Collaborate Disseminate
Another malware wave is washing through open-source software repos, stealing publishing tokens, installing OS‑level backdoors and persisting in developer tools and CI pipelines.
The post Mini Shai-Hulud returns, compromising hundreds of npm packages appeared first on CyberScoop.
Continue reading Mini Shai-Hulud returns, compromising hundreds of npm packages
Cybercriminals brought down the most widely used learning platform in North America. The Canvas breach is a blueprint for how SaaS attacks now work — and a warning about how unprepared most organizations still are.
The post The Canvas breach proved that prevention is no longer enough appeared first on CyberScoop.
Continue reading The Canvas breach proved that prevention is no longer enough
Two independent studies found that Anthropic’s Claude Mythos Preview and OpenAI’s GPT-5.5 have outpaced every trend line researchers were tracking. No one is sure if this is a one-time leap or the new normal.
The post Researchers say AI just broke every benchmark for autonomous cyber capability appeared first on CyberScoop.
Continue reading Researchers say AI just broke every benchmark for autonomous cyber capability
With Daybreak, OpenAI is taking direct aim at Anthropic’s tightly restricted Mythos model, offering a more open — but still carefully gated — path to AI-powered cyber defense.
The post Daybreak is OpenAI’s answer to the AI arms race in cybersecurity appeared first on CyberScoop.
Continue reading Daybreak is OpenAI’s answer to the AI arms race in cybersecurity
The campaign hit major registries and hid behind legitimate-looking release signatures, showing how attackers can weaponize the software update process itself.
The post ‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in sprawling supply-chain attack appeared first on CyberScoop.
Startups are scaling faster, attackers are getting smarter, and investors are getting more selective. The cybersecurity industry is in the middle of a reset.
The post AI is separating the companies built to scale from the ones built to sell appeared first on CyberScoop.
Continue reading AI is separating the companies built to scale from the ones built to sell
As AI and quantum threats target the backbone of the American economy, Washington must provide the guidance and incentives necessary for SMBs to access executive-level cyber expertise.
The post The missing cybersecurity leader in small business appeared first on CyberScoop.
Continue reading The missing cybersecurity leader in small business
The group that stole data from Instructure users claims that it will release the data of students from nearly 9,000 education institutions around the country.
The post ShinyHunters claims nearly 9,000 schools affected by Canvas data breach appeared first on CyberScoop.
Continue reading ShinyHunters claims nearly 9,000 schools affected by Canvas data breach
The men’s separate schemes impacted almost 70 U.S. companies and generated a combined $1.2 million in revenue for the North Korean regime.
The post American duo sentenced for hosting laptop farms for North Korean IT workers appeared first on CyberScoop.
Continue reading American duo sentenced for hosting laptop farms for North Korean IT workers
Researchers say Schemata’s platform exposed names, emails, base assignments, and course materials before the company patched the issue and contacted government authorities.
The post A DOD contractor’s API flaw exposed military course data and service member records appeared first on CyberScoop.
Continue reading A DOD contractor’s API flaw exposed military course data and service member records