Security Stories for 2026

Google Studies Prompt Injection Attacks Against AI Agents Browsing the Web 22
Bitwarden CLI Is the Next Compromise In Checkmarx Supply Chain Campaign 3
France Confirms Data Breach At Government Agency That Manages Citizens' IDs 18
Anthropic's Mythos Model Is Being Accessed by Unauthorized Users 32
Zoom Partners With Sam Altman's Iris-Scanning Company To Offer Callers Verifications of Humanness 43
30 WordPress Plugins Turned Into Malware After Ownership Change 18
US Government Now Wants Anthropic's 'Mythos', Preparing for AI Cybersecurity Threats 24
NIST Limits CVE Enrichment After 263% Surge In Vulnerability Submissions 18
'TotalRecall Reloaded' Tool Finds a Side Entrance To Windows 11 Recall Database 29
Cal.com Is Going Closed Source Because of AI 93
Booking.com Hit By Data Breach 15
CPUID Site Hijacked To Serve Malware Instead of HWMonitor Downloads 13
OpenAI To Limit New Model Release On Cybersecurity Fears 37
Hacker Steals 10 Petabytes of Data From China's Tianjin Supercomputer Center 71
Iran-Linked Hackers Disrupted US Oil, Gas, Water Sites 93
Russian Government Hackers Broke Into Thousands of Home Routers To Steal Passwords 70
Anthropic Unveils 'Claude Mythos', Powerful AI With Major Cyber Implications 61
Germany Doxes 'UNKN,' Head of RU Ransomware Gangs REvil, GandCrab 13
Top NPM Maintainers Targeted with AI Deepfakes in Massive Supply-Chain Attack, Axios Briefly Compromised 33
College Student, Cat Meme Helped Crack Massive Botnet Case 21
Google Moves Post-Quantum Encryption Timeline Up To 2029 68
European Commission Investigating Breach After Amazon Cloud Account Hack 5
Iran-Linked Hackers Breach FBI Director's Personal Email 82
Popular LiteLLM PyPI Package Backdoored To Steal Credentials, Auth Tokens 9
Hong Kong Police Can Demand Passwords Under New National Security Rules 80
Self-Propagating Malware Poisons Open Source Software, Wipes Iran-Based Machines 47
FCC Bans Imports of New Foreign-Made Routers, Citing Security Concerns 183
Cyberattack on a Car Breathalyzer Firm Leaves Drivers Stuck 118
Trivy Supply Chain Attack Spreads, Triggers Self-Spreading CanisterWorm Across 47 npm Packages 7
Rogue AI Triggers Serious Security Incident At Meta 87
iPhone Exploit DarkSword Steals Data In Minutes With No Trace 85
FBI Is Buying Location Data To Track US Citizens, Director Confirms 114
Federal Cyber Experts Called Microsoft's Cloud 'a Pile of Shit', Yet Approved It Anyway 64
Nvidia Bets On OpenClaw, But Adds a Security Layer Via NemoClaw 11
How One Company Finally Exposed North Korea's Massive Remote Workers Scam 24
Researchers Discover 14,000 Routers Wrangled Into Never-Before-Seen Botnet 32
FBI Investigates Breach That May Have Hit Its Wiretapping Tools 21
How AI Assistants Are Moving the Security Goalposts 41
A Security Researcher Went 'Undercover' on Moltbook - and Found Security Risks 19
US Cybersecurity Adds Exploited VMware Aria Operations To KEV Catalog 4
Computer Scientists Caution Against Internet Age-Verification Mandates 79
A Possible US Government iPhone-Hacking Toolkit Is Now In the Hands of Foreign Spies, Criminals 39
CISA Replaces Bumbling Acting Director After a Year 26
iPhone and iPad Are First Consumer Devices Cleared for NATO Classified Data 27
AI Can Find Hundreds of Software Bugs -- Fixing Them Is Another Story 26
Hacker Used Anthropic's Claude To Steal Sensitive Mexican Data 22
CrowdStrike Says Attackers Are Moving Through Networks in Under 30 Minutes 30
'Open Source Registries Don't Have Enough Money To Implement Basic Security' 24
Man Accidentally Gains Control of 7,000 Robot Vacuums 51
How Python's Security Response Team Keeps Python Users Safe 5
Cyber Stocks Slide As Anthropic Unveils 'Claude Code Security' 29
How Private Equity Debt Left a Leading VPN Open To Chinese Hackers 26
OpenClaw Security Fears Lead Meta, Other AI Firms To Restrict Its Use 7
LLM-Generated Passwords Look Strong but Crack in Hours, Researchers Find 84
Fake Job Recruiters Hid Malware In Developer Coding Challenges 25
Palo Alto Chose Not To Tie China To Hacking Campaign For Fear of Retaliation From Beijing 45
After Six Years, Two Pentesters Arrested in Iowa Receive $600,000 Settlement 66
Cyber-Espionage Group Breached Systems in 37 Nations, Security Researchers Say 15
A New Era for Security? Anthropic's Claude Opus 4.6 Found 500 High-Severity Vulnerabilities 62
Vibe-coded Social Network for AI Bots Exposed Data on Thousands of Humans 28
Notepad++ Compromised By State Actor 159
White House Scraps 'Burdensome' Software Security Rules 56
Nobel Hacking Likely Leaked Peace Prize Winner Name, Probe Finds 26
An AI Toy Exposed 50K Logs of Its Chats With Kids To Anyone With a Gmail Account 21
County Pays $600,000 To Pentesters It Arrested For Assessing Courthouse Security 49
FBI Seizes RAMP Cybercrime Forum Used By Ransomware Gangs 13
SoundCloud Data Breach Impacts 29.8 Million Accounts 7
Android Phones Are Getting More Anti-Theft Features 32
China Hacked Downing Street Phones For Years 75
Nike Says It's Investigating Possible Data Breach 13
Infotainment, EV Charger Exploits Earn $1M at Pwn2Own Automotive 2026 13
Microsoft Gave FBI a Set of BitLocker Encryption Keys To Unlock Suspects' Laptops 88
Predator Spyware Turns Failed Attacks Into Intelligence For Future Exploits 5
To Pressure Security Professionals, Mandiant Releases Database That Cracks Weak NTLM Passwords in 12 Hours 34
Supreme Court Hacker Posted Stolen Government Data On Instagram 12
Beijing Tells Chinese Firms To Stop Using US and Israeli Cybersecurity Software 26
Never-Before-Seen Linux Malware Is 'Far More Advanced Than Typical' 27
Fintech Firm Betterment Confirms Data Breach After Hackers Send Fake $10,000 Crypto Scam Messages 3
Personal Info on 17.5 Million Users May Have Leaked to Dark Web After 2024 Instagram Breach 13
European Space Agency Acknowledges Another Breach as Criminals Claim 200 GB Data Haul 23