Anthropic’s models kept working around the rules on the live internet. The company published the cases. Anthropic released a report on unintended actions its Claude models took during evaluations and internal use. The cases involved real websites and real organizations outside the company. Anthropic says the impact was minimal, and it published them anyway. The…

Read more →

Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania in connection with alleged extortion activity that multiple reports have linked to the FBI’s ongoing crackdown on the ShinyHunters hacking group. […]

Read more →

Silent Ransom Group allegedly extorted $207 million from 27 law firms in six months using phone calls and social engineering, not encryption. Silent Ransom Group doesn’t rely on encryption. No malware payload, no locked files, just phone calls and social engineering aimed almost entirely at law firms, and apparently it works extraordinarily well. A new…

Read more →

The cyberattacks that shook the South Korean financial sector earlier this month were launched by a Chinese hacker using the ARTEX AI penetration testing suite and Claude agents. […]

Read more →

Federal authorities arrested a Canadian cybersecurity executive Thursday in Pennsylvania on charges of conspiracy of extortion, according to federal court records posted Friday. Edward Dubrovsky, 54, is a former chief operating officer and founder of CYPFER, a firm that helps organizations negotiate with ransomware operators. He is charged with conspiring to threaten the confidentiality of…

Read more →

Traditional attack surface management helps organizations discover exposed assets, but visibility alone is not enough to address threats. Criminal IP introduces AITEM, an AI-powered approach that connects exposure discovery with investigation, risk prioritization, and response. […]

Read more →

Mental-health experts offered advice on how the popular chatbot could ask better questions and distinguish among crises and other conditions.

Read more →

FBI arrests Cypfer co-founder Edward Dubrovsky, now associated with CyberSteward, in the ShinyHunters investigation into the FBI jobs…

Read more →

In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party products now embed AI. About 282 of them sit behind single sign-on. The other thousand are invisible to identity infrastructure by default, not because anyone hid them, but because an identity stack can only govern what authenticates through it, and most…

Read more →

A desert trial exposed equipment limitations and institutional hurdles in the Army’s push to modernize and keep pace with an AI-savvy adversary.

Read more →

Anthropic on Friday said it’s cutting off live internet access for all its internal evaluations following the discovery of new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior and targeted real websites. The AI company said it identified four broad categories of unintended model actions during evaluations and internal use of Claude…

Read more →

The Traffic Light Protocol (TLP)[1], which is now in its second incarnation, is a wonderful standard that enables one to easily communicate whether information may be shared further (and if so, how far). That being said, I’ve noticed a somewhat unfortunate trend in a number of organizations that try to fit TLP into a niche…

Read more →

The brand just announced a smart lock with a manual ‘power dial’ that charges the device in case it dies.

Read more →

Empire Market co-creator Raheim Hamilton was sentenced to 40 years in prison for running a dark web marketplace linked to $430 million in illegal trades. The case against Empire Market shows how a dark web marketplace can become a major criminal business, bringing together drug trafficking, stolen credentials, personal data and hacking tools. “A Virginia…

Read more →

Bitter rivals are forming alliances and executives are having to personally intervene over the scramble for resources to fuel the AI boom.

Read more →

Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSecurity. The New York Times reported today that the FBI has arrested…

Read more →

Key Takeaways: – Take control of the registrar account and lock the domain before auditing individual records. – Verify that nameserver delegation matches your active DNS host…

Read more →

The attack on the British retailer shows that compromising a single identity can lead to much deeper penetration of the corporate network.

Read more →

Hackers are abusing legitimate Bing search-result redirects as click URLs in Google search ads to direct users to fake Claude installers that deliver ClickFix attacks. […]

Read more →

Most patients and families assume that if a hospital’s AI predicted a downturn hours before it happened, the prediction is sitting somewhere in the chart, timestamped and easy…

Read more →

Parallels is expanding its channel partner programs with a new Parallels Desktop Partner Program and a service-focused path within its Workspaces Partner Program, giving MSPs, resellers, and cloud providers new ways to qualify for incentives and support based on their business models. Parallels Desktop program introduces Authorized and Premier tiers The new partner program supports…

Read more →

Video demand across Australian marketing teams keeps climbing. Budgets, largely, do not. Wistia’s 2026 State of Video found companies producing more video than the year before,…

Read more →

Enterprise IT teams are increasingly using artificial intelligence to manage Apple devices, but new research suggests their ability to recover from configuration mistakes is failing to keep pace with AI adoption. A new report from device management provider Fleet found that 86% of surveyed Mac administrators allow AI-generated scripts or configurations to reach production devices…

Read more →

Microsoft, Adobe and six major IT services companies face new restrictions on sponsoring foreign employees for permanent residency in the United States. The Trump administration on Thursday suspended the companies from the federal Permanent Labor Certification Program, known as PERM, accusing them of abusing employment-based immigration rules. The affected companies are Cognizant, Infosys, Tata Consultancy…

Read more →

Welcome to another gangbuster year for strategic M&A activity in cyber, with 117 deals announced in the latest quarter. What’s different: Many of the buyers are not your typical cybersecurity firms.

Read more →

Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. “Using the account of Takashi Kitao, author of the 18,400-star game engine pyxel, the attacker pushed a malicious workflow to 27 repositories starting at 13:20 UTC,” StepSecurity

Read more →

Amazon just upped its game with new Android tablets for entertainment and work.

Read more →

Japan helped extradite a Russian suspect linked to Qilin ransomware to Germany, but the gang continued attacking victims after his arrest. Germany has arrested a Russian national believed to be a leading figure in the Qilin ransomware group, and Japan’s National Police Agency just put its own role in that arrest on the record. The…

Read more →

Microsoft warns outdated Windows devices could lose access to all updates in 2027. Learn which versions are affected and what security teams should do.

Read more →

The DOJ accuses MonsterCloud CEO Zohar Pinhasi of secretly paying ransomware gangs for decryption keys while charging victims…

Read more →

Anthropic’s OSS Scanner offers free AI vulnerability scans for eligible open-source projects, with maintainers responsible for verifying reports and fixes.

Read more →

GitHub’s new AI model spots passwords hidden in source code. See how its secret scanning works, which checks are in preview, and what security teams should do.

Read more →

Deeper Network Promo

Microsoft Teams plans to add third-party deepfake detection for meetings in November 2026. Learn how the warnings could help organizations spot AI impostors.

Read more →

The Linux creator calls vibe coding ‘a wonderful way to find joy in programming,’ but not for running Linux development. (Finding bugs is OK.)

Read more →

The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X. ShinyHunters is the extortion group that said in September it had breached the FBI’s jobs portal and stolen sensitive data on almost all FBI agents and job applicants. The FBI has not named the suspect, and…

Read more →

In this video conversation, Dark Reading editors discuss some of the news they didn’t get a chance to cover, from the arrest of a suspected ShinyHunters operative to the compromise of a Pentagon-run data center.

Read more →

Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners. […]

Read more →

The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday. […]

Read more →

Global systems integrator Myriad360 plans to accelerate acquisitions and expand its enterprise technology services following a majority investment from private equity firm One Equity Partners, CEO Jay Miley told Channel Insider. “I think by and large, the reason why we did this is that it’ll enable us to make more acquisitions,” Miley said. The investment,…

Read more →

Tom Brown is leveraging his Republican ties and business savvy to win over Washington and secure the computing power Anthropic needs.

Read more →

More than eight in 10 workers have decided an IT problem wasn’t worth reporting, according to new research from Buchanan Technologies, raising questions about how effectively businesses and their managed service providers measure IT support performance. The company’s 2026 IT Experience Gap Report found that 82% of surveyed workers have avoided reporting an IT issue,…

Read more →

Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. “Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and adds two way C2 communication with the attacker’s infrastructure,” iVerify said in a new report published Thursday.…

Read more →

Those closest to executives must match their security postures because the weakest link in a family becomes the entry point for attacks.

Read more →

Lightwell, the open-source security initiative set up by IBM and Red Hat, has identified more than 400 previously undiscovered vulnerabilities in widely used Java libraries — and now the companies are inviting customers to submit their own code dependencies to a new service, Lightwell Clearinghouse, for review. They’ll be looking for bugs such as the…

Read more →

What if the three remaining hard disk manufacturers became two? Seagate Technology and Western Digital control 90% of the market, according to market researcher TrendForce, with Toshiba picking up the crumbs. Seagate and WD both make their own magnetic drive heads, but Toshiba relies on a third party, TDK, which also sells to Seagate and…

Read more →

Plus, how AI could help short-staffed fire departments, the silent electronic battleground shaping warfare, and the startup trying to double the world’s compute.

Read more →

Summary Cribl Detect, released on September 29, 2026, is a SIEM that runs on Cribl’s data platform. The data it stores and searches is ingested through Cribl Stream Routes and Pipelines, so a sanitization step in those Pipelines determines what analysts, AI-assisted triage, alert notifications and retained datasets can access. The Cribl LogTotal Sanitizer is…

Read more →

The owner of a ransomware remediation company is facing trial for defrauding customers. Zohar Pinhasi, also known as “Zack Silver” and “Zack Green,” has been arraigned in New York on wire fraud charges for allegedly defrauding clients of his ransomware remediation company, MonsterCloud. Pinhasi falsely claimed he could recover documents encrypted by ransomware without paying…

Read more →

The owner of a ransomware remediation company is facing trial for defrauding customers. Zohar Pinhasi, also known as “Zack Silver” and “Zack Green,” has been arraigned in New York on wire fraud charges for allegedly defrauding clients of his ransomware remediation company, MonsterCloud. Pinhasi falsely claimed he could recover documents encrypted by ransomware without paying…

Read more →

Germany has arrested a Russian national suspected of being a leading member of the Qilin ransomware group following extradition from Japan earlier this month. […]

Read more →

OpenAI continues to report incidences of “misaligned” behavior by its AI models, with three new reports dropping on Oct. 2. However, they describe relatively minor issues compared to previous alignment reports and notices covering its attacks on Hugging Face, Rubygems, and a German programming wiki. The first of the new reports described how an instance…

Read more →

Wikimedia says OpenAI agents performed unauthorized actions on its platforms, including edits to wikis

Read more →

Samsung’s Galaxy S26 was hacked repeatedly at Pwn2Own Ireland. Learn what researchers found, why exploit chains matter and what users should know.

Read more →

The US State Department is offering up to US $10 million for information about the whereabouts of Zhang Yu, a 44-year-old Chinese national who is accused of being a key figure in China’s state-sponsored hacking group, Hafnium. Read more in my article on the Hot for Security blog.

Read more →

For the third week running, Citrix has issued a critical security warning to customers managing their own NetScaler ADC and Netscaler Gateway instances, this time warning of a memory overflow vulnerability enabling denial of service or remote code execution. This week’s vulnerability affects ADC and Gateway when configured as a SAML (Security Assertion Markup Language)…

Read more →

OpenAI’s annualized revenue run rate reportedly approached $50 billion at the end of September, roughly $20 billion below an earlier estimate that drew attention across the AI industry. According to the Financial Times, the ChatGPT maker shared the updated figure with investors. The difference does not necessarily indicate a decline in sales. Instead, reporting suggests…

Read more →

Bitdefender uncovered Midnight Mimosa malware preinstalled on low-cost Android phones, enabling hidden ad fraud and raising device supply-chain security concerns.

Read more →

A vulnerability has been discovered in Citrix NetScaler Application Delivery Controller (ADC) and Citrix NetScaler Gateway that could allow for remote code execution. Citrix NetScaler ADC (Application Delivery Controller) is an enterprise networking platform and traffic management device designed to optimize, secure, and accelerate the delivery of web and cloud applications. Successful exploitation of the…

Read more →

Citrix has disclosed CVE-2026-107406, a critical memory overflow vulnerability affecting NetScaler ADC and NetScaler Gateway appliances configured for specific SAML authentication roles. The flaw carries a CVSS v4.0 score of 9.5 and could enable an unauthenticated remote attacker to execute arbitrary code or trigger a denial-of-service condition on vulnerable systems. The vulnerability is particularly significant…

Read more →

AI agents can use valid credentials to perform actions beyond their assigned permissions, creating risks that traditional access controls may not prevent. Token Security explains how organizations can enforce agent-specific policies without sacrificing autonomy. […]

Read more →

Anthropic launches free OSS Scanner, using AI to find open-source vulnerabilities and help maintainers fix bugs before attackers exploit them. Anthropic is launching OSS Scanner, a vulnerability scanner for open-source code that costs nothing for projects to join. It grew directly out of lessons learned running Claude against real-world targets during Project Glasswing. The backdrop…

Read more →

Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with  Texas filing a suit in February. Florida, Iowa, Montana and Nebraska allege the California company misled buyers about how secure its routers are and how separate it is from China. TP-Link denies the claims and says it will fight…

Read more →

Plus, neocloud Firmus Grid withdraws IPO

Read more →

Former ransomware negotiator Angelo Martino received 70 months in prison after secretly sharing clients’ confidential information with BlackCat attackers and participating in additional ransomware attacks.

Read more →

As AI agents gain authority over business systems, attackers can manipulate them like business email compromise (BEC) victims.

Read more →

Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives attackers root access before anyone approves the connection. AnyDesk patched the flaw in version 8.0.3 in June, but its changelog described the fix only as “fixed a bug that could lead to a crash,” with no CVE assigned and…

Read more →

Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). “It’s an opt-in service informed by our experience using Claude to find vulnerabilities during Project Glasswing,” Anthropic said. “Projects that join will receive thorough, periodic security scans by our strongest models at no cost.”

Read more →

Deeper Network Promo

Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below – CVE-2026-105133 (CVSS v4 score: 5.5) – An improper authentication vulnerability in the checkSysPwd() function in the “com/ahsay/obs/api/ApiStructsAction.java”

Read more →

A component of Nvidia’s GPU monitoring software that enterprises use to keep tabs on their AI training and inference infrastructure has been vulnerable to denial-of-service (DoS) and information disclosure attacks. The Nvidia DCGM Exporter contains an unauthenticated resource exhaustion vulnerability that could allow remote attackers to crash the monitoring service and potentially disrupt AI workloads…

Read more →

Learn how businesses can use AI to reduce repetitive work, improve workflows, connect information, and support better everyday decisions.

Read more →

Learn how businesses can use AI to reduce repetitive work, improve workflows, connect information, and support better everyday decisions.

Read more →

Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago. […]

Read more →

Hundreds of internet-exposed graphics processing unit (GPU) servers were open to a high-severity flaw in NVIDIA’s DCGM Exporter (CVE-2026-47483) that lets unauthenticated attackers crash the monitoring service and may disrupt AI workloads, according to Lava. Lava reported the flaw to NVIDIA, which rated it 8.2 on the CVSS scale and published a security bulletin on…

Read more →

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed below – CVE-2015-3306 (CVSS score: 10.0) – An improper access control vulnerability in ProFTPD that could…

Read more →

Comparitech observed 2627 claimed ransomware attacks in Q3, with critical sectors like finance, technology, education and healthcare experiencing significant increases

Read more →

As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The “Horizons of Identity Security” report from SailPoint highlights a critical “velocity paradox,” in which organizations invest in AI-speed business operations while continuing to rely on human-speed security controls,…

Read more →

Plus: Vance says U.S. will suspend Microsoft and other firms from green card program, and rogue pilots are a growing safety threat.

Read more →

​A Ukrainian-Russian dual citizen has pleaded guilty to running a massive money laundering operation that laundered millions for cybercriminals worldwide. […]

Read more →

Microsoft has launched Execution Containers for AI agents on Windows 11, adding policy-based restrictions for file, network, process, and desktop access.

Read more →

The customer data stolen from global fashion retailer ASOS includes more than just names and contact details, raising questions about its early reassurances. As we reported earlier this week, ASOS customers received a push notification through the ASOS app alleging that the company had been hacked. ASOS has confirmed that attackers accessed customer information after tricking…

Read more →

DOJ and FBI seized China-linked hacking tools Microscan and FishHub, linked to Integrity Tech and attacks on critical infrastructure worldwide. The Justice Department and FBI took down two hacking tools this week, Microscan and FishHub, both built and run by a Beijing-based company with direct government contracts. The tools were used to scan, and in…

Read more →

FortiBleed attacks continue to target Fortinet FortiGate devices, with SOCRadar reporting more than 86,644 compromised devices across 194…

Read more →

Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year’s Windows Update certificate rotation. […]

Read more →

Citrix patched CVE-2026-107406, a critical NetScaler ADC and Gateway flaw that could allow remote code execution or denial-of-service attacks. Citrix has released security updates to fix CVE-2026-107406 (CVSS score of 9.5), a critical flaw affecting NetScaler ADC and NetScaler Gateway that could allow remote code execution or denial-of-service (DoS) under certain conditions. The vulnerability is…

Read more →

The UK, US and allies have issued an alert detailing malicious activity linked to China’s Integrity Technology Group

Read more →

Anthropic’s OSS Scanner is a new, free service that uses the company’s strongest AI models to find security vulnerabilities in open-source software. Maintainers who opt in receive periodic scans and reports explaining suspected flaws, how to reproduce them and, when available, how to fix them. The service builds on Anthropic’s experience with Project Glasswing, which…

Read more →

The FBI seized seven domains used to operate Microscan and FishHub, two hacking tools linked to Chinese state-sponsored hackers known as Flax Typhoon that were used to target critical infrastructure and other organizations in the US and abroad. Seizure notice (Source: US Department of Justice) According to the US Department of Justice, the hackers worked…

Read more →

Dell is bringing Nvidia’s RTX Spark technology to its XPS laptop lineup, offering up to 128GB of unified memory in a portable system designed for demanding AI and creative workloads. The company revealed additional specifications, pricing, and preorder details for the XPS 16 Creator Edition on October 7. The laptop starts at $3,799.99 and combines…

Read more →

Technology companies are directing a growing share of their spending toward IT services as investments in artificial intelligence reshape procurement priorities, according to new research from Coupa. The company’s Q3 2026 Business Spend Index (BSI), released October 8, found that IT services accounted for 14.1% of high-tech spending in 2026, up from 8.8% in 2023.…

Read more →

A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site’s .onion address using only public information, and then take that address over. Searchlight Cyber, which disclosed the flaw on October 8, says an attacker who recovers the key can redirect the…

Read more →

In my last article, I described the SOC Triangle, the longstanding trade-off among quality, consistency and cost efficiency in security operations. AI is starting to loosen that constraint by enabling certain kinds of work with greater depth and consistency, without requiring a linear increase in headcount. That raises the next question I hear from security…

Read more →

As AI adoption accelerates, ISACA is expanding its certification portfolio with a governance-focused credential designed to help professionals manage AI securely

Read more →

SimpleLogin is an email alias service from Proton that forwards messages to an existing mailbox. Users create addresses for registrations, purchases, and correspondence, giving them control over where their primary email address is shared. The service is open source and supports self-hosting. Getting started I tried SimpleLogin using a Gmail address. After verification, the dashboard…

Read more →

Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions. […]

Read more →

Three research teams broke into Google’s Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest pays researchers to show working exploits and passes the flaws to the vendors. One of the three Pixel exploits earned Ikotas Labs $300,000, the contest’s…

Read more →

Broadcom has addressed CVE-2026-59346, a critical integer-overflow vulnerability affecting VMware Workstation and VMware Fusion. The flaw carries a CVSS score of 9.3 and can allow an attacker with administrative privileges inside a virtual machine to cross the virtualization boundary and execute code on the underlying host. The issue resides in VMware’s VMXNET3 virtual network adapter…

Read more →

Meta is using AI to detect Facebook ads that direct users to child exploitation content, while testing its safety systems for weaknesses and evasion tactics.

Read more →