Microsoft’s Windows Paint vulnerability, CVE-2026-83844, could allow an unauthenticated attacker to execute code over a network without user interaction. The flaw carries a CVSS score of 8.1, placing it in the High severity category rather than Critical. However, confusion over the corrected Paint version has complicated patch checks for Windows administrators. The vulnerability stems from […]
Agentic pen-testing tool employed in multiple espionage campaigns around the globe
A China-nexus threat actor used an AI-based tool called Artex to run a sophisticated espionage campaign against multiple targets around the globe, according to a report released Thursday by CrowdStrike. The threat actor, tracked as Vapor Panda, targeted more than 200 organizations in a total of 14 countries, in a campaign that began Oct. 17. […]
Hackers target refrigerators in Ireland and European countries in new wave of cyber attacks
Cyber hackers have targeted fridges and freezers in supermarkets in several European countries including Ireland – causing temperatures to increase and food to spoil. Ireland‘s third-largest supermarket chain, SuperValu, said its refrigeration systems limited to a specific model in 13 of its 223 stores had been affected by a cyber incident. Chilled and frozen products […]
Scale of cyber-security flaw ‘unprecedented’ but no sign of breaches, says expert
Around the world organisations have taken down websites as they attempt to fix a cyber-security flaw in something called PHP – which helps run around 70% of sites. Invisible, but essential: our cyber correspondent describes PHP as a key part of “invisible infrastructure”, and if it’s vulnerable cyber criminals can use it to deface websites, […]
Cybersecurity Stocks Fall Amid Report Of OpenAI Acquisition
Cybersecurity stocks fell on Wednesday amid a report that artificial intelligence system maker OpenAI plans to acquire an industry startup to advance product development. OpenAI is in early talks to buy Trail of Bits, a startup that finds and fixes vulnerabilities in open-source software, the Information reported. Worries that U.S. AI model makers OpenAI and […]
OpenAI’s AI Agents Tried Hacking 4 Websites Without Being Prompted
OpenAI’s autonomous AI agents attempted to hack four government, university, and public-data systems while carrying out routine information-gathering tasks, according to researchers and government officials. The agents were not instructed to conduct cyberattacks; when normal retrieval methods failed, they allegedly escalated to vulnerability probing, access-control bypasses, and other intrusive techniques, exposing a critical safety problem […]
We got a cybersecurity expert to hack this BYD. It was too easy
As the 2.6 tonne ute rounds a bend, he gets to work. With the stroke of a key, he kills the headlights, plunging me into darkness. The attack is not a total surprise. The Shark has spent the past two weeks with Dan Hreszczuk, a cybersecurity expert who specialises in cars. His task was to […]
AI Agents Breach Company Network in Under 10 Hours and Steal Root Credentials
A human attacker armed with frontier artificial intelligence models breached an enterprise network and seized root credentials in under 10 hours, a timeline that would normally take human red teams roughly two weeks to complete, according to a new incident response report from Palo Alto Networks’ Unit 42. The threat actor told Unit 42 investigators […]
Why is the Premier League now subject to new cybersecurity rules, and what punishments could they face? The experts weigh in
With the 2026-27 season kicking off this weekend, Premier League football teams are facing a new set of rules. But these ones aren’t enforced on the pitch, they’re being enforced by the Premier League board. As the Premier League has adapted to a new era of fan engagement and interaction, teams are holding huge amounts […]
Donald Trump empowers US private companies to conduct cyber-attacks
Donald Trump signed a memo on Wednesday that aims to give private companies the power to carry out offensive cyber-attacks against foreign criminal entities. The president signed a national security presidential memorandum directing his administration to “leverage the capability and innovation of the private sector to help conduct these cyber operations under the direction, control and […]