The malware is configured to operate on systems associated with Israeli water treatment and desalination plants.
GPT‑5.4‑Cyber is a model fine-tuned for defenders, lowering boundaries for legitimate cybersecurity work.
A researcher has disclosed the details of the AI attack method he has named ‘Comment and Control’.
Securing national resilience now depends on faster, deeper partnerships with the private sector.
Beyond monitoring and compliance, visibility acts as a powerful deterrent, shaping user behavior, improving collaboration, and enabling more accurate, data-driven security decisions.
The cybersecurity response to AI-enabled nation-state threats cannot be incremental. It must be architectural.
Data integrity shouldn’t be seen only through the prism of a technical concern but also as a leadership issue.
Agentic AI platforms are shifting from passive recommendation tools to autonomous action-takers with real system access,
With “Shadow AI” usage becoming prevalent in organizations, learn how to balance the need for rapid experimentation with the rigorous controls required for enterprise-grade deployment.
RegisterDelve into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization.
Register
SecurityWeek’s 2026 Threat Detection & IR Summit will bring together security practitioners from around the world to share war stories on breaches, APT attacks and more.
[May 20, 2026 | Virtual]
SecurityWeek’s CISO Forum 2026 Mid-Year Review is a virtual roundtable to evaluate the year’s most pressing challenges and share critical updates shaping the 2026 security landscape.
[June 10, 2026 | Virtual]
SecurityWeek’s 2026 Cloud Security Summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments.
[July 15, 2026 | Virtual]
SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[August 19, 2026 | Virtual]
-
Other noteworthy stories that might have slipped under the radar: ShinyHunters targets Rockstar Games, ShowDoc vulnerability exploited in the wild, and EPA to boost… (April 17, 2026)
-
The remote code execution vulnerability tracked as CVE-2026-34197 came to light in early April. (April 17, 2026)
-
An indirect prompt injection could be chained with a sandbox bypass and Cursor’s remote tunnel feature for shell access to machines. (April 17, 2026)
-
The flaw allows low-privileged users to upload files to a temporary directory to achieve remote code execution. (April 16, 2026)
-
Kamerin Stokes sold stolen credentials through an online marketplace even after pleading guilty to his role in the DraftKings attack. (April 17, 2026)
-
Kejia Wang and Zhenxing Wang compromised the identities of dozens of US persons to help land jobs at over 100 companies. (April 17, 2026)
-
Authorities in 21 countries participated in a coordinated action against DDoS-for-hire services. (April 17, 2026)
-
The sprawling cybercrime operation abuses major providers to prevent takedowns and distance itself from sanctions. (April 14, 2026)
