• CISA review makes the case for eliminating vulnerability classes
• Attackers Steal METR API Key and Burn $600,000 in AI Credits
• Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks
• 65% of Enterprises Have Seen AI Agents Act Out of Scope
• White House Launches Pilot Program in Texas to Protect Water Infrastructure
• Fake Claude Opus 5 app delivers malware and wipes its own tracks
• Financial Stability Board Sounds the Alarm Over Frontier AI Risks
• Berlin refuses to be blackmailed after network breach
• Healthcare Giant McKesson Investigates Data Breach Incident
• Askeal, the AI cybersecurity assistant that gives verifiable, expert-backed answers
• Bot detection arrives in CrowdSec 1.8.0, along with two DoS fixes
• NIS2 compliance: Fixing IAM and access control before the 2026 audit
• What your vendor says about PQC tells you if they are ready
• Fake Voicemail SVG Attachments Fuel Large-Scale Phishing Campaign
• Window to Tackle Surge in AI-Enabled Cyber Attacks Narrowing, Tech Giants Warn
• Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations
• Manchester Airports Group Hit by Cyber Incident
• Chinese Hacker Group QTFY Uses Custom-Built Platforms to Target US Infrastructure, FBI Warns
• CISA Warns of Six Exploited Flaws in Microsoft, Linux, Red Hat and Citrix Products
• Boston Scientific Reveals Global Disruption After Cyber Incident
• OpenAI: Hugging Face Incident a “Warning Shot” to the World
• Tortoiseshell Expands Malware Toolset With New Backdoor, SSH Tunnel
• Interpol Operation Jackal IV Identifies 263 Cybercrime Suspects

For years, the security industry has treated vulnerabilities as an endless queue of individual fixes. A recent CISA review argues that this is precisely why attackers keep winning. The solution to this problem, they believe, is eliminating entire categories of weaknesses at the source. “By reducing these root causes during software development, providers can help prevent vulnerabilities that are more likely to be targeted by threat actors,” the US cybersecurity agency says. But that’s easier …