The CyberSignal (Page 26)

Latest

Editorial illustration of a spilling records folder beside a cracked enterprise-software panel, marking Estée Lauder Oracle E-Business Suite zero-day breach.

Data Breaches

Estée Lauder Discloses Impact From Oracle E-Business Suite Zero-Day Breach

Another Oracle EBS customer disclosure lands: Estée Lauder confirms the theft of employees' personal, financial, and health data from its Oracle E-Business Suite HR system, closing one of the last gaps in the 2025 Oracle zero-day cycle.

Editorial illustration of a gem-shaped package hiding a dormant timer over a developer's keyboard, marking the SleeperGem RubyGems supply-chain attack.

Supply Chain Attack

Researchers Document "SleeperGem" RubyGems Supply-Chain Attack Targeting Developer Machines

Ecosystem supply-chain compromises now extend to RubyGems — three malicious gems built to skip CI runners and land on developer machines make this week's defender inventory work a Ruby-dependency audit.

Editorial illustration of an NGINX worker gear cracking under an overloaded heap stack with a fresh patch, marking F5's critical CVE-2026-42533 fix.

Vulnerabilities

F5 Publishes Critical NGINX Patch for Heap Buffer Overflow (CVE-2026-42533) That Could Enable Denial of Service or RCE

A critical NGINX flaw with remote-unauthenticated attack surface — defender verification across NGINX and NGINX Plus deployments this week.

Editorial illustration of a small robot arm slipping a key from an open AI model-repository vault, marking Hugging Face's breach by an autonomous AI agent.

Data Breaches

Hugging Face Confirms Production Infrastructure Breach Reportedly Perpetrated by Autonomous AI Agent

A first-of-its-kind AI-agent breach hits the world's largest AI model repository — defender posture and AI-supply-chain review are the week's practical takeaways for organizations that depend on Hugging Face-hosted models, datasets, and Spaces.

Editorial illustration of a website building block with an open door and an alarm bell ringing, marking active exploitation of the wp2shell WordPress vulnerabilities.

Vulnerabilities

wp2shell WordPress Vulnerabilities (CVE-2026-60137 and CVE-2026-63030) Confirmed Exploited in the Wild

wp2shell moves from disclosure to active exploitation — defender teams and hosting providers accelerate verification this week.

Editorial illustration of a website building block sealed with two patches, marking the WordPress 7.0.2 release fixing wp2shell and a SQL-injection flaw.

Vulnerabilities

WordPress Ships 7.0.2 Security Release Patching Two High-Severity Vulnerabilities

WordPress ships the 7.0.2 patch pairing wp2shell with a fresh SQL-injection CVE — defender teams and hosting providers apply immediately this weekend.

Flat white line-art of a prompt-tag shield intercepting a rogue AI agent at a web page — UC Berkeley's Context Bombing defense via the Prismata system.

Artificial Intelligence (AI)

UC Berkeley Researchers Publish “Context Bombing” Defensive Prompt-Injection Technique via Prismata System

A counterintuitive defensive prompt-injection research beat — defender review for AI-web-agent deployments this weekend.

Line-art of two magnifiers over a breached gateway appliance revealing a fingerprint, marking Volexity's UTA0533 attribution of the SonicWall SMA zero-days.

Threat Intelligence

Volexity Attributes SonicWall SMA Zero-Day Exploitation to Previously Undocumented UTA0533 Actor Since June 22

A second SonicWall SMA attribution lands — Volexity names UTA0533 alongside the Dark Reading INC Ransomware framing this weekend.

Flat white line-art of a practice dummy facing a shielded AI core, on a blue background — OpenAI GPT-Red red-teaming to harden GPT-5.6 Sol.

Artificial Intelligence (AI)

OpenAI Publishes "GPT-Red" Automated Red-Teaming Model to Harden GPT-5.6 Sol Against Prompt Injection

OpenAI's internal red-team model takes aim at prompt-injection at scale — a vendor-side AI-cybersecurity research review, and what defenders deploying frontier models should take from it.

Editorial illustration of a fake CAPTCHA checkbox tagged with a state emblem over a map of Ukraine, marking CERT-UA naming Sandworm subgroup UAC-0145.

Nation-State Cyber Threats

CERT-UA Names Sandworm Subgroup UAC-0145 Behind ClickFix CAPTCHA Campaign Against Ukrainian Devices

CERT-UA names UAC-0145 as the Sandworm sub-cluster behind the ClickFix CAPTCHA activity against Ukrainian devices - a GRU-affiliated crew, and defender awareness for Ukraine-adjacent teams this weekend.

Editorial science-poster illustration of AI security symbols — a neural-network brain, a shield, a keycard, a data pipeline, a watchful eye, and a hooded silhouette.

Cybersecurity 101

AI Security: The Complete Guide

A complete guide to AI security — what makes AI systems different, the main categories of AI attacks, defensive practices, and the emerging governance standards.

Editorial illustration of a game controller tipping coins from a crypto wallet beside handcuffs, marking the FBI arrest over a Steam-game malware campaign.

Policy & Government

FBI Arrests 21-Year-Old Zyaire Wilkins Over Steam-Game Malware Campaign Draining Crypto Wallets

A cryptocurrency-user targeting arrest via a novel Steam-games vector — law-enforcement coverage this weekend.

See all