Cybersecurity researchers have disclosed details of fraudulent activity targeting users across the Middle East and North Africa by employing various fraudulent Facebook accounts impersonating politicians, public figures, and trusted organizations. “These accounts promoted fake offers, including free mobile internet packages,

Learn MoreSniper Dz Scams Target MENA Users via Fake Facebook Offers and Browser Alerts

Palo Alto Networks has revealed that it has observed “active exploitation” of a recently disclosed PAN-OS vulnerability by an unknown threat actor to obtain unauthorized access to GlobalProtect portals. The vulnerability in question is CVE-2026-0257 (CVSS score: 7.8), an authentication

Learn MorePalo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw

Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operations and even remote code execution. The vulnerability, tracked as CVE-2026-20253, is rated 9.8 on the CVSS scoring

Learn MoreCritical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication

Anthropic said on Friday it will “abruptly disable” its most advanced artificial intelligence (AI) models, Claude Fable 5 and Mythos 5, for all users after the U.S. government ordered it to suspend access to the models for foreign nationals, whether

Learn MoreU.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals

Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a Rust binary built to harvest

Learn MoreOver 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit

Google on Friday said it’s pursuing legal action against a Chinese cybercrime network, accusing it of using its Gemini artificial intelligence (AI) agent to send phishing text messages targeting Americans. The network is said to be behind the development and

Learn MoreGoogle Sues Chinese Smishing Network Accused of Using Gemini AI in Phishing

Instead of hiding on the laptops and servers defenders watch most closely, a China-nexus group spent close to a decade hidden inside the Linux login system itself. Sygnia, which tracks the group as Velvet Ant, says it backdoored the PAM

Learn MoreChina-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade

Cybersecurity researchers have described what they say is a new class of attack that can trick artificial intelligence (AI) coding agents into running arbitrary code on developer machines. Called Agentjacking by Tenet Security, the attack can be triggered by means

Learn MoreAgentjacking Attack Tricks AI Coding Agents Into Running Malicious Code

For most of the past decade, managed detection and response was the answer to a real problem. Security teams couldn’t staff around the clock, couldn’t hire enough analysts, and needed someone else to handle the alert queue. MDR stepped in.

Learn MoreRethinking MDR as Attackers and Defenders Embrace AI

Cybersecurity researchers have disclosed details of three now-patched security flaws impacting LangGraph, including a critical vulnerability chain that could result in remote code execution. LangGraph is an open-source framework created by LangChain to build complex, stateful, and multi-agent artificial intelligence

Learn MoreLangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution