Tech industry alliance proposes AI agent safety reporting program

The information-sharing exchange is designed to widely share lessons learned from agentic AI security incidents.

cybersecuritydive.com

AI widely used to exploit critical flaws, disrupt supply chains

A report confirms the growing use of AI across a broad spectrum of threat groups.

cybersecuritydive.com

AI makes costly spearphishing attacks easier, cyber insurer says

Impersonation campaigns led to more than 85% of the losses that Resilience dealt with in the first half of the year, a dramatic increase from two years ago.

cybersecuritydive.com

OT security coalition urges Congress, CISA to enact reforms amid water sector hacks

Iran-nexus hackers are suspected in a broad campaign targeting drinking and wastewater sites in at least seven U.S. states.

cybersecuritydive.com

China-based hacker employs DeepSeek in autonomous threat campaign

Researchers said the hacker also attempted to test Western AI tools, but ultimately was forced to revert to manual operations to succeed.

cybersecuritydive.com

How volunteer cyber experts are helping protect rural water systems

A first-in-the-nation program is seeing promising results as it charts a path for supporting the U.S.’s most vulnerable infrastructure.

cybersecuritydive.com

US authorities see ‘significant escalation’ in attacks on water system devices

Hackers have locked operators out of their own OT networks, modified passwords and changed IP addresses.

cybersecuritydive.com

Anthropic says human error let Claude AI models escape test environment and hack third parties

The company said its discovery, which followed OpenAI’s similar admission, proved the need for better testing guardrails.

cybersecuritydive.com

Shadow AI, leadership resistance make AI governance tough for worried CISOs

Fewer than half of CISOs think their bosses see AI security as a business enabler, according to an Okta survey.

cybersecuritydive.com

Hackers abuse Microsoft Teams in ransomware campaign through fake IT support

Researchers said dozens of US and Canadian firms have been targeted, however, the motivation appears to be financial rather than espionage.

cybersecuritydive.com

As data breaches grow costlier, ungoverned AI creates new risks

Meanwhile, many companies still aren’t doing the basics to protect on-premises data, IBM found.

cybersecuritydive.com

Authorities investigating a coordinated cyberattack against Minnesota water systems

The two-day attack comes days after federal officials warned of state-linked threat groups targeting a wider set of industrial devices.

cybersecuritydive.com

Companies fear AI risks more than common cybersecurity threats

That misprioritization could blind companies to the threats they should be focusing on, Arctic Wolf said in a new report.

cybersecuritydive.com

Tech industry giants say US must embrace openness, transparency in AI

Open-source and open-weight AI models are essential cybersecurity tools, two groups of major AI and security firms said.

cybersecuritydive.com

Coca-Cola restores most production capacity at dairy unit after ransomware attack

The company said it does not expect the Fairlife disruption to have a material impact on financial performance or operations.

cybersecuritydive.com

The most vulnerable AI products are also some of the most commonly exposed online

It is becoming increasingly easy for hackers to target vulnerable AI tools on companies’ networks, even as those companies come to depend on them for more tasks.

cybersecuritydive.com

GAO report details scope of cybersecurity regulation overlap

A morass of rules is forcing companies to report the same information multiple times — and sometimes, those rules conflict.

cybersecuritydive.com

CISA, FBI warn that Iran-linked hackers are expanding target set for water, energy

The agencies said threat groups have disrupted critical infrastructure sites by exploiting vulnerable PLC devices.

cybersecuritydive.com

Russia-backed threat actor targets Western organizations in phishing campaign

The threat actor exploited a zero-day flaw in Zimbra to exfiltrate months of emails and other sensitive information.

cybersecuritydive.com

Threat group claims credit for ransomware attack on Coca-Cola’s dairy unit

The attackers previously exploited vulnerabilities or used stolen credentials for initial access.

cybersecuritydive.com

OpenAI models escaped containment and hacked a major AI application library

The attack is the first known instance of frontier models autonomously breaking out of a testing environment and into another company’s servers.

cybersecuritydive.com

Microsoft SharePoint under attack via new exploit

Security researchers warn the potential risk could rival the widespread ToolShell campaign of 2025.

cybersecuritydive.com

Ransomware victims fail to fix flaws that exposed them

Many organizations still aren’t securing their email or patching vulnerabilities after recovering from attacks, a new report found.

cybersecuritydive.com

Researchers trace SonicWall SMA1000 exploitation to late June

Multiple threat actors, including INC ransomware, have targeted vulnerable firewall systems.

cybersecuritydive.com

Hackers steal customer data from major hospital software vendor

The breach is another reminder of how vulnerable the healthcare industry is to supply-chain attacks.

cybersecuritydive.com

Abbott discloses cyberattack on cancer diagnostics business

The cyberattack follows Abbott’s recent $21 billion purchase of Exact Sciences. Abbott did not disclose what kind of information was accessed.

cybersecuritydive.com

Ransomware attack forces Coca-Cola to suspend US production at dairy unit

The beverage company is still working to determine the full scope of the breach at its Fairlife business.

cybersecuritydive.com

Gaps in network security, oversight strategy hamper US’s aviation cybersecurity regulators

A new government audit identified several weaknesses at the two agencies that protect air travel from hackers.

cybersecuritydive.com

Iran-nexus actors using AI to enhance cyber playbook

A report shows state-linked and hacktivist groups have used ChatGPT and other tools for malware development, phishing and mapping out industrial sites.

cybersecuritydive.com

US launches vulnerability clearinghouse amid AI-fueled surge in flaws

The Trump administration hopes the program will accelerate the discovery and fixing of serious technical problems before hackers exploit them.

cybersecuritydive.com