The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure. […]
Global Security News
Live Video Moderation Challenges Traditional Content Safety Systems
Learn how live video moderation handles frame sampling, end-to-end encryption, behavioural signals, privacy and content retention in video…
Global Security News
SpaceX Reports Profit as Revenue Doubles
Earnings report shows continued surge in capital spending on artificial intelligence and developing new technology.
Global Security News
Gemini on Android Auto can access my photos, emails, and calendar now – why I’m OK with that (mostly)
The latest Android Auto update lets the AI assistant tap into your Google services for context-based responses.
Global Security News
Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme
A 40-year-old Nigerian national was sentenced to eight years in prison for running a years-long hacking, tax fraud and investment scheme, the Justice Department said Monday. Chukwuemeka Victor Amachukwu enriched himself from 2019 to 2023 by hacking into U.S.-based tax preparation businesses, filing false tax returns with federal and state authorities using identities stolen from…
Global Security News
Zeabur shutting down after second security breach in two months
Development platform Zeabur has disclosed details of a cybersecurity incident in which an attacker used leaked internal credentials stored in plaintext to compromise its infrastructure and steal over 3.2 million environment variable records and information for 321,810 accounts. […]
Global Security News
Anthropic S-1 Shows Red-Hot Growth, Risks and Massive Computing Costs
In a new draft prospectus viewed by the Journal, the AI giant disclosed an $80.7 billion net loss for the first half of 2026 and a long list of risk factors.
Global Security News
Ex-OpenAI Engineer Held Over Secret Recorder, Saudi Ties
A judge ordered that Abdulrahman Alfozan be detained after he was arrested earlier this month for allegedly bugging an OpenAI conference room.
Global Security News
Meta Policy Chief Joel Kaplan to Leave Company
Kaplan’s departure comes as Meta President Dina Powell McCormick, who served in the first Trump administration, has risen in stature at the tech firm.
Breach, Global Security News
From firefighters to building inspectors: rethinking the cyber market
Cyber has a really odd relationship with prevention. We like to talk about how important it is, but when you look at what we’ve historically been investing in, you see that we spend much more time and money on detecting, investigating, and responding to breaches than we do on preventing them. We buy better alarms,…
Artificial Intelligence, Data Security, Top Stories
The AI Model Supply Chain Crisis: A 2026 Security Audit Guide
AI model supply chains have become a primary target for malicious attacks, such as dataset poisoning and model weight manipulation. Because this ecosystem lacks standardized security frameworks, compliance standards, and vulnerability registries, organizations face severe operational and financial risks from unverified third-party models and untrusted datasets. To mitigate these risks, organizations must implement structured frameworks…
Europe, Global Security News
Nvidia Adds Cloud and Integration Partners to EBU Sovereign AI Push
European public service broadcasters’ adoption of AI is creating potential work for channel partners that can integrate new tools while preserving control over sensitive editorial data. At an event in Berlin on Oct. 19, NVIDIA announced an expanded collaboration with the European Broadcasting Union (EBU) on a sovereign AI framework for European public service broadcasters.…
Global Security News
OpenAI says GPT-6.1 Sol is dramatically better at migrating legacy code
OpenAI confirmed that its newer models are much better at writing and migrating software in older programming languages. […]
Breach, Global Security News
Nikkei data breach affected over 1.8 million records
Nikkei disclosed a data breach affecting over 1.8 million records after hackers used stolen credentials to access a cloud service for system development. Japanese media company Nikkei has disclosed a data breach affecting more than 1.8 million records. The company, known for its financial news publications, including The Nikkei and the Financial Times, said attackers…
Europe, Global Security News, Threats
Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign
Russian government-connected hackers compromised two defense firms and a law enforcement agency in North Atlantic Treaty Organization countries as part of an espionage campaign, Symantec researchers said in a blog post Tuesday. The infamous group behind hacks of the Democratic National Committee during the 2016 election cycle was behind the attacks that Symantec identified in…
Global Security News
BAE Systems Cyber Incident Disrupts US Bankruptcy Notices
A cyber incident affecting BAE Systems halted US bankruptcy notices, forcing federal courts to change service procedures and…
Global Security News
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google’s Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate for any website that a browser would accept. A researcher reported the
Global Security News
Australia’s Smart Home Market Soars on Battery Boom
Market set to top $11 billion in 2026. Australia’s smart home market is forecast to exceed $11 billion in 2026, after more than doubling to $7.7 billion in 2025, as government…
Global Security News
Chrome flags malicious commands that scammers pass off as fixes
Google is updating Chrome’s Enhanced Protection mode to detect scam websites and warn users when a page tricks them into copying a malicious command. The company introduced Enhanced Protection for Chrome’s Safe Browsing feature in 2020 to address online scams and social engineering. Google says further updates have made its users ten times safer from…
Global Security News
AI didn’t create your IT data problem, it just exposed it
When an AI pilot in IT operations underdelivers, the first instinct is to question the technology. Was the model wrong? Did the tool overpromise? Did the team pick the wrong use case? Those are fair questions. But in many organizations, the answer sits somewhere less glamorous: in a configuration management database that hasn’t been reconciled…
Breach, Global Security News, Threats
ConnectWise customers hit by supply-chain attack linked to compromised API secret
A portion of ConnectWise’s customers have been adrift for days, and hundreds are compromised, as the company’s efforts to restore its Cloud Backup service remain underway with no confirmed timeline for when customers can regain access. The company temporarily shut down multiple services Saturday after a threat actor gained access to a highly sensitive credential…
Breach, Global Security News
How to Check if Your Personal Information Was Exposed in a Data Breach
Learn how to check if your personal information was exposed in a data breach, find leaked passwords, and protect yourself from identity theft.
Global Security News
Malicious Rank Math PRO Update Could Leave WordPress Sites Backdoored
Malicious Rank Math PRO plugin downloads may leave WordPress sites backdoored even after updating. Learn who was affected and what administrators should do next.
Global Security News
Compromised ETS Login Exposes Millions of California Students’ Records
A compromised ETS login exposed millions of California students’ records. Learn what data was affected and what families and security teams should do next.
Global Security News
Why Nvidia Needs CoreWeave
Plus, Musk’s donation pledge, and consumers are still wary of giving agents their credit cards.
Global Security News
Microsoft’s New Security Tools Can Restrict AI Agents That Go Off Track
Microsoft has unveiled security controls to monitor risky AI agents and restrict their access. Here’s what the tools could mean for enterprise IT teams and workers
Europe, Global Security News
Google Cloud Outage in London Disrupts Revolut Banking Services
Google Cloud’s London outage disrupted Revolut payments and ATM withdrawals, while ING Germany reported online banking issues. Multiple Google Cloud services went offline in the London region this morning, according to Google’s status page, and the disruption didn’t stay contained to infrastructure dashboards. BREAKING: Revolut’s app and cards have stopped working across Europe. Google Cloud’s…
Global Security News
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially
Global Security News
Close Identity Gaps in Software Development Before Unleashing AI
Artificial Intelligence is complicating security in the software development lifecycle, but a Dark Reading roundtable found collaboration, better identity visibility, and reduced testing costs offer CISOs a way ahead.
Global Security News
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
Palo Alto Networks has disclosed that it’s continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections. It was patched by Palo Alto…
Global Security News, Threats
There’s only so much code: the rise in vulnerability numbers
Frontier AI models (like Mythos) are rapidly mining decades of technical debt across ubiquitous legacy libraries, driving monthly Microsoft Patch Tuesday vulnerability advisories up more than tenfold (reaching 1,415 this month). This volume is overwhelming open-source maintainers and putting pressure on the traditional 90-day coordinated disclosure model. Despite a 105% year-over-year surge in CVEs, Known…
Global Security News, Threats
DOJ escalates fight for election supremacy with California raids
A series of federal raids and arrests of voters in California has escalated the Trump administration’s ongoing efforts to take administrative control of U.S. elections. The arrests, paired with comments from top officials at the departments of Justice and Homeland Security, also make it clear that the federal government is willing to act on its…
Global Security News
AOMEI Backupper servers hijacked for minutes at a time to push backdoor
An unknown number of AOMEI Backupper users had their computers infected with a backdoor through an unusually stealthy supply chain attack, security researchers discovered. Between April and July 2026, attackers repeatedly altered configuration files on AOMEI’s own servers for just five to ten minutes at a time, then restored the originals. The tampered files belong…
Global Security News
Meta’s 1-Gigawatt AI Supercluster Reveals New Challenges for Data Center Partners
Meta is turning a former conventional data center operation into one of its largest AI computing deployments, with plans to scale its Prometheus supercluster toward roughly 1 million GPUs. Originally a conventional facility routing routine web traffic, the campus now harnesses hundreds of thousands of Nvidia GPUs acting as a unified compute engine. Meta plans…
Global Security News
Head of AI Security Roles Surge in Large Organizations
A new IANS report has found that despite the growth of the head of AI security role, accountability for AI governance in firms remains unsettled
Global Security News
Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree
A Chinese-speaking attacker has compromised hundreds of websites across the globe, looting from big fish like John Deere, SharkNinja, and engine manufacturer Cummins.
Global Security News
A Vulnerability in BeyondTrust Remote Support Could Allow for Arbitrary Upload of Files
A vulnerability has been discovered in BeyondTrust Remote Support that could allow for arbitrary upload of files. BeyondTrust Remote Support is an enterprise secure remote access solution that enables IT teams to securely access and troubleshoot remote endpoints. Successful exploitation of this vulnerability could allow a remote attacker to perform file operations on an affected…
Global Security News
Latest Windows update disables key security setting – but there’s a workaround
A bug in Microsoft’s October Windows update prevents you from turning on a security setting that blocks malicious or suspicious apps. A Registry hack fixes the glitch.
Global Security News
DHS bans DeepSeek products across US federal civilian agencies
The U.S. Department of Homeland Security (DHS) is ordering federal civilian agencies to stop using DeepSeek products and remove them from government systems. […]
Asia Pacific, Global Security News, Threats
The Risk of AI-Powered Antidetect Browsers in Online Fraud and Influence Operations
Key Findings Antidetect browsers obscure the digital identity of their users, enabling a single operator to silently manage thousands of isolated accounts across multiple platforms (including Facebook, TikTok, Instagram, and YouTube), while evading detection systems that look for scams and coordinated inauthentic behavior. Threat actors abuse these platforms, taking over accounts and using them for…
Global Security News
Incomplete security patches show hackers where to look next
Security patches are turning into roadmaps for attackers, with a growing share of fixes later found incomplete or open to bypass. Oren Yomtov, a security researcher at Terra Security, began tracking broken fixes after the team kept running into them in its own work over the past year. “A fix would ship, a bypass would…
Global Security News
Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites
A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and a security researcher watched it happen because the operators left their control panels open on the internet. The agents tried more than 1,200 sites and reached websites belonging to more than 100 companies, including farm-equipment…
Global Security News
Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk
OpenCode silently patched a critical RCE flaw, leaving vulnerable users unaware of the security risk, researchers at Pillar Security warned
Global Security News
CJIS v6.1 Compliance: 5 Practical Priorities for Agencies
CJIS v6.1 requires agencies to maintain strong authentication, account security, and audit controls while demonstrating ongoing compliance. Specops outlines five practical priorities covering MFA, account management, passwords, logging, and audit readiness. […]
Global Security News
Build Your Payment Security Expertise with PCI SSC eLearning
Keeping pace with the evolving payment security landscape requires current knowledge and practical expertise—but finding time for training can be challenging. PCI Security Standards Council (PCI SSC) eLearning gives payment security professionals the flexibility to build their skills and advance their knowledge wherever and whenever it works best for them.
Global Security News
Abstract links automated response actions directly to SIEM detection rules
Abstract has announced new AI SOC capabilities in its agentic SIEM: investigation, hunt, and triage powered by a combination of Abstract’s own trained and tuned models and frontier foundation models, and SOAR response capabilities with actions assigned directly to detection rules. The capabilities are built into the platform that already collects, routes, and detects on…
Global Security News
AI’s Transformational Value Remains Elusive for Most Companies
Plus, a U.A.E.-based startup expands into Silicon Valley.
Global Security News
Revenium Launches Partner Program for AI Cost Management
Revenium has launched its first partner program, recruiting Insight, Flexera, WWT, and other technology companies to help MSPs, systems integrators, and resellers build services around AI cost management, spending visibility, and return on investment. Revenium targets growing demand for AI cost management The program is designed to help turn AI cost control into a service…
Global Security News
Hacker gets 8 years for stealing $3.3 million from taxpayers
A Nigerian national was sentenced to eight years in prison for his involvement in a series of spearphishing attacks targeting US tax preparation businesses since 2019. […]
Global Security News, Threats
ThreatModeler NexusAI tracks architectural changes and proposes security updates
ThreatModeler has announced the launch of NexusAI, its new AI-powered threat modeling partner within the ThreatModeler Nexus platform. NexusAI helps enterprises automate more of the work involved in creating, analyzing, and maintaining threat models, enabling security teams to scale their impact without scaling manual effort. As AI accelerates application development, security teams face growing pressure…
Global Security News
IDENTOS PolicyArc gives AI agents task-specific, time-limited access
IDENTOS has announced that PolicyArc is now generally available. The new solution gives security, platform, and compliance teams a single place to define, enforce, and audit access policy across their applications. PolicyArc is built to solve how to safely extend access not just to people and services but to the AI agents now acting on…
Breach, Europe, Global Security News, Threats
NIS2 Explained: Requirements, Deadlines, and LogTotal Use Cases Across Europe
What Is NIS2? NIS2 is Directive (EU) 2022/2555, the EU’s baseline cybersecurity law for organizations that keep energy grids, water systems, hospitals, logistics chains, food supply and digital infrastructure running. It replaced the original NIS Directive (EU) 2016/1148 and turned a loosely applied, sector-by-sector regime into a single framework with common obligations, common reporting timelines…
Global Security News
Only 12% of MSPs Report Measurable AI Gains, Nerdio Finds
Nerdio’s recently released report shows that while MSPs are embracing AI, many are struggling to translate adoption into measurable business results. The 2026 State of the MSP Business Report is based on a survey of over 150 MSP decision-makers that manage Microsoft 365 (M365) and Azure across their customer bases. MSP AI adoption outpaces measurable…
Global Security News
Pegasus Spyware Infection Confirmed on Serbian University Rector’s iPhone Days Before Election
The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia’s student protest movement, was infected with NSO Group’s Pegasus spyware in 2026, the Citizen Lab said on October 19. The finding came six days before Serbia’s October 25 snap parliamentary election. The infection used a zero-click exploit, meaning Đokić did…
Global Security News
AppGate gives OT supervisors live monitoring and session termination controls
AppGate has expanded its zero trust offering for operational technology (OT) with Session Governance capabilities that help critical infrastructure operators reduce third-party access risk, simplify compliance audits and protect operational uptime. The expansion builds on the ZTNA for OT offering AppGate introduced in March 2026. The initial release of AppGate ZTNA for OT controlled who…
Global Security News
Google may add your number to all your accounts: How to stop it
As Android Central reports, users have received unexpected emails telling them their phone number has been verified for secondary Google accounts. Like me and many others, you may have one Google account for everyday use, another for work, and a third for things you would rather keep separate. But if you’re using an Android phone,…
Breach, Global Security News, Threats
CVE-2026-110936: Siemens Software Center Flaw Exploited in ClickFix Attacks
Siemens has confirmed active exploitation of a high-severity DLL side-loading vulnerability in Siemens Software Center, a desktop application used to download, install, activate, and update Siemens software. Tracked as CVE-2026-110936 and rated 8.4 under CVSS v4.0, the flaw stems from an uncontrolled DLL search path and can lead to arbitrary code execution with the privileges…
Global Security News
Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign
Siemens has confirmed the active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center, the company’s tool for downloading, installing and managing its software. Siemens first published its security advisory on 15 October 2026, giving the flaw reported by Jose Oregon from Huntress Labs a CVSS v4.0 score of 8.4. On 17 October,…
Global Security News
Scammers Abuse Frame.io Notifications to Steal Microsoft 365 Credentials
Ocean Security found a phishing campaign, dubbed Phantom Preview, that abused legitimate Frame.io notifications and hidden PDF links…
Global Security News
Quarantined, but still on your calendar: The explosion of invite-based attacks
There has been a sharp escalation in attacks that use malicious calendar invites to reach targets, email security providers Check Point and Sublime Security have warned. Sublime recorded a 1,216% month-over-month increase in August 2026, and the first half of September alone surpassed the whole of August by 1,426%. Check Point’s numbers tell a similar…
Global Security News
Windows Server 2025 gets support for quick machine recovery
Microsoft announced that IT administrators can now use quick machine recovery on Windows Server 2025 after installing the October 2026 security update. […]
Global Security News
AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace, Splunk Finds
Rapid adoption of agentic AI comes with potential business benefits. But if done incorrectly it also carries risks around AI activity management and security
Global Security News
Caylent CEO: AI Is Changing the IT Services Business
The traditional IT services business model is facing a fundamental shift as artificial intelligence changes how technology partners deliver projects, develop talent, and generate value for customers. For Caylent CEO Valerie Henderson, navigating that transformation requires more than introducing AI tools or launching new consulting offerings. It means reconsidering how a services business operates from…
Global Security News
Samsung Black Friday 2026: Galaxy Offers to Look Out For
Black Friday 2026 is coming! Explore Samsung Galaxy S25 Ultra, S24, foldable phones, tablets and watches, plus refurbished…
Global Security News
iPhone 17 vs iPhone 18 Pro Security: Is the Newer iPhone Actually Safer?
Compare iPhone 17 vs. iPhone 18 Pro security, including spyware protection, privacy features, and whether upgrading actually makes your iPhone safer.
Europe, Global Security News
WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators
WhatsApp’s help pages carried hidden instructions for its support chatbot that told it not to recommend a data protection authority or regulator to users who could no longer delete their accounts, even though WhatsApp’s own privacy policy for Europe tells users they can complain to one. The text sat in the pages’ code, never shown…
Global Security News
What Security Teams Can Do To Tame Wild Code
A sales manager builds an AI-assisted workflow to route leads. It connects to customer records, summarizes inbound requests, and posts updates to a shared channel. The workflow saves time, reduces manual work, and soon becomes part of the team’s daily routine. Across the same organization, employees are building useful apps, agents, and automations faster than…
Global Security News
Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns
Go 1.27.3 and Go 1.26.10, released on October 20, make Go’s certificate verifier reject any certificate chain that passes through one of eight intermediate certificate authority keys. Programs built on the new release will refuse connections to sites and services whose certificates were issued under those keys. The Go team says the keys belong to one…
Global Security News
Nippon Columbia Malware Incident: 8.7 Million Records at Risk
A Nippon Columbia malware incident put 8.7 million Daiichi Kosho records at risk. Learn what happened and what customers and security teams should know.
Global Security News
OVHcloud CLI releases backdoored on GitHub to steal developer secrets
French cloud and hosting provider OVHcloud is warning users that attackers compromised its open-source command-line interface (CLI) tool to distribute information-stealing malware. […]
Global Security News
Hackers Use Critical Collabora Flaw to Compromise Nextcloud Servers
Hackers are exploiting CVE-2026-110447 to compromise Nextcloud servers with web shells. See affected systems, warning signs, and mitigation steps.
Europe, Global Security News
Ahold Delhaize: Cyberattack affects services across US and Europe
Ahold Delhaize, one of the world’s largest food retail chains, confirmed that last week’s cyberattack disrupted services at stores across Europe and the United States. […]
Global Security News, Threats
Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader
The Russia-linked state-sponsored threat actor tracked as APT28 (aka BlueDelta, Fancy Bear, and Forest Blizzard) has been attributed to attacks targeting two member states of the North Atlantic Treaty Organization (NATO). The Symantec Threat Hunter Team, which is tracking the activity cluster under the moniker Swallowtail, involved the use of a backdoor called HOOKEDGE and…
Global Security News
TechPulse puts ZDNET and 5 other tech sites in one feed – for free
Choose which CNET Group publications appear in your feed, then catch up on news, reviews, and videos – without an algorithm deciding what you see.
Global Security News
The Googlebook work test: Can an Android laptop get the job done?
In a weird way, I’ve been thinking about the idea of a Googlebook for well over a decade now — despite the fact that such a product has only officially existed for a matter of months. I’m relatively unusual in the world of tech journalism, y’see, in that I’ve been both writing about Android and…
Global Security News
ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident
ConnectWise on Monday said it has taken remediation measures, including strengthening administrative-access protections and resetting accounts and replacing application credentials, as it continues to respond to a security incident that led to unauthorized access to application identities associated with Cloud Backup. The company said it has completed the following actions since it began
Breach, Global Security News
AfD Email Breach Exposes 421,000 Messages in Anonymous Online Archive
A data breach exposed AfD emails, while an anonymous site published AI summaries of 421,000 messages, raising questions about authenticity and privacy. Germany’s Alternative für Deutschland (AfD) confirmed on October 19 that its hosting provider was hacked in September and that mailboxes were copied. By the time the confirmation reached Bild, a website called hexane.cc…
Global Security News
Nearly 480,000 Phishing Emails Traced to Computer Hidden Behind Hotel Fridge
Japanese police arrested a Chinese couple accused of hiding a computer in a Kobe hotel to send phishing emails and using stolen credit card details for purchases.
Global Security News
US Bankruptcy Court Notices Disrupted by BAE Systems Cyber Incident
A cybersecurity incident affecting BAE Systems disrupted US bankruptcy court notices, highlighting vendor dependencies and the need for recovery planning.
Global Security News
Siemens Customers Targeted by ClickFix Attackers Exploiting DLL Side-Loading Flaw
Siemens identified the activity to be from the Romulus multi-platform ClickFix campaign, with Siemens Software Center users urged to apply an update
Global Security News, Threats
76% Faster Triage: How US SOCs Increase ROI Through Visibility and Automation
October marks Cybersecurity Awareness Month, a timely opportunity to look at how American organizations can strengthen their security operations. Among the biggest challenges SOC teams face is making sure they not only detect and investigate threats, but doing so quickly enough to make the right security decisions without overwhelming analysts or increasing operational costs. In…
Global Security News
Teradata expands AI data security with post-quantum protection and immutable backups
Teradata has announced new privacy, security, and resiliency capabilities designed to address one of the defining challenges of enterprise AI: how sensitive data is protected, who and what can access it, and whether it remains available and recoverable when something goes wrong. Teradata addresses all three through an integrated approach that reduces raw identity exposure,…
Global Security News
Extend Verify helps AI agents flag suspicious documents before acting
Extend has announced Extend Verify, a document fraud detection API that helps developers and AI agents assess the integrity of documents before using them to make decisions. Much of the work businesses want AI agents to perform begins with a document: A bank statement supports a lending decision An invoice initiates a payment Receipt substantiates…
Global Security News
Meta says it’s fixed Ray-Ban smart glasses’ unprompted eavesdropping
Meta says it has resolved an issue after some Ray-Ban Meta owners reported that their glasses recorded conversations without the “Hey Meta” wake phrase. Users reported finding recordings and transcripts of conversations they did not knowingly save. Recording without anyone realizing raises privacy concerns for both the wearer and the people around them. The complaints…
Breach, Global Security News
US Army is developing AI agents that could strike enemy networks and vanish without a trace
The US Army is looking for AI agents that can slip into an adversary’s network, find their target, copy themselves onto nearby tablets and computers, and then erase themselves before anyone notices. Over the past few months, AI agents with no instruction to attack anything have breached Hugging Face infrastructure and broken into Australian government…
Global Security News
Bill Gross’s AI Tool Could Supercharge the Number of Startups
Global Security News, Threats
Microsoft wants to limit AI agents’ permissions when they stray from the job
Microsoft’s Guardian Agents in Project Perception adapt as agent activity, risk, security context and organizational policy change. They help security teams understand why risk changed, investigate relevant evidence, recommend or apply containment measures and use what they learn to strengthen policies. People retain control over objectives and consequential decisions. Microsoft announced the Guardian Agents and…
Global Security News
Revolut outage disrupts online banking operations worldwide
Fintech company Revolut is working to resolve a massive outage that disrupted most of its services worldwide earlier today. […]
Global Security News
Guide to Compliance and Cybersecurity in Healthcare Software Development
Compare five healthcare software development firms and learn how to build secure, compliant products under HIPAA, GDPR and FDA requirements.
Global Security News
Man seeking love travels 2,000 km to meet an AI-generated woman
A 49-year-old bricklayer sold his belongings before traveling 2,000 km by bus from his home in Brazil to meet “Jéssica,” an online influencer he had fallen for. Yet despite having a social media account with more than 300,000 followers, she never existed. Edimar Rocha Martins lives in Imperatriz, a city in northeastern Brazil. He says…
Global Security News
Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death
A 28-year-old Russian man has been arrested by German police, suspected of being a key member of the Qilin ransomware gang. Detectives have linked the man to the attack against blood-testing firm Synnovis, that disrupted London hospitals, and resulted in the death of a patient. Read more in my article on the Hot for Security…
Global Security News
When defrost becomes sabotage: 3 OT lessons from France’s supermarket attack
On the night of 11 October, someone remotely put the cold cases of several hundred French supermarkets into defrost. At Intermarché and Netto stores, fridges and freezers warmed to around 50°C and stayed there for about six hours, according to Les Mousquetaires, which expects losses in the tens of millions of euros. By morning, staff…
Global Security News
Cybersecurity Is Only One Part of Financial Technology Resilience
In this post, I will show you that cybersecurity is only one part of financial technology resilience. Financial institutions have strong reasons to invest heavily in cybersecurity. They manage sensitive personal data, financial information, transactions, and systems that are attractive targets for criminals. Yet preventing cyberattacks is only one part of keeping financial technology dependable.…
Global Security News, Threats
OT systems complicate quantum-resistant data protection
Quantum-resistant cryptography presents security leaders with various challenges, but CISOs in industries dependent on IoT and operational technology (OT) devices may face a particularly difficult journey to quantum readiness, especially if sensitive information that must remain confidential for years passes through those devices. A recent report from cybersecurity firm Forescout highlights these challenges in the…
Global Security News
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware
An attacker used a contributor’s GitHub account to replace the download archives on five existing releases of OVHcloud’s command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets stored on the disk of any machine that runs it, the cloud provider says. They…
Global Security News, Threats
Microsoft Treats AI Agents as Insider Threats in New Security Framework
Microsoft urges organizations to secure AI Agents as insider threats, using dynamic permissions, continuous risk monitoring and automated containment. Microsoft published a detailed blog post explaining how organizations should secure AI agents. Microsoft sees them as a growing insider threat, not just a possible risk in the future. AI agents are not dangerous by nature,…
Global Security News
Microsoft 365 Calendar Phishing Targets 40,000 Organizations
Check Point detected more than 302,000 unique calendar-phishing emails targeting over 40,000 organizations, exposing risks in Microsoft 365 meeting workflows.
Global Security News
LogicMonitor appoints Garry Gray as vice president for Australia and New Zealand
LogicMonitor, has appointed Garry Gray as vice president for Australia and New Zealand ANZ to lead the company’s next phase of growth across the region.
Global Security News
ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks. The high-severity vulnerability, tracked as CVE-2026-110936 (CVSS v4 score: 8.4), could allow an attacker to place a specially-crafted DLL in a directory the application searches, resulting in execution of malicious code with the same privileges…
Global Security News
Mastercard helps banks assess stablecoin risks before funds move
Mastercard has announced Stablecoin Security, a new risk intelligence solution, with Borderless.xyz and Keyrails as initial partners. As stablecoins play a growing role in cross-border and business-to-business payments, financial institutions need a clearer view of risk across increasingly complex payment flows. The solution builds on Mastercard’s existing capabilities and helps financial institutions identify fraud, scams,…