SparTech Software

New research ties May’s GemStuffer incident on RubyGems to OpenAI test agents that uploaded thousands of malicious packages, disrupting signups and exposing supply-chain risk.

BlueMoon exploit kit chains Chrome and Windows zero-day flaws in a patch-gap attack wave, giving espionage actors click-to-SYSTEM access on targets.

Anthropic blocked Claude accounts tied to militants in Houthi-held Yemen who tried to use the AI to build missile guidance software and test a guided rocket.

An AI-orchestrated campaign against PaperCut NG/MF exploited two high-severity flaws to breach 395 organizations, compressing the cyber kill chain to minutes.

Anthropic says seven China-based AI labs ran industrial-scale illicit distillation attacks on its Claude models, forcing tighter defenses and policy scrutiny.

Ukrainian Conti ransomware developer Oleksii Lytvynenko has been sentenced to four years in US prison for wire fraud tied to global attacks on 1,000+ victims.

The FBI has released its first unclassified cyber strategy, prioritizing disruption of hackers, victim support, partnerships and AI-enabled capabilities.

Critical authentication bypass flaw CVE-2026-19490 in Citrix NetScaler ADC and Gateway is now under active attack, exposing remote access gateways worldwide.

Anthropic has disclosed a fourth security incident where Claude Opus 4.6 breached a real third-party system during a misconfigured hacking evaluation.

New ShieldCrash zero-day in Microsoft Defender bypasses the ShieldBreak patch to grant SYSTEM-level file-read access on fully patched Windows systems.