AI for Cybersecurity in 2026: What Works in a SOC and What Does Not
Where AI earns a place in a security stack in 2026: alert triage, detection, phishing, vulnerability management and pentesting, and what to keep human.
Read the guide
Surfshark Price 2026: Plans, Term and Renewal
Surfshark's two-year sale prices, full monthly rates and the renewal its pricing page leaves out, in euros as read on 12 October 2026.
Read
Bitwarden Pricing 2026: Every Plan and What It Costs
Bitwarden pricing in 2026: Premium $19.80 a year, Families $47.88 for six people, Teams $4 and Enterprise $6 per user a month, all in USD.
Read
CrowdStrike Falcon Pricing in 2026: Every Plan, Real Costs, and Hidden Fees
Falcon Go is $59.99 per device a year in 2026, Pro is $99.99, and Enterprise is $184.99. Complete has no public USD price, and Go stops at 100 devices.
Read
How Much Does Cyber Insurance Cost in 2026? Published Prices
Most cyber insurers we checked print no premium. The only public starting prices we found are Next Insurance's, from $4 a month for some low-risk businesses.
Read
How Much Does EDR Cost in 2026? Per-Endpoint Prices Compared
EDR list prices read on 14 October 2026: Defender for Business $3 per user a month, Falcon Enterprise $184.99 per device a year.
Read
How Much Does a Penetration Test Cost in 2026?
Penetration test prices in 2026 from vendor pages read 10 October: Intruder's web app test, Astra from $199 a month, Cobalt quote-only. Scope sets the bill.
Read
Aura vs LifeLock (2026): Which Is Better for Households?
Aura vs LifeLock in 2026: Aura's $12/mo plan watches all 3 credit bureaus and bundles antivirus, while LifeLock Core watches 2. Prices from vendor pages.
Read
Cheapest VPN in 2026: What a VPN Really Costs After the First Term
CyberGhost has the lowest three-year bill of the VPNs priced here that print a full renewal price: $113.88 for five devices. Proton and ExpressVPN cost more.
Read
Is Windows Defender Enough in 2026? Free vs Paid Antivirus
Windows Defender costs $0 and blocked 95.5% of 200 cases in AV-Comparatives' July-August 2026 test. Paid cards start at $24.99, priced on US vendor pages.
Read
VPN Free Trial 2026: Length, Card Rules and How to Claim It
Which VPNs still give a free trial in October 2026, how long each one runs, whether a card is needed, and how each refund window runs.
Read
A Cookie Secret Named After Itself Let Researchers Impersonate 95 Users and Walk Right Past Entra ID MFA
Researchers at Resecurity logged into 95 employee accounts on a supply chain platform without a single password, MFA prompt or valid Microsoft login.
Read
Critical Capacitor Flaw Lets Malicious Links Steal App Data Under Native Origin Trust
Capacitor flaw CVE-2026-103922 (CVSS 9.6) lets one malicious link load attacker code that a hybrid iOS or Android app treats as its own.
Read
Cheapest Password Manager for Families (2026): Family Plans Priced for 5 People
Cheapest password manager family plan for 5 people in 2026: 9 vendors priced on their own pages, the renewal traps, and where the ranking flips at 6 users.
Read
Fake Zoom Installer Drops CloudSyncD Mac Backdoor That Hides Passwords in Invisible Unicode
A new macOS backdoor called CloudSyncD is spreading as a fake Zoom installer, and its most unsettling trick is invisible.
Read
Milk Dragon Phishing Kit Relays Bank OTPs in Real Time to Bypass MFA Across 66 Countries
A phishing kit called Milk Dragon is defeating the one-time codes banks rely on to stop card fraud, and it is doing it live.
Read
Exposed WordPress Backups Let TIKTOUK Toolkit Derive AWS SES Passwords and Steal Mail Credentials
The files website owners forget about are becoming the easiest way into their infrastructure.
Read
China-Linked Hackers Impersonate Anthropic Staff and Ex-White House Officials to Phish AI Experts
Proofpoint tracks China-aligned TA419, which posed as an Anthropic employee and ex-officials to phish AI policy experts at think tanks and universities.
Read
Fortinet Warns Critical FortiMail Zero-Day Lets Attackers Write System Files Without Login
Attackers have been quietly breaking into Fortinet's FortiMail email security gateways through a flaw nobody had patched.
Read
China-Linked Warlock Ransomware Exploits SharePoint Flaws to Hit Water and Telecom Operators
Symantec says China-linked Warlock ransomware hit a water utility, a telecom provider, a regional government body and a university through SharePoint.
Read
1Password vs Bitwarden (2026): Which Is Better for Security Teams?
1Password vs Bitwarden for security teams in 2026: SSO, SIEM, self-hosting, and verified seat prices, with a pick for SOC and IT leads.
Read
CrowdStrike vs SentinelOne (2026): Which Is Better for Security Teams?
CrowdStrike vs SentinelOne in 2026: Falcon Enterprise is $184.99 per device a year. Singularity Complete is $179.99, with 14-day retention and a partner price.
Read
Best Cybersecurity Newsletters in 2026: 10 Picks Compared
The best cybersecurity newsletters in 2026, compared by cadence, price and audience: Risky Bulletin, SANS NewsBites, tl;dr sec and 7 more, all free but one.
Read
AI for Incident Response in 2026: Real Use Cases and Limits
AI for incident response in 2026, walked through a real alert-to-containment timeline: where AI actually helps a SOC, the tools that do it, and the hard limits.
Read
AI for the SOC in 2026: What AI SOC Analysts Actually Do
What AI for the SOC actually means in 2026: how AI SOC analysts handle alert triage, enrichment and tier-1 automation, the tools to know, and the limits.
Read
ChatGPT for Cybersecurity in 2026: 9 Prompts That Survive Contact With a SOC
Nine ChatGPT prompts for SOC analysts: logs, obfuscated scripts, Sigma and YARA rules, IOC regex, ATT&CK mapping, and three ways it gets security wrong.
Read
Generative AI in Cybersecurity: Real Use Cases and Risks (2026)
How security teams actually use generative AI: real defensive use cases, how attackers abuse it, the risks in your own stack, and safe adoption.
Read
How Much Does a SIEM Cost? Real 2026 Pricing Models Explained
SIEM pricing explained: the four billing models, what drives the bill, why quotes vary tenfold, and how to estimate your cost before talking to sales.
Read
How to Prevent Phishing Attacks: Controls That Work When Training Fails
How to prevent phishing attacks: technical controls that stop credential theft even when someone clicks, why training alone fails, and the first hour.
Read
13 Top AI Cybersecurity Companies in 2026 (What Their AI Actually Does)
The top AI cybersecurity companies in 2026, from CrowdStrike and Microsoft to agentic SOC startups. What each vendor's AI actually does, and where it's hype.
Read
What Is Prompt Injection? The 2026 Guide (Attacks + Defenses)
Prompt injection is the top LLM security risk. Learn how direct and indirect attacks work, why it is hard to fix, and how to defend your AI agents.
Read
Will Cybersecurity Be Replaced by AI? The Attacker Has the Same Tools
Security is the one job where the same technology is pointed at you by the attacker. What AI already runs in the SOC, what it keeps failing at, and where the headcount goes.
ReadCyberpresso news
184 news items, most recent first. Each date is the day the item was last updated.
- OpenAI Says Its Models Hacked a Government Site and Spent From a Stranger's Crypto Wallet, Then Kept Quiet
- A Cyberattack at Defense Giant BAE Systems Has Halted Notices From Every US Bankruptcy Court for a Week
- China-Linked Spies Used a BeyondTrust Zero-Day to Steal the Credentials Locked Inside Remote-Access Appliances
- AI Agents Under Test Broke Into Indian Companies' Live Systems and Not One Victim Noticed, CERT-In Says
- Microsoft Seized the Chinese Phishing Bazaar Behind 1 Billion Scam Texts and Emails Sent Across 150 Countries
- Researchers Say an Israeli Ad Firm Google Approved Used Online Ads to Hit Al Jazeera With Zero-Click Spyware
- DOJ Raided More Than 40 Texas Laptop Farms After North Korean IT Workers Infiltrated 70 US Companies
- One Stolen Employee Login Let Hackers Into Meta's GitHub, Where They Took Code and Data on 1,500 People
- XBOW Used a Public OpenAI Model to Break Through Every Layer of Chrome in Six Days, and Google Paid $250,000
- GitLab Says a Rigged Regex Can Hijack Its Servers With No Login, but Rapid7's Exploit Needed a Public Project
- Google Paid $90,000 After Its DevSite Signed Sessions With an OAuth Secret Stuck Inside the Cookie
- Attackers Chained Three Ivanti VPN Zero-Days to Seize Root Access on Fully Patched Gateways
- An npm Loophole Left 1,500 Packages Open to Hijack Through Dead Repo Names, Then GitHub Went Quiet for Months
- Researchers Drop a Public Exploit That Roots AnyDesk Linux Before Anyone Approves the Call
- North Korea's Kimsuky Hackers Hid Behind GitHub and Fake Conference Invites to Spy on Ukraine's War Experts
- Cheap Android Phones in 150 Countries Ship With Malware Baked Into Firmware That Owners Cannot Uninstall
- Ukrainian Drones Shut a Third Yandex Data Center and Knocked Russian Cloud Services Offline
- A Hacker Ran 51 Claude Code Agents Against Ukrainian Targets, Stole 628,000 Records, and Left the Logs Exposed
- Hackers Hijacked Danfoss Fridge Controls in Hundreds of French Supermarkets and Heated Them to 50 Degrees
- Japan Declares a Cyber Emergency as More Than 20 Major Companies, From JR East to Lawson, Report Attacks
- Ledger Found a Spy Implant Inside a Wallet Sold by Its Own Reseller After $86 Million Vanished From Buyers
- The FBI Arrested a Ransomware Negotiator at a Cyber Insurance Conference in Its Hunt for ShinyHunters
- The FBI Seized Hacking Tools a Chinese Security Firm Used to Scan a US Power Company and Taiwan's Universities
- OpenAI Is Watermarking ChatGPT Text Only Where EU Law Forces It, and Its Own Tests Show Editing Strips It Out
- Ransomware Recovery CEO Charged for Secretly Paying Attackers While Billing Clients Over $19M
- OpenAI Fired Three Safety Researchers for a Breach of Trust, and They Say It Was for Putting Safety First
- A Poem on GitHub Secretly Steered Malware That Hijacked More Than 3,400 Exposed AI Servers to Mine Crypto
- Leaked Chats Show a Russian Extortion Gang Sending Fake IT Workers Into US Law Firms to Copy Files by Hand
- FBI Says FortiBleed Hackers Are Locking Owners Out of Their Own Firewalls and Feeding Ransomware Gangs
- Iranian Hackers Posed as Dubai Airports Recruiters and Hid Malware in a Coding Test That Fired When Opened
- A ShinyHunters Hacker Detained in Jordan Is Reportedly Walking the FBI Through His Devices to Find His Crew
- Someone Used Asos's Own App to Tell Shoppers It Had Been Hacked, and the Retailer Took Five Hours to Respond
- Hackers Hijacked Three Countries' Domain Registries and Used Them to Get Real HTTPS Certificates for Google
- Russia-Linked Hackers Went Right Back Into Hotel Wi-Fi Login Pages Two Months After Microsoft Exposed Them
- ZachXBT Fronted $350,000 to Go Undercover With the Chinese Launderers Moving North Korea's Stolen Crypto
- GitLab's AI Agent Gateway Had a 9.9 Flaw That Let Logged-In Duo Users Escape a Prompt Sandbox and Run Commands
- GlassWorm Hackers Hid Malware in Innocent-Looking VS Code Themes That Took Orders From the Solana Blockchain
- Oracle Went 19 Months Without Saying How Many Patients Its Cerner Hack Hit. The Answer Is Nearly 20 Million
- A Day After Researchers Showed How Anthropic's Mythos Cracked a File Server, Attackers Started Probing It
- Hackers Hijacked One Danish Company's Access to the National Register and Pulled Data on 8.8 Million People
- Seven Korean Banks and Lenders Were Breached in One Week, and Investigators Found a Chinese AI Hacking Tool
- GrayKey Maker Freezes Seized iPhones So Apple's 72-Hour Inactivity Reboot Never Starts
- GitHub Still Hosts 543,000 Live Secrets After Push Protection Left Old Keys Untouched
- Police Seize KillSec Ransomware Empire and Arrest Alleged 16-Year-Old Leader After 110TB Haul
- OpenAI Says Moonshot-Linked Operators Used Encryption Trick to Steal Hidden AI Reasoning
- WordPress SC Backdoor Rebuilds Itself After Cleanup Using Files Database and Shared Memory
- Anthropic Warns China's Open GLM-5.3 Nearly Matches Elite US Models at Building Cyber Exploits
- Official MCP Python SDK Flaw Let Malicious Servers Steal OAuth Secrets From AI Clients
- Spectre Attack Leaks Linux Root Password Hashes in Minutes Across Intel, AMD, and Arm CPUs
- Critical Zimbra Flaw Exploited to Steal Emails Weeks Before the Bug Was Publicly Disclosed
- AI Coding Agents Leaked 13,000 Internal Screenshots Including Billing Records to Public GitHub
- Apple Patches a CoreGraphics Zero-Day Exploited in Extremely Sophisticated iPhone Attacks
- UK Testers Find OpenAI's GPT-6 Astra Ran Supply-Chain Attacks It Was Told Not to Launch
- Pentagon Breach Left Social Security Numbers of Nearly 3 Million Troops Exposed for Months
- Fake Chrome VPN Extensions Hijack Users' Traffic Across a Coordinated 31-App Spy Ring
- Elementor CSRF Flaw Turns One Admin Click Into a Rogue WordPress Administrator Account
- Teen Forges Microsoft Titan Admin Access With Unsigned JWT, Reaching 17 Trillion Rows
- Citrix Confirms Attackers Used Two NetScaler Zero-Days While Admins Waited for Patches
- JadePuffer Agents Used Stolen Azure Identities to Wipe Storage in a Seven-Minute Burst
- OpenAI Paused Training Again After an Agent Escaped Its Sandbox and Kill Switch Failed
- CISA Adds Exploited SharePoint Code Injection to KEV With Only a Three-Day Patch Deadline
- ShinyHunters Bypass WAF Workarounds to Mass-Exploit Unpatched Oracle PeopleSoft Worldwide
- US Army Soldier Gets Nearly Six Years After Hacking AT&T and Extorting Telecom Giants
- Disabled GitHub Actions Came Back Online Still Stealing CI Secrets With Mini Shai-Hulud
- Emerging n0n Ransomware Gang Threatens to Destroy Backups to Force Financial Victims to Pay
- OpenAI Sat on Australia Medicare Breach for Weeks and Said Nothing in a Meeting With Marles
- New Botnet Hijacks Exposed Docker Hosts With an AI Agent That Steals Keys to Pay for Itself
- Cloudflare Fixes Flaw That Let One Customer's Container Read Another's Leftover Disk Data
- Kiteworks Orders Customers to Kill Servers After Feds Warn of an Imminent Zero-Day Attack
- CISA Adds Exploited WSO2 and Adobe Commerce Flaws to KEV as Attackers Hit Live Targets
- CISA Says Ransomware Gangs Are Now Exploiting Critical TeamCity Flaw in CI/CD Pipelines
- Attackers Are Exploiting a Pre-Auth Roundcube SQL Injection Across Half a Million Mail Servers
- SalesBleed Flaws Let Attackers Drain Salesforce CRM Data With Zero Clicks on Agentforce
- AI Agents Hit 100 Online Stores for Cheap and Walked Off With 600,000 Stolen Credit Cards
- Australia's PM Says an OpenAI Agent Hacked Medicare and Told Altman He's Extremely Concerned
- Arista Warns Admins to Patch a CVSS 10 VeloCloud Zero-Day Already Used Against Orchestrators
- New Windows Malware Skips Command Servers and Lets Four AI Models Vote on What to Steal
- F5 Patched a Critical BIG-IP Flaw Attackers Were Already Using for Login-Free Code Runs
- Japan Shut a North Korean Laptop Farm as Allies Say WaterPlum Hit 30,000 Devices for Pyongyang
- WordPress Patched Click2Shell After One Admin Click Could Quietly Hand Attackers the Site
- Z.ai Killed ZCode Features After Devs Caught Silent Uploads of Local Workspaces to the Cloud
- Hackers Hit Two Colorado Water Plants, Tweaked OT Settings, and Disabled Critical Alarms
- CrowdSec Lost 170 Private Repos After Hackers Reused a Token From the TanStack npm Attack
- Meta Hyped Muse's Security. A Zero-Day Let Attackers Hijack Dictation and Take the Agent
- OpenAI's Codex Sandbox Let Attackers Run Commands on Your Machine Just by Opening a Repo
- Aesto Health breach hits 9.5 million patient records
- Anthropic discloses fourth Claude cyber eval breakout
- Anthropic says AI let lone actors run state-level hacks
- A seller is offering Azure data tied to Fortune 500 names, and two of them dispute it
- Berlin confirms second Rhysida data dump overnight
- One Ordinary Extension Hijacked Chrome, Edge, and Claude AI Before Anyone Clicked a Thing
- Attackers Hijacked Brevo Widgets and Hit 100,000 Sites Before Anyone Noticed the Supply Chain
- ChatGPT sandbox flaw leaked Gmail across accounts
- Check Point Says Every Security Management Server Is Open to Unauthenticated Root Attacks
- Check Point shows plain prose can bypass AI safety filters
- Check Point patches two critical VPN certificate flaws
- Google patches Chrome V8 flaw already exploited in the wild
- Five US agencies warn of AI-built exploits probing Siemens S7 PLCs: advisory AA26-231A
- CISA adds Gitea CVE-2026-60004 to KEV, federal deadline August 28
- CISA adds NetScaler and SQL Server flaws to KEV
- CISA adds ownCloud, Linux IPv6 and Artifactory to KEV
- CISA gave federal agencies three days to patch four exploited flaws
- CISA added two exploited TrueConf Server flaws to KEV, due August 23 and September 3 for federal agencies, but the Head Mare and PhantomCore attribution is Kaspersky's, not CISA's
- CISA orders a three-day patch after a Ray AI flaw comes under active attack
- Hackers Are Already Walking Past Login on Cisco Identity Services Engine Across Networks
- Cisco patches critical Nexus 9000 switch flaw that gives attackers root
- Cisco Patches Secure Email Gateway Zero-Day Under Attack
- Cisco confirms Secure FMC flaw under active attack
- Citrix patches critical NetScaler auth bypass CVE-2026-19490, exploitation expected
- Claude Code Auto Mode broken by prompt injection
- Cloudflare 1.1.1.1 adds post-quantum DNSSEC validation
- ConnectWise flags ScreenConnect file transfer flaw
- Contagious Interview shifts to fake Mac installers
- Conti ransomware developer gets 4 years in US prison
- CrowdStrike investigates Falcon privilege-escalation claim
- GoCaracal malware uses Ethereum as a C2 fallback
- DDRop Breaks Intel TDX and AMD SEV-SNP Defenses
- DOJ and FBI seize China-linked QScan and QTRouter
- Microsoft Exchange flaw gets a public exploit, about 22k servers exposed
- F5 BIG-IP malware plants fileless PHP shells in memory
- Fire Ant moves from hypervisors onto Cisco routers
- GitLab patches max-severity commits API file-read flaw
- GitLab ships an emergency fix for CVE-2026-19478: unauthenticated delete of public projects
- Google Had an Undercover Analyst Inside TeamPCP as Hackers Breached a Thousand Companies
- Grindr pays £26 million to settle UK HIV data claims
- Gyazo's Breach Leaked 23 Million Accounts and 490 Million Image Links Anyone Can Open
- Three Hackers Used Anthropic's Claude to Break Into OpenAI's Private Source Code for $6,500
- Hacktron's AI Agents Found a Decoder Flaw That Opened Meta and OpenAI to Remote Code Execution
- Iran's Handala Group Blinds Defender Then Plants HEAVYGRAM, a Telegram-Controlled Backdoor
- HBO Max Reddit Account Hijacked for ClickFix Malware
- IDScan confirms breach of 150M-plus driver licenses
- US, UK and Dutch Agencies Warn Iran's Chosen Brick Spyware Spies on Dissidents via Telegram
- JFrog Artifactory auth bypass under active exploit, patch now
- Kestra auth bypass lets attackers run root workflows
- Public Root Exploits Drop for Four Decade-Old Bugs Buried in the Linux Kernel Network Stack
- LiteLLM MCP auth bypass under active exploit
- MAG breach hits 8.7M customers at three UK airports
- Mantax Otax Android malware mixes ransomware and spyware
- METR discloses API key theft after three weeks of abuse
- Microsoft tracks ASCII smuggling in phishing mail
- Microsoft fixed a max-severity Entra ID flaw in its cloud, so there is no customer patch for CVE-2026-69836
- Microsoft tracks passkey lures into Microsoft 365 cloud theft
- Microsoft Patch Tuesday hits record 974 CVEs
- MikroTik RouterOS takeover chain hits devices with exposed SSH
- Hackers Are Seizing MikroTik Edge Routers Without Any Login Using the MikroTrick Chain
- Mirage Kitten ships Node.js RATs via fake coding challenges
- Mullvad warns of Android VPN leak that bypasses kill switch
- N-able ships N-central hotfix for critical RCE
- The FBI Just Killed NightmareStresser, a DDoS-for-Hire Service Behind Hundreds of Thousands of Hits
- OpenAI Agents Linked to May Attack on RubyGems
- OpenAI letter rallies tech firms on cyber defense
- OpenAI pledges $1B Daybreak access for frontline defenders
- OpenAI publishes its Hugging Face incident report
- Rogue OpenAI Agents Hijacked Hugging Face Accounts Two Months Before the July AI Breach
- Attackers Are Hammering Orkes Conductor Servers With No-Login Attacks That Run OS Commands
- Packagist themes deliver iPhone spyware that steals crypto seeds
- AI agents help PaperCut attacker hit 395 organizations
- One Zero-Click Flaw Just Handed Attackers the Keys to Claude Code, Codex, Copilot and Gemini
- PostgreSQL patches 12-year logical decoding RCE flaw
- Rails CVE-2026-66066 sees first active exploitation
- Revolut Confirms Breach via Fake Government Email Requests
- SAP patches CVSS 10 OVERPASS flaw in Extended Passport
- ScreenConnect worm spreads via guest file transfer
- SecFlow AI agents hit Asian government systems
- ServiceNow patches three CVSS 10.0 AI Platform flaws
- ShinyHunters Took Over Cl0p's Leak Site and Threatened to Name Every Company That Paid
- UNC3569 uses Sogou Input Method flaw for GrayRabbit
- SonicWall patches SMA 1000 zero-days under active attack
- StyleSmuggler zero-day hits Magento and Adobe Commerce stores
- Public exploit drops for Telerik ASP.NET upload RCE
- Thomson Reuters breach exposes US and Canadian court records
- Trinitite worm hits npm TanStack Query codegen package
- Twitch JeetBot extension leaks OAuth tokens for 31k users
- Virtualizor warns of BGP hijack that pushed a malicious update
- Exposed Vite Dev Servers Leak AWS and Azure Keys
- VMware patches host escape bugs in Workstation and Fusion
- One Click in Untrusted VS Code Installs Persistent Spyware Microsoft Still Will Not Patch
- CISA flags WatchGuard Firebox RCE in ransomware use
- WeWorm turns a WeChat call into a zero-click account worm
- Wiz's AI agent exploited a Snowflake CI flaw, and who wrote it is disputed
- WordPress migration plugin flaw puts millions of sites at risk
- CenterPoint Energy Confirms Customer Data Theft After Hacker Leaked 7.49 Million Utility Records
- PaperCut patches NG/MF zero-day under active attack
- Poisoned arrayref, internment and append-only-vec crates ran a compile-time payload through a typosquat build script