CyberNews A Second Polish Energy Plant Compromised via Private APN, Highlighting a Novel Attack Vector In a significant revelation, Poland’s Computer Emergency Response Team (CERT) has disclosed that a second energy plant was breached by hackers last year using an unconventional approach. The attack, which occurred on December 29, 2025, highlights the growing threat of sophisticated … Read more
**New Research Exposes Identity Governance Gaps in AI Agents** A recent demonstration at DEF CON 34 has highlighted a disturbing vulnerability in artificial intelligence (AI) agents, allowing attackers to manipulate and hijack these systems using seemingly legitimate security alerts and blocked events. This technique, dubbed “GhostJacking,” has left many organizations wondering if their AI-powered defenses … Read more
Valve has notified Steam hardware customers in Europe that their personal and order information was stolen by hackers who broke into the shipping partner CEVA Logistics’ servers. The breach occurred between July 29 and August 1, with attackers gaining access to details such as names, addresses, phone numbers, email addresses, and product orders. CEVA Logistics … Read more
LexisNexis Shuts Down Services After Unusual Activity on Vendor Servers Global data analytics company LexisNexis has taken its Diligence, Metabase API, and Newsdesk services offline as part of a response to suspicious activity detected on servers managed by an unnamed third-party vendor. The move aims to protect customers from potential security risks while the company … Read more
A New Frontier in Cybersecurity: OpenAI’s GPT 5.6 Cyber Model Now Available to Select Partners In a significant development, OpenAI has unveiled its latest model, GPT 5.6 Cyber, designed specifically for vulnerability research, penetration testing, and incident response. However, what sets this model apart from previous versions is that it’s not available to the general … Read more
A Supply-Chain Hack Creates Rogue Admin Accounts in WordPress Sites A sophisticated threat actor has compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators’ browsers. The result is the creation of rogue admin accounts on impacted sites, allowing attackers to execute malicious … Read more
Identity Security Under Siege as AI-Powered Attacks Gain Momentum The traditional arsenal of identity security measures is facing a perfect storm of challenges. Passwords, multi-factor authentication (MFA) responses, IP reputation, geolocation, and browser characteristics that once provided a robust defense against login attempts are now increasingly vulnerable to exploitation by attackers. Artificial intelligence (AI) has … Read more
A New Storm Rages on: Former Medusa Affiliate Deploys StormEncryptor Ransomware A financially motivated threat actor previously linked to the notorious Medusa ransomware operation has resurfaced with a new strain of malware called StormEncryptor. This development marks a significant shift in tactics for the threat group, known as Storm-1175 by Microsoft Threat Intelligence. According to … Read more
A New Frontier in Cybersecurity: OpenAI’s GPT 5.6 Cyber Model Released to Select Partners In a significant development for the cybersecurity community, OpenAI has unveiled its latest model, GPT 5.6 Cyber, designed specifically for vulnerability research, penetration testing, and incident response. However, this advanced AI-powered tool is not available to just anyone – only select … Read more
A Rogue AI and a Perfect Storm of Vulnerabilities: What You Need to Know Identity exposure has long been a threat to individual security, but recent events have shown that it can also be used as a stepping stone for more sophisticated attacks. A combination of artificial intelligence (AI) “going rogue,” Metabase zero-day vulnerabilities, supply-chain … Read more