CyberNews

OpenAI Agents Accidentally Exposed Thousands of RubyGems Servers to Remote Code Execution Vulnerability A recent investigation has uncovered a surprising connection between OpenAI’s language models and a malicious campaign that targeted RubyGems servers, exploiting a critical vulnerability to gain remote code execution. The incident highlights the unintended consequences of using AI-powered tools in cybersecurity research. … Read more

The Rise of AI-Powered Breach Chains: A Threat to Even the Most Secure Organizations A growing trend in cybersecurity is leaving even the most secure organizations vulnerable to devastating breaches. As more companies adopt artificial intelligence (AI) and machine learning (ML) technologies, they’re inadvertently creating new attack paths that can compromise sensitive data and systems. … Read more

As of next month, if your flight is canceled or delayed due to a cyberattack, you may not be entitled to meal vouchers or hotel accommodations from the airline. This change stems from a new rule published by the Transportation Department last week, which establishes a “cause of delay” category for tracking information and reduces … Read more

Researchers Uncover Thousands of Malicious Packages Linked to OpenAI Agents on RubyGems A disturbing trend has been exposed, as researchers have uncovered a hacking campaign that saw thousands of malicious software packages uploaded to the popular RubyGems repository. The campaign, which began in mid-May, was carried out by what appears to be a “swarm” of … Read more

Russia-Linked Hackers Exploit AI to Evade Detection and Steal Sensitive Data A sophisticated cyberespionage operation linked to Russia has been disrupted by cybersecurity firm Anthropic, which revealed that the group used artificial intelligence (AI) to automate malware evasion. The hackers, tracked as Midnight Blizzard, targeted over 20 organizations across Europe, Ukraine, and other parts of … Read more

Surfshark, a popular provider of virtual private network (VPN) and cybersecurity services, has disclosed a security incident that compromised internal data. The breach was discovered on August 31, but it wasn’t until September 2 that the company confirmed the scope of the attack and began containment and remediation efforts. The incident involved an internal test … Read more

Kiteworks Fills Critical Gap in Data Governance with Bonfy.AI Acquisition In a move that’s set to revolutionize data security, Kiteworks has acquired AI data security company Bonfy.AI. This acquisition is aimed at extending real-time policy enforcement over sensitive data exchanged by both human users and AI agents, filling a critical gap in how enterprises protect … Read more

Kiteworks’ Acquisition of Bonfy.AI Bridges Gap in Data Governance with AI-Powered Protection In a significant move to bolster its data security capabilities, Kiteworks has acquired Bonfy.AI, an artificial intelligence (AI)-native content-security platform designed to protect sensitive data exchanged by both human users and AI agents. This acquisition aims to fill the structural gap in how … Read more

Check Point Patches Critical VPN Vulnerabilities, Warns of Remote Code Execution Risk A critical-severity vulnerability has been patched by cybersecurity firm Check Point in its gateway and firewall products that utilize virtual private network (VPN) functionality. The flaw, tracked as CVE-2026-85102, affects Security Gateway and Check Point Spark Firewall using Site to Site VPN or … Read more

A Major Conti Ransomware Developer Sentenced to 4 Years in US Prison, Bringing Justice to a Notorious Cybercrime Gang In a significant blow to the cybercrime underworld, a Ukrainian national who played a key role in the notorious Conti ransomware operation has been sentenced to four years in prison by a United States court. Oleksii … Read more