Cybersecurity & AI News
A curated digest of the latest security alerts, CVEs, threat intelligence and AI risk — gathered automatically from trusted official and industry sources, updated through the day.
Nearly 700 rogue AI agents coordinated in the Hugging Face attack
Nearly 700 rogue AI agents coordinated in the Hugging Face attack BleepingComputer
Read at source ↗AI Security Demand Fuels Okta and CrowdStrike Stock Gains
AI Security Demand Fuels Okta and CrowdStrike Stock Gains Briefs Finance
Read at source ↗CVE-2026-81893
Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery
Read at source ↗CVE-2026-81931
Unrestricted upload of file with dangerous type in Prospero Flow CRM product photo allows stored cross-site scripting
Read at source ↗CVE-2026-81934
Redis TLS pending-data list use-after-free
Read at source ↗CVE-2026-81833
RooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injection
Read at source ↗CVE-2026-81834
RooCodeInc Roo-Code README File ExecaTerminalProcess code injection
Read at source ↗CVE-2026-81838
Zip Slip Arbitrary File Write in AWS diagram-as-code (awsdac)
Read at source ↗Stronger Outlook And AI Security Demand Might Change The Case For Investing In Gartner
Stronger Outlook And AI Security Demand Might Change The Case For Investing In Gartner (IT) Yahoo Finance
Read at source ↗CrowdStrike Holdings (CRWD) Deepens AI Security Reach Through New Ecosystem Partnerships
CrowdStrike Holdings (CRWD) Deepens AI Security Reach Through New Ecosystem Partnerships simplywall.st
Read at source ↗OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face
OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack of Hugging Face…
Read at source ↗PaperCut warns of NG, MF flaw exploited in zero-day attacks
PaperCut warns of NG, MF flaw exploited in zero-day attacks BleepingComputer
Read at source ↗Manchester Airports Group says hackers stole travelers' data
Manchester Airports Group says hackers stole travelers' data BleepingComputer
Read at source ↗Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated…
Read at source ↗ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories
A fake login page. A fake security scan. A fake productivity app. Apparently, pretending to be useful is still one…
Read at source ↗Xiiaozet LK100W
Xiiaozet LK100W CISA (.gov)
Read at source ↗All-Line Equipment Company Fuel-Boss
All-Line Equipment Company Fuel-Boss CISA (.gov)
Read at source ↗Rockwell Automation OTTO Fleet Manager
Rockwell Automation OTTO Fleet Manager CISA (.gov)
Read at source ↗Disruptive cyber activity highlights risk from internet-exposed systems and edge devices
Read at source ↗Two Alleged ‘TeamPCP’ Hackers Arrested in Australia
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group…
Read at source ↗A polymorphic phishing page (that occasionally breaks itself)
As I've mentioned before in some of my diaries, from time to time, I like to go over phishing messages…
Read at source ↗ISC Stormcast For Thursday, August 27th, 2026
Read at source ↗Who Has Admin Rights in your Entra ID Directory?
A common thing that folks should "worry" about in Entra (or any platform really) is "who has rights to administer"? …
Read at source ↗Sony Escalates Legal Battle Against Udio With New $4.5 Billion AI Music Copyright Lawsuit
Sony Music has significantly intensified its legal fight against AI music platform Udio, filing a new copyright infringement lawsuit that…
Read at source ↗AI Hallucinations in State Farm Insurance Outside Lawyers' Filings
From L.A. Times (Rebecca Ellis) Wednesday: As part of an insurance dispute over a fire-damaged Carson home, attorneys for State…
Read at source ↗Court declines to dismiss independent artists’ copyright class action against Udio – but moves the case from Illinois to New York
A federal judge has declined to dismiss the copyright class action brought against AI music generator Udio by a group…
Read at source ↗Partner Portal
Partner Portal Cyber.gov.au
Read at source ↗Managing the cyber risk of agentic AI
Use safeguards, sandboxing and active oversight to realise the benefits of autonomous systems while limiting the unintended activity.
Read at source ↗2degrees adds network-level blocking of known malicious sites
2degrees adds network-level blocking of known malicious sites Telecompaper
Read at source ↗2degrees Activates Network-Level Protection Against Malicious Websites
2degrees Activates Network-Level Protection Against Malicious Websites The Fast Mode
Read at source ↗Active exploitation of remote monitoring and management platform within Australia
Active exploitation of remote monitoring and management platform within Australia Cyber.gov.au
Read at source ↗NCSC reports 19% spike in serious cyber security incidents in Q2
NCSC reports 19% spike in serious cyber security incidents in Q2 Reseller News
Read at source ↗Who’s Tracking You? Use This New Service to Find Out
It can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data…
Read at source ↗How BitLocker PINs help protect your data and devices
Using a PIN mitigates many BitLocker vulnerabilities. Make sure you’re ready for the next one...
Read at source ↗Microsoft Plugs Nearly 400 Security Holes
Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including…
Read at source ↗Frontier AI cyber threat considerations for boards of directors
Frontier AI cyber threat considerations for boards of directors Cyber.gov.au
Read at source ↗Key AI risk frameworks
The standards and knowledge bases behind responsible AI security — useful references when assessing AI systems.
Headlines, dates and summaries are sourced automatically from trusted public feeds and link to the original publisher. Cianaa Technologies does not author this content and is not affiliated with these sources.
Need help acting on an advisory?
Talk to an independent auditor or assessor — conflict-free, across New Zealand & Australia.
Book a scoping call →