A hacker claims to have stolen the information of 2 million Origin Energy customers and is threatening to leak it. 

The post Data Breach Confirmed After Australian Energy Giant Origin Is Hacked appeared first on SecurityWeek.

AgentForger allows an attacker to create, insert and remotely control an invisible autonomous AI agent inside a victim organization.

The post OpenAI Fixes ChatGPT Agent Flaw That Could Let Attackers Forge an AI Insider appeared first on SecurityWeek.

SentinelOne’s new benchmark, built on the Fast16 case, shows which AI models can sustain a malware investigation and which cannot.

The post Nuclear-Sabotage Malware Benchmark Trips Up Most Frontier AI Models appeared first on SecurityWeek.

The vulnerability tracked as CVE-2026-16232 has been exploited against customers with certain configurations.

The post New Check Point Zero-Day Vulnerability Exploited in the Wild appeared first on SecurityWeek.

An updated advisory from federal agencies provides information on the techniques used to hack programmable logic controllers.

The post US Warns of Iranian Hackers Targeting Siemens, Schneider, and Rockwell ICS Devices appeared first on SecurityWeek.

Many of the vulnerabilities fixed with the July 2026 Critical Patch Update were likely discovered by AI.

The post Oracle Patches Over 1,400 Vulnerabilities With Quarterly Security Updates appeared first on SecurityWeek.

OpenAI says its AI models went rogue, as CISOS call the incident a watershed moment, warning that autonomous AI threat models have officially crossed into production reality.

The post OpenAI Says Its AI Models Broke Loose and Hacked Hugging Face  appeared first on SecurityWeek.

The open-weight Antares models are designed to pinpoint known vulnerabilities in codebases faster and at a fraction of the cost of larger AI models.

The post Cisco Launches Low-Cost AI Models for Source Code Security appeared first on SecurityWeek.

Hackers exfiltrated personal, financial, and health information from the company’s Oracle EBS instance in August 2025.

The post Estée Lauder Discloses Impact From Oracle EBS Zero-Day Hack appeared first on SecurityWeek.

The ServiceNow AI platform vulnerability tracked as CVE-2026-6875 can be exploited for remote code execution.

The post Exploitation of ServiceNow Vulnerability Seen Days After Disclosure appeared first on SecurityWeek.

The zero-days CVE-2026-15409 and CVE-2026-15410 were exploited by a threat actor tracked by Volexity as UTA0533.

The post SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch appeared first on SecurityWeek.

Longtime cybersecurity executive Richard Bird built the resource for security experts, journalists, policymakers, and everyday citizens.

The post New Index Tracks Material Breaches — And Refuses to Add Up the Losses appeared first on SecurityWeek.

Hackers stole names, addresses, Social Security numbers, credit/debit card numbers, and other information from a third-party management platform.

The post Ernst & Young Data Breach Affects Personal, Financial Information appeared first on SecurityWeek.

Exploitation of the new WordPress vulnerabilities tracked as CVE-2026-60137 and CVE-2026-63030 started soon after disclosure.

The post WP2Shell WordPress Vulnerabilities Exploited in the Wild appeared first on SecurityWeek.

Industry professionals broadly agree that the suspension pauses third-party CMMC audits but not the underlying legal obligation to protect CUI.

The post Industry Reactions to Pentagon Suspending CMMC Phase 2: Feedback Friday appeared first on SecurityWeek.

The critical-severity security defect allows remote, authenticated attackers to execute arbitrary code on the server.

The post Fresh SharePoint Vulnerability Exploited Soon After Disclosure appeared first on SecurityWeek.

The company has yet to determine the full scope, nature, and impact of the incident.

The post Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack appeared first on SecurityWeek.

AI infrastructure introduces new security risks that traditional data center designs were never built to handle.

The post AI Data Centers Are Being Built Faster Than They Can Be Secured appeared first on SecurityWeek.

The cybersecurity companies patched critical and high-severity vulnerabilities in some of their products.

The post Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities appeared first on SecurityWeek.

An attacker can create a malicious repository containing a git.exe in the project root, and Cursor executes it automatically.

The post Unpatched Cursor Vulnerability Exposes Users to Code Execution appeared first on SecurityWeek.