been sentenced to 15 years in prison for extorting women with AI-generated porn videos. James Strahler II, a 37-year-old Ohio man, used advanced artificial intelligence tools to create explicit content featuring his victims’ likenesses without their consent. He then shared these images and videos online, threatening to release them publicly if … Read more