Germany's far-right AfD (Alternative für Deutschland) party has confirmed that it has suffered a security breach, after a hacker published what appear to be hundreds of thousands of the controversial political party's internal emails. Earlier this week, the AfD admitted that its hosting provider had been hacked in September, and that some of its mailboxes had been copied. The party claims that most of the affected mailboxes had not been used for years, but the leaked archive reportedly includes messages dated as recently as 12 September 2026. READ MORE...
Threat actors are deploying agentic AI in more sophisticated ways to automate aspects of their hacking campaigns, according to CrowdStrike. "In 2026, CrowdStrike Intelligence has documented several incidents in which threat actors used AI not only to create tooling or artifacts, but to conduct agentic campaigns in which AI agents make decisions and execute commands," the security firm said in a report published on Wednesday. READ MORE...
The FBI and the Cybersecurity and Infrastructure Security Agency warned that SafePay has expanded its attacks against critical infrastructure providers to become one of the world's most active ransomware operations. Since 2024, Safepay has struck more than 600 critical infrastructure providers, with particular focus on North and South America, Europe and Australia, according to an advisory issued jointly by U.S. and European authorities. READ MORE...
wo Chicago customers say robots delivering their groceries and takeout scanned their faces and hands without consent, stored the data alongside their names and addresses, and used the recordings to train AI. Their separate lawsuits accuse delivery robot operators Coco Robotics and Serve Robotics of violating Illinois' biometric privacy law. Both companies dispute the claims. The plaintiffs allege that the robots used their cameras along with light detection and ranging (LiDAR) sensors to scan them. READ MORE...
The size of the cybersecurity insurance market is growing quickly as more businesses try to guard against the damage from a major hacking incident. "Total U.S. domestic cyber direct written business has nearly tripled since 2020, making cyber insurance one of the fastest-expanding segments in insurance," the National Association of Insurance Commissioners said in a statement Wednesday about its new report on the topic. Chubb, Beazley and St. Paul Travelers are the top three insurers by the value of their direct written premiums. READ MORE...
The UK government is throwing £130 million at AI-powered cyber defenses, including plans to deploy autonomous AI agents across critical infrastructure to hunt down security flaws before attackers get there first. The money is part of a wider £600 million-plus AI spending spree announced by the Treasury ahead of this week's Budget, with ministers also promising to tackle biological threats, bankroll British AI firms, and reduce the country's dependence on foreign technology. READ MORE...
Networking solutions provider Arista Networks on Thursday rolled out patches for an exploited zero-day vulnerability in its centralized management tool VeloCloud Orchestrator (VCO). The critical-severity security defect is tracked as CVE-2026-114625 (CVSS score of 9.9) and is described as a remotely exploitable SQL injection."VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host." READ MORE...
Criminals are exploiting established customer accounts and familiar brands to steal money and personal information, according to TransUnion's Fraud in the Age of Continuous Trust report. Eighty-one percent of suspected digital fraud in its network during the first half of 2026 occurred during account logins and financial transactions, highlighting risks that persist throughout a customer relationship. Verifying someone's identity does not establish whether every subsequent interaction can be trusted. READ MORE...