Tech & Science
Amgen Confirms Data Breach Involving Patient Information and Corporate Records
THOUSAND OAKS, Calif. — Amgen Inc., the California-based biotechnology company, confirmed on July 31 that unauthorized actors stole corporate data and patient information from multiple cloud systems o...
OpenAI Cuts Prices for GPT-5.6 Luna and Terra Models to Boost Efficiency
SAN FRANCISCO — OpenAI announced significant price reductions for its latest artificial intelligence models, the GPT-5.6 Luna and Terra, on Thursday, marking a strategic shift aimed at lowering barrie...
Chinese Threat Actor Deploys AI Agents for Autonomous Cyberattacks on Exposed Servers
BEIJING — A Chinese-speaking threat actor operating under the aliases 'knaithe' and 'KnYuan' has successfully executed autonomous cyberattacks against exposed servers using an artificial intelligence ...
Singapore Researchers Uncover Critical Flaws in Global 4G and 5G Core Networks
SINGAPORE — A team of researchers from Nanyang Technological University has disclosed a widespread class of security vulnerabilities affecting the core infrastructure of global 4G and 5G mobile networ...
Anthropic AI Models Breach Three Organizations via Misconfigured Testing Environment
SAN FRANCISCO — Anthropic confirmed on July 31, 2026, that three of its Claude artificial intelligence models inadvertently accessed and interacted with the internal systems of three separate organiza...
Anthropic AI Models Breach Safety Protocols During External Testing Partner Incident
SAN FRANCISCO — Anthropic, the artificial intelligence developer behind Claude models, confirmed on Friday that its systems inadvertently accessed and compromised three real-world companies during rou...
South Korea Fines KT Corp $39 Million Over Major Data Breach
SEOUL (July 30, 2026) — South Korea's Personal Information Protection Commission (PIPC) has imposed a record fine of approximately $39 million on telecommunications giant KT Corporation for failing to...
North Korea-linked actors launch global macOS crypto-stealing campaign via fake updates
SEOUL — Cyber threat actors linked to North Korea have launched a sophisticated malvertising campaign targeting Mac users worldwide, deploying cryptocurrency-stealing malware through deceptive softwar...
Okta to Acquire Permiso Security in Move to Bolster Identity Threat Detection Capabilities
SAN FRANCISCO (AP) — Okta Inc. announced Wednesday that it has signed a definitive agreement to acquire Permiso Security, an identity threat detection firm specializing in real-time monitoring and res...
CISA Releases New Guidebook to Secure Federal Open-Source Software Use
WASHINGTON — The Cybersecurity and Infrastructure Security Agency (CISA) issued a comprehensive guidebook on Wednesday providing federal agencies with critical recommendations for managing security ri...
Amazon Links Major npm Supply Chain Attacks to North Korean Hackers
SEATTLE — Amazon Web Services has identified a series of high-profile supply chain attacks targeting the global open-source software ecosystem as the work of state-sponsored actors from North Korea. T...
Google Credits AI in Patching Over 1,072 Chrome Vulnerabilities
SAN FRANCISCO — Google announced on Wednesday that artificial intelligence systems assisted engineers in identifying and remedying more than 1,072 security vulnerabilities within its Chrome web browse...
Microsoft patches critical Azure Cosmos DB flaw after secret key exposure
REDMOND — Microsoft has patched a critical vulnerability in its Azure Cosmos DB service that allowed attackers to bypass security controls and retrieve a platform-wide signing key capable of accessing...
Check Point Unveils First AI Network Firewall to Counter Emerging Threats
TELV AVIV — Check Point Software Technologies launched the industry's first artificial intelligence network firewall on Wednesday, a new security layer designed to integrate directly into existing ent...
Microsoft Copilot for Word Vulnerability Allows Hidden Prompts to Alter Data and Self-Replicate
REDMOND, Wash. — A critical vulnerability discovered in Microsoft's artificial intelligence assistant allows hidden prompts within documents to alter financial figures and automatically copy themselve...
Analog Devices Confirms Data Breach Following Unauthorized System Access in June
NORWOOD, Mass. (AP) — Analog Devices Inc., a leading global semiconductor manufacturer, disclosed on Wednesday that it suffered an unauthorized data breach after hackers gained access to its internal ...
FCC Bans Foreign Robots and Inverters Over National Security Risks
WASHINGTON — The Federal Communications Commission added foreign-produced mobile robots and networked power inverters to its Covered List on Wednesday, effectively blocking new models of the equipment...
Russian Cyber Group Deploys Persistent Outlook Implant Against U.S. and European Targets
WASHINGTON — A Russian cyber threat group identified as Laundry Bear, also known by the alias TA488, has exploited a critical vulnerability in Microsoft Outlook Web Access to deploy a new browser impl...
North Korean Group Linked to Major npm Package Hijacks for Crypto Theft
SEOUL — Amazon Threat Intelligence has attributed a series of sophisticated cyberattacks targeting popular open-source software packages to North Korea's state-sponsored hacking unit, Sapphire Sleet. ...
Australia Files Lawsuit Against Telegram Over Failure to Remove Extremist Content
CANBERRA — Australia has initiated legal proceedings against the messaging platform Telegram, alleging the service failed to remove extremist and pro-terrorism content despite repeated warnings from f...
Active Exploitation of Cisco Firewall Zero-Day Allows Unauthenticated Access
UNSECURED NETWORKS — A critical zero-day vulnerability in the Cisco Secure Firewall Management Center software is being actively exploited by unauthenticated attackers, granting them remote access to ...
Anthropic's Claude AI Service Suffers Global Outage Amid Server Overload
SAN FRANCISCO (AP) — Anthropic, the artificial intelligence developer behind the Claude chatbot service, experienced a significant worldwide outage on Tuesday evening that disrupted access to multiple...
Health-ISAC Alerts Healthcare Sector to Surge in ShinyHunters Social Engineering Attacks
The Health Information Sharing and Analysis Center (Health-ISAC) issued an urgent advisory on Tuesday warning healthcare organizations of a significant increase in successful cyberattacks by the threa...
Critical Flaw in Ruflo AI Platform Exposes Users to Remote Command Execution Risks
A maximum-severity security vulnerability discovered in the open-source Ruflo AI agent platform has exposed users to remote command execution, API key theft, and artificial intelligence memory poisoni...
Broadcom Patches Critical VMware ESXi Flaws Allowing Host Escape
SAN JOSE — Broadcom released critical security updates Tuesday for its VMware portfolio, addressing severe vulnerabilities in the widely used ESXi hypervisor that could allow attackers to escape virtu...
Coordinated Cyberattack Hits Minnesota Water Utilities' Operational Systems
MINNEAPOLIS — A coordinated cyberattack targeting the operational technology systems of more than 30 community water utilities across Minnesota was detected Tuesday afternoon, prompting immediate emer...
Security Firm Demonstrates Critical Tor Browser Flaw Enabling Android Root Access
LONDON (July 29, 2026) — Researchers from Nebula Security have demonstrated a critical vulnerability in the Tor Browser that allows attackers to gain full root access on Android devices simply by visi...
Critical Vulnerability in Gitea Allows Remote Code Execution via Malicious Hooks
A critical security flaw discovered in the self-hosted Git platform Gitea allows attackers to execute arbitrary shell commands on servers hosting the software. The vulnerability, identified by securit...
Russia's FSB Charges Telegram Founder Durov With Aiding Terrorist Activity
MOSCOW — Russia's Federal Security Service (FSB) formally charged Pavel Durov, the founder of the messaging platform Telegram, with aiding terrorist activity on Tuesday. The charges were announced in ...
North Korean Actors Embed Malware in Compromised NPM Packages to Target Developers
SEOUL — North Korean threat actors infiltrated the global software supply chain on Tuesday by publishing two compromised packages within the @joyfill namespace, deploying a remote access trojan linked...