News

New research from Forescout's Vedere Labs has demonstrated how artificial intelligence could begin to lower the barriers to developing sophisticated cyberattacks against industrial systems. The research set out to answer a potentially important question for operational technology (OT) security: can AI successfully adapt a remote code execution (RCE) exploit developed for one programmable logic controller (PLC) so that it works against another? Researchers tested this by using AI to help port an existing RCE exploit...

Exabeam, the leader in Behaviour Intelligence for the agentic enterprise, today announced significant global channel momentum just over one year after launching the Exabeam APEX Partner Program. The results include stronger partner-driven growth worldwide and year-over-year gains in partner satisfaction, advocacy, and confidence in the Exabeam portfolio, according to the 2026 Voice of the Partner survey. Together, these results demonstrate measurable progress against the channel-first strategy Exabeam introduced with the Exabeam APEX Partner Program in...

Cisco’s State of AI Security report found that 83% of surveyed organisations plan to deploy agentic AI into their business operations, but only 29% believe they can do so securely, a gap that many cybersecurity teams are already feeling firsthand. The lack of cyber readiness is understandable, because AI agents generate a new kind of network traffic that most existing tools were never built to handle. Networks are being flooded with natural language prompts, business...

Manchester Airports Group (MAG) has suffered a major cyberattack in which data belonging to around 8.7 million customers was reportedly accessed, raising concerns about how the stolen information could now be exploited by cybercriminals. The incident affected customer information associated with Manchester Airport, London Stansted and East Midlands Airport. Data connected to car park, lounge and Fast Track bookings, as well as airport Wi-Fi registrations, was reportedly accessed. Email addresses, phone numbers, postcodes and vehicle...

Around 700 AI agents created by OpenAI participated in the breach of Hugging Face during a cybersecurity evaluation, according to an independent investigation that has revealed the scale of the incident. METR and Redwood Research published the findings after being brought in to independently investigate the July incident and examine the agents' behaviour, reasoning, and collaboration. The investigation was released separately from OpenAI's own technical report. What initially appeared to involve individual agents was significantly...

AI agents are already finding their way into the working methods of some of the highest-performing cybersecurity teams, according to new three-year benchmark data from Hack The Box (HTB). The 2026 Global Cyber Skills Benchmark found that 68% of the top 25 teams included an AI agent, despite AI agents accounting for just 2.7% of all registered accounts. The findings provide an early indication of how AI is being incorporated into practical cybersecurity work alongside...

A cyberattack reportedly linked to Iran forced a small UK energy generator offline for four days, raising fresh concerns about the security of the country's critical infrastructure and smaller operators that may sit outside existing regulatory thresholds. The UK government has confirmed that a small-scale generator was affected by a cyber incident in July. It stressed that the facility represented a tiny proportion of overall generation capacity and that the wider UK energy system was...

A company can spend years building a careful process for approving software. Then an employee installs an AI browser extension, clicks through an OAuth consent screen, and gives it access to their inbox, files, or calendar in a few minutes. New research from Reco suggests this is happening at a considerable scale. The company, which helps to secure AI agents for enterprises, found that 79% of SaaS applications across its telemetry are authorised, suggesting that...

The Premier League has introduced mandatory cybersecurity requirements for its clubs for the first time, with non-compliant clubs facing fines of up to £100,000. The rules, which apply from the start of the 2026-27 season, mark a shift away from the league's previous non-prescriptive security guidance towards a formal framework with fixed deadlines and evidence-based assessment. Enforcement will sit within the Premier League's existing disciplinary framework rather than a standalone sanctions regime. The board can...

A threat actor is claiming to have stolen millions of employee records from the Microsoft Azure environments of several major companies, raising concerns that the information could be used to launch targeted phishing, impersonation, and privilege escalation attacks. The threat actor, known as "TheHatman," has reportedly posted internal employee directories belonging to companies including McDonald's, Vodafone, Kyndryl, Tata Consultancy Services (TCS), HCL Technologies, InterContinental Hotels Group, Gap, Hexaware Technologies, and Wyndham Hotels for sale on...