Finding Sensitive Data Is Not the Same as Reducing Risk

Read more →

Here’s the story about the industry’s attempt to offer cyber tools to small water utilities across the U.S.

Read more →

Most apps make our personal lives easier. This one helps the oppressed communicate by turning your phone into a Tor proxy. No technical knowledge needed.

Read more →

The Netherlands’ National Cyber Security Centre (NCSC) is warning that hackers are actively exploiting a macOS authentication bypass vulnerability after public exploit code emerged. […]

Read more →

A term that describes a computer-science algorithm is the metaphor du jour among AI types—and coming soon to a boardroom near you.

Read more →

Researchers have verified that ExfilSquad possesses sensitive data stolen from at least 13 victims after the extortion group published leaked datasets via torrents

Read more →

Why do so many boards underestimate technology risk until it becomes a crisis?

Read more →

A maximum-severity SAP Commerce Cloud remote code execution vulnerability patched three days ago is already being targeted in attacks, according to threat intelligence company Defused. […]

Read more →

Records held in Salesforce and ServiceNow systems are under attack leaving user data exposed, according to researchers at Reco. The attack appears similar to those perpetrated by the extortion group ShinyHunters, Reco said. ShinyHunters has been particularly active this year, attacking dating sites in January and Oracle in June, and there are fears that they…

Read more →

Apple’s threat notifications are triggered by the detection of mercenary spyware, which is described as sophisticated, expensive, and aimed at a small number of individuals, often journalists, activists, politicians, and diplomats.

Read more →

OpenAI has lost its AI ethics lead Chloé Bakalar just a year after she joined the company, the Financial Times reported. Bakalar has maintained a silence and has yet to update her LinkedIn profile, but if her departure is confirmed then it will add to the list of OpenAI executives who have quit in recent…

Read more →

Oracle has released a security tool intended to provide organizations with a centralized view of security risk across their database environments. Oracle Database Security Central will be available free of charge until the end of February 2027. It arrives at a critical time for Oracle customers, with attackers targeting security flaws to exploit the company’s…

Read more →

Chinese AI company Manus has laid out its plans to operate as an independent company following the reversal of its acquisition by Meta. The US social media company agreed to buy Manus last year but Chinese regulators quickly opened an investigation into the deal, as they were concerned that it violated Chinese export controls. In…

Read more →

Evooo1Bot is a newly observed botnet based on the Mirai framework but equipped with advanced features, turning edge devices into persistent proxies

Read more →

Apple has expanded its threat-notification system for targets of mercenary spyware. Apple now shows a warning directly on an iPhone’s Lock Screen and in Settings when it believes the device owner has been targeted by mercenary spyware. The new on-device alert is meant to make a high-risk warning harder to overlook and complements notifications by…

Read more →

Kiteworks has launched a new security capability designed to prevent employees from accidentally sending sensitive information to the wrong recipients, extending the company’s data governance platform further into outbound email. Agent and Human Error Prevention (AHEP), now generally available, analyzes email activity as users compose messages and warns them when multiple signals indicate a potentially…

Read more →

Microsoft will bring its two Copilot apps into a unified interface for consumer and work users, part of a wider drive to create a Copilot “super app” that consolidates various features. Until now, Microsoft has offered two Copilot apps across web, desktop and mobile platforms: a simplified, consumer-focused Copilot app, and Microsoft 365 Copilot, which…

Read more →

Cloudwick has appointed AWS veteran John Newson as Vice President, Alliances and Channels, EMEA. Newson will be tasked with leading Cloudwick’s regional partner strategy from the company’s London office, working alongside Harshdeep Singh, GM, EMEA at Cloudwick, and the UK team. Newson joins Cloudwick after a decade at AWS UK Public Sector The new channel…

Read more →

The $1 billion deal aims to converge data security and identity into a single control plane for agents, with privileged access redefined around business context rather than static roles.

Read more →

Meta announced it’s rolling out a new feature for WhatsApp users in the fight against scammers. Scam Alert is an optional beta feature that uses an on-device machine-learning model to flag likely scam messages from people who are not in a user’s contacts. The Scam Alert feature arrives as scammers increasingly use WhatsApp for impersonation,…

Read more →

Oil giant Shell has confirmed it is investigating a potential security incident after the Clop ransomware gang claimed it stole 89GB of data. […]

Read more →

Plus: Shell, Philips investigate potential Clop attacks; AI glasses land Meta, Oakley and Ray-Ban in German court

Read more →

Fusion Connect has launched an AI-powered Contact Center as a Service (CCaaS) platform with flat-fee pricing, replacing complex token-based consumption calculations with more predictable costs for customers and channel partners. Fusion Connect replaces consumption-based AI pricing This new structure is designed to eliminate unpredictable costs in enterprise AI adoption.  Fusion Connect is offering predictable monthly…

Read more →

It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the mobile apps we use every day. That information is already semi-public, but it is not easily parsed and traditionally much of it has remained walled away in the hands of large advertising platforms.…

Read more →

Group-IB researchers discovered WindRelay, a new Android malware built to capture live payment card data over NFC (Near Field Communication) and relay it to attackers in real time. WindRelay is paired with the SpyNote remote access trojan, which gives attackers remote access to a victim’s device. Attack chain overview (Source: Group-IB) How the scam unfolds…

Read more →

Apple recently posted and removed details explaining how Mac users in China could set up their computers to work with Alibaba’s Qwen AI. Now, Reuters has confirmed long-held speculation that Apple has revisited its Google Gemini AI playbook and built its own proprietary AI model for China with support from Alibaba.   Apple worked with a Chinese…

Read more →

Microsoft has been struggling to get people to use its Edge browser for years. Even though the company made Edge the default browser in Windows 10, users left in droves, most of them flocking to Google Chrome — and with good reason. The original version of Edge was underpowered, had difficult-to-use features, and offered very…

Read more →

Initial access is gained through fake job offers and PDF viewer downloads.

Read more →

OpenAI’s GPT-5.6 Sol on Ultrafast mode is available in limited preview to a select group of customers, launching first through the OpenAI API. The company says the service runs up to 14 times faster than Standard processing and generates up to 750 output tokens per second. Ultrafast is powered by Cerebras as part of the…

Read more →

The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July, according to the data breach notification service Have I Been Pwned. […]

Read more →

AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data

Read more →

As AI data centers face mounting criticism over their water use, Google has pledged to replenish more freshwater than its offices and data centers consume by 2030, positioning water stewardship as a key part of its AI infrastructure strategy. The announcement comes as governments and local communities increasingly scrutinize the environmental impact of AI infrastructure,…

Read more →

Hackers used coordinated artificial intelligence agents in cyberattacks targeting Taiwanese government networks, according to Taiwan officials and cybersecurity researchers. Taiwan’s Ministry of Digital Affairs said it detected an unusual wave of cyberattacks targeting government agencies last July, with investigators finding evidence that the operation combined traditional hacking techniques with artificial intelligence agents. According to the…

Read more →

Read more →

San Francisco-based startup, CodeRabbit, said Wednesday it raised $143 million in a Series C funding round, giving the company a $1.5 billion valuation as demand grows for tools that review and monitor software written by artificial intelligence. The round was co-led by Atomico and Smash Capital, with participation from new investors including BMW i Ventures,…

Read more →

Akira ransomware affiliates were seen using a new technique to evade endpoint detection and response (EDR), where they rebooted a compromised Windows system into Safe Mode with Networking enabled. According to Huntress, the technique successfully took both its agent and Microsoft Defender’s real-time protection offline. This, the researchers said, gave the attacker a window to…

Read more →

Cybersecurity teams should be responsible for risk oversight, rather than for executing every corrective action. Assigning security teams the tasks of finding, prioritizing, assigning, implementing, tracking and validating every remediation does not foster accountability. Instead, it results in an organizational repository for unresolved issues. A more effective model distinguishes roles clearly: security functions as the…

Read more →

AmnesiaStealer targets macOS users through fake GitHub pages, stealing passwords, cookies and data while giving attackers live control of the browser. Jamf Threat Labs researchers disclosed AmnesiaStealer, a new multi-stage Rust-based macOS infostealer that spread through a counterfeit GitHub download page using the ClickFix technique. The lure looks convincing: correct GitHub dark theme, Octocat logo,…

Read more →

A former data analyst contractor for Brightly Software has been sentenced to two years in prison for targeting his employer in a $2.5 million extortion scheme. […]

Read more →

AWS Certificate Manager (ACM) will phase out email validation for public certificates throughout 2027, ahead of the Certification Authority/Browser (CA/B) Forum’s March 15, 2028 deadline for ending email-based domain validation. The CA/B Forum sets standards that browsers and certificate authorities follow for publicly trusted certificates. From March 15, 2028, public certificate authorities will no longer…

Read more →

For years, cybersecurity leaders have worked to convince organizations that security deserves a seat at the executive table. Today, that conversation is changing. The challenge is no longer proving that cybersecurity matters; it is demonstrating how security leaders can help organizations innovate, modernize, and grow with confidence. As organizations accelerate digital transformation, CSOs have an…

Read more →

7.3 million Chess.com profiles leaked online: the data is genuine, but evidence points to large-scale scraping, not a server breach. Free is a strange price for stolen data, and that’s exactly what makes this listing worth a second look. A 15.5 GB file containing over 7.3 million chess.com user records showed up on two data-leak…

Read more →

Ukrainian police have disrupted 94 fraudulent call centers during a nationwide operation that involved more than 400 searches and the seizure of thousands of computers, phones, and SIM cards. Ukrainian police raid at a fraudulent call center (Source: Cyberpolice Ukraine) The call centers were linked to schemes involving callers impersonating bank employees, fraudulent investment services,…

Read more →

Threat intelligence researchers from Broadcom revealed that a known Chinese APT group may be linked to a lucrative crypto fraud operation

Read more →

Trump authorizes vetted US cybersecurity firms to conduct government-approved cyber operations against transnational criminal networks. President Trump signed a national security memorandum on August 13 establishing a formal program that allows vetted private US cybersecurity companies to conduct offensive cyber operations against transnational criminal organizations under government direction and oversight. The program, managed by the…

Read more →

Organizations expect AI agents to change how work gets done, driving productivity and growth while allowing employees to focus on higher-value tasks. Few, however, have the processes and workflows needed to realize those benefits, according to Deloitte’s latest research. Preparing the operating model for AI agents About half of surveyed leaders say they understand how…

Read more →

Misconfiguration remains one of the leading threats to cloud environments because a single configuration error can result in public network access, unrotated keys, missing encryption, exposed services, and logging gaps. CISA now mandates baseline cloud configuration practices for US federal agencies. More than two-thirds of midmarket organizations use multiple cloud providers, each with its own…

Read more →

A company selling a connected toy in Europe must show by the end of 2027 that the product meets the Cyber Resilience Act. The law states what manufacturers have to achieve and stops there, which leaves the toymaker to work out the technical detail alone. Seventeen draft standards, now open for comment, supply that detail.…

Read more →

AI’s potential as a security tool and the danger of autonomous AI agents as a new attack surface were key themes of the presentations and product announcements at Black Hat and DEFCON in Las Vegas last week. Here are some key takeaways from this year’s hacker summer camp that CISOs should review while developing cybersecurity…

Read more →

One of AI vendor DeepSeek’s biggest selling points has been its ultra-low price point, but that party’s about to end. The Chinese model provider is raising API pricing for its V4 model family by notable margins, in some cases by more than 1,100%. The increases may not be that dramatic for all, though; the company…

Read more →

You’re not alone if you just received an “Apple Threat Notification” saying it detected a “mercenary spyware attack targeted at your iPhone.” […]

Read more →

Artificial intelligence AI has become a strategic priority for enterprise organisations. As AI adoption matures, organisations are asking a different question: who should…

Read more →

Cami Clark—who started what she called a “revolutionary porn company”—keeps a low profile but is a key adviser to the AI chief. Its coming IPO could raise trillions.

Read more →

As organisations accelerate digital transformation, the line between networking and cybersecurity operations continues to blur. Distributed workforces, cloud adoption,…

Read more →

Acquisition will provide the industry’s most comprehensive AI development lifecycle solution

Read more →

L to R Beau Hodge – CEO, Baidam, Professor Gary Thomas – RMIT, Pro Vice-Chancellor Indigenous Education, Research and Engagement, Anita Sheridan-Roddick – Chief Revenue…

Read more →

Virtual private networks VPNs have been a cornerstone of enterprise security for more than two decades. They enabled secure remote working long before cloud computing became…

Read more →

A new Managed MCP Server connects Claude Code, Codex, Grok Build, and Devin to MongoDB Atlas, giving coding agents direct access to live operational data.

Read more →

Automated Embeddings on Atlas powered by Voyage AI, the Atlas Embedding and Reranking API, voyage-code-4, and vector search in Atlas Stream Processing give AI applications and…

Read more →

Jewelbug operates a single, custom command-and-control (C2) panel to manage its dual operations.

Read more →

Rubrik gained access to Anthropic’s Project Glasswing, which provides early access to the Mythos Preview model, a tool designed to find software flaws and construct attack chains.

Read more →

This development includes a GitHub project with over 4,500 stars, various new web tools, and existing AI detection evasion services.

Read more →

German researchers from the Helmholtz Center for Information Security discovered that Loongson processors, which utilize the LoongArch instruction set architecture, possess caches that leak data.

Read more →

The new policy permits “Cyber Effects Operations,” which involve manipulating, disrupting, or destroying information systems and networks.

Read more →

The newly enacted budget allocates an additional $10 million for cybersecurity initiatives and $3.7 million for the Commonwealth Office of Digital Experience (CODE PA).

Read more →

A newly-signed presidential memorandum enlisting private sector companies in federal law enforcement hacking operations against criminal organizations could present a number of legal, practical and moral pitfalls, cyber experts told CyberScoop a day after the order was released. While some have celebrated the memo as an overdue maneuver to more aggressively combat cybercriminals, others view…

Read more →

A tech worker who hatched an elaborate insider attack in late 2023 and attempted to extort Brightly Software for about $2.5 million was sentenced to two years in prison, the Justice Department said Thursday. Cameron Nicholas Curry, also known as “Loot,” committed a series of crimes while working as a data analyst contractor for the…

Read more →

The startup, which went public in a splashy IPO last year, also named a new CEO following months of legal and C-suite turmoil.

Read more →

Authorities in Ukraine shut down 94 fraudulent call centers across the country that lured people into investment scams or tried to obtain access to bank accounts. […]

Read more →

An Akira ransomware affiliate disabled the endpoint detection and response (EDR) solution on a compromised system by restarting the machine into Safe Mode with Networking. […]

Read more →

Exploitation against CVE-2026–59310 began earlier this month, and patching the vulnerability may not be enough to fully mitigate the threat.

Read more →

Security researchers have seen evidence that attackers are attempting to exploit a currently unpatched SQL injection vulnerability in GeoServer, an open-source web server for managing and publishing geospatial data. The software is widely used by organizations in many industries, including the government, defense, science, education, engineering and technology sectors, and has been targeted by hackers in…

Read more →

In one of his last public appearances as CEO, Tim Cook offered Secretary of Commerce Howard Lutnick a tour of a facility meant to highlight its investments in U.S. supply chains.

Read more →

AI-assisted cyberattack on Taiwan signals a shift toward faster, more autonomous nation-state threats.

Read more →

Proofpoint researchers found that cybercriminals are developing and selling tools designed to hide malicious instructions inside emails, documents, calendar invites, and webpages that AI systems routinely process.  This could allow attackers to manipulate AI agents without direct user interaction.  “These advertisements and discussions reveal novel techniques organizations are likely to observe in upcoming months, such…

Read more →

Washington is preparing to give vetted US cybersecurity firms a role in offensive operations against foreign cybercriminal groups. President Donald Trump signed a National Security Presidential Memorandum on Wednesday directing the federal government to establish a program under which vetted U.S. firms could conduct cyber surveillance and “cyber effects” operations against foreign cyber-enabled transnational criminal…

Read more →

xAI is stepping up its challenge to OpenAI and Anthropic in the AI agent market. Its latest release gives the company another contender for developer and enterprise workloads. Elon Musk’s AI firm introduced Grok 4.6 as its newest frontier model, designed for longer-running agent work. Developers and service providers can now evaluate it for customer…

Read more →

Google’s new Pixel phones cost more this year, and buyers of the Pro models are also getting less base RAM. The Pixel 11 starts at $899, up $100 from the Pixel 10, while the Pixel 11 Pro starts at $1,099. Google has doubled base storage on the Pixel 11 and Pixel 11 Pro to 256GB,…

Read more →

The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. […]

Read more →

Welcome to this week’s edition of the Threat Source newsletter.   “Experiment is the mother of knowledge.” ― Madeleine L’Engle, A Wrinkle in Time “Don’t slide down the rabbit hole. The way down is a breeze, but climbing back’s a battle.” ― Kate Morton, The Clockmaker’s Daughter  Hacker Summer Camp has come and gone, which means…

Read more →