U.S. federal agencies and South Korea’s National Policy Agency warned government and critical infrastructure organizations worldwide to secure their systems against Gunra ransomware attacks. […]

Read more →

Disrupting IT systems that support industrial environments can be enough to interrupt production, even when ransomware operators do not gain direct access to industrial control systems (ICS), according to Dragos. The company identified 1,140 ransomware incidents involving industrial organizations in the second quarter of 2026, up 12% from 1,020 in Q1. The figures come from…

Read more →

You don’t have to spend lots of money to make your home smarter. Here are the best affordable gadgets to upgrade your space.

Read more →

Lock your ssh-agent and it should sit there refusing to sign anything until you unlock it. In OpenSSH 10.4, locking it also switched off the check that tells the agent whether a request came from your own machine or arrived down a forwarded connection from a remote server. The fix shipped today in OpenSSH 10.5.…

Read more →

TikTok Shop is a real, functioning e-commerce feature built into the TikTok app, allowing users to buy goods without ever leaving TikTok. As it’s grown in popularity, scammers have begun cloning its appearance.Storefronts that reproduce its look, its trust badges, and its category layout closely enough to pass a quick glance are showing up as…

Read more →

OpenAI is tightening restrictions on testing of its upcoming Astra model due to security concerns

Read more →

A website built to look almost exactly like CNN’s homepage is telling visitors to download “the new CNN app.” But it’s not CNN’s app, and has nothing to do with the news company. The campaign doesn’t stop at CNN. It also uses fake Stremio and Avast installers hosted on similarly convincing lookalike sites, all targeting…

Read more →

A large majority of IT and security leaders are confident in their teams’ ability to detect when an AI agent has gone rogue, but few are able to take quick action to mitigate the fallout when an agent exceeds its intended scope. Nine in 10 IT and security leaders surveyed by IT observability vendor WanAware…

Read more →

Make UK reveals major cyber resilience gaps as 30% of UK manufacturers report recent cyber incidents

Read more →

Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular network the local grid operator uses to reach remote equipment. The plant supplies heat to roughly 50,000 residents. Recovery began at about 7:30 a.m. while the intruders were still…

Read more →

GPT-5.6-Cyber is a new OpenAI model built on GPT-5.6 Sol, trained to find zero-day vulnerabilities and build exploit chains, with fewer refusals on higher-risk, dual-use work. Model is available only through Daybreak Red, the higher tier of OpenAI’s vetted access program for cybersecurity professionals. “The GPT‑5.6‑Cyber model is trained to improve performance on certain cybersecurity…

Read more →

Every security operations centre is drowning in data.

Read more →

The recent news coverage of “rogue AI” systems hacking innocent companies reminded me of one of the world’s most unsung heroes and genuinely someone who may well have saved the world. In 1983, the USSR’s early warning systems reported that the United States had launched nuclear missiles towards the Soviet Union. The officer on duty,…

Read more →

Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems (CMS) platform’s plugins team to temporarily disable their downloads. “Unlike traditional software supply chain attacks, zero source code files were modified within the official WordPress.org repository,” Wordfence researcher Paolo Tresso said.

Read more →

Researchers at Nanyang Technological University turned a set of AI agents loose on the software that runs 4G and 5G phone networks, and the agents came back with 84 security flaws nobody had reported before. Developers have confirmed 83 of them, and 81 now carry CVE numbers. The most serious one lets an attacker take…

Read more →

The December 29 cyberattack on a Polish combined heat and power (CHP) plant was the first observed case of attackers gaining access to an OT network through a private APN, according to CERT Polska. The private APN is a dedicated mobile network that a Distribution System Operator (DSO), the company running the local electricity grid,…

Read more →

Selected red team specialists can now use OpenAI’s cyber models to find and exploit weaknesses in client applications and infrastructure. Those clients never get the models themselves. That split is the design of the Daybreak Cyber Partner Program, which OpenAI expanded on August 10: access to the underlying models stays with the approved partner and…

Read more →

iTWire TV: CEO Mike Banbrook explains how to start, overhaul and data-mine your call centre

Read more →

Meet HTTP Terminator, a new AI system that has identified hundreds of websites vulnerable to HTTP request smuggling, hacked them live at scale, and even identified a “genuinely new class” of vulnerability, dubbed “shared-parser confusion.” But it didn’t do it alone; it was guided by a human the entire time, which may be the most…

Read more →

The AI giant is racing to public markets this fall and has fielded tough investor questions on Chinese rivals, Trump-era tensions, and the artificial-intelligence infrastructure boom.

Read more →

Meta on Monday rolled out a new 30-billion-parameter AI model that is optimized to run on a PC or Mac with a single GPU to offer always-on local agentic workflows rather than relying on the cloud. The company has dubbed it Muse Glimmer. However, its hardware demands, including a GPU with a minimum of 24GB…

Read more →

Agreement validates Everpure’s technology advantage for hyperscale workloads.

Read more →

The AI giant is racing to public markets this fall and has fielded tough investor questions on Chinese rivals, Trump-era tensions, and the artificial-intelligence infrastructure boom.

Read more →

Hyperbaric oxygen therapy in Beverly Hills can sound highly technical until the session is experienced. In practice, the first visit follows an easy rhythm: arrive early,…

Read more →

DigiCerthttps://www.digicert.com/, a global leader in intelligent trust, today announced it has been recognised as a top-tier digital trust leader in Frost & Sullivan’s ‘Frost…

Read more →

Australian debut of a new generator, a live drone demo, and a broad power lineup await.

Read more →

MCP server for Nutanix Cloud Platform brings secure, natural-language, agentic AI automation to hybrid multicloud environments without sacrificing control

Read more →

Read more →

Meta is bringing its newest agentic AI model closer to the machines where people already work. Muse Glimmer is a 30-billion-parameter open-weight model released by Meta Superintelligence Labs on Aug. 10 under the Apache 2.0 license. Designed to run locally on compatible Macs and PCs, the model can operate without relying entirely on cloud-hosted infrastructure.…

Read more →

Tragically, Australians in rural and regional areas are five times more likely https://www.aaa.asn.au/2025/04/regional-motorists-are-at-greater-road-risk-than-city-drivers/than…

Read more →

Companies are sending sensitive data, including injury reports, pizza orders, and test credentials, to domains like @noreply.us and @noreply.net, believing these addresses are inactive or unmonitored.

Read more →

The unusual activity was detected earlier this week on servers hosted and managed by a third-party vendor, prompting LexisNexis to disconnect from these systems to protect customers and contain the issue.

Read more →

Microsoft Threat Intelligence indicates that Storm-1175, believed to be China-based, likely exploited an authentication-bypass vulnerability (CVE-2026-18577) in N-able’s N-central remote monitoring and management tool to gain initial access.

Read more →

A vulnerability in HP ThinPro 8 and 9 operating systems allows attackers with physical access to bypass TPM-backed full-disk encryption and recover the key securing the device’s root partition.

Read more →

The vulnerabilities were found in Samsung’s proprietary system apps, which cannot be uninstalled by users and operate outside the protection of Google Play Protect.

Read more →

Hackers breached a heat-and-power plant facility in Poland, which supplies heat to about 50,000 residents, using a private APN (Access Point Name) to access an OT (Operational Technology) network. […]

Read more →

A vendor, identified as “Gordon Freeman,” advertised a 7.5 GB database allegedly containing national ID numbers, addresses, phone numbers, birth and death dates, and family links for nearly all Israeli citizens.

Read more →

Researchers identified that FirewallFalcon Manager secretly redirects traffic, weakens server security, and in older versions, installs a universal SSH backdoor.

Read more →

The intrusion began at a wind farm where attackers compromised a Fortinet VPN and firewall device.

Read more →

The Australian Bureau of Statistics says 11% of small businesses used AI last financial year. Deloitte Access Economics says two-thirds. Intuit says 69%. That gap is the most…

Read more →

New research shows how attackers can use security alerts and blocked events to manipulate and hijack AI agents.

Read more →

Attacks targeting water systems just keep flowing across a dozen states, against ill-secured, Internet-exposed PLCs.

Read more →

The Federal Trade Commission wants to start regulating ideological bias in AI systems and assert federal control over state laws. They’re getting an earful from opponents on all sides of the political spectrum. In a proposed policy statement released last month, the FTC said it was considering treating ideological bias in AI systems as an…

Read more →

An AI agent hacked a gym booking system while trying to help a user, booking early and removing another person from the waitlist. An Australian man asked his AI assistant to book him into a gym class. He didn’t ask it to hack the booking software, and he definitely didn’t ask it to remove another…

Read more →

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators’ browsers to create rogue admin accounts. […]

Read more →

The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users.

Read more →

OpenAI announced Monday  it was expanding access to its frontier models for defensive cybersecurity, detailing different defensive and red-teaming workflows and a new partner program with major cybersecurity product providers. In a pair of blogs posted Monday, OpenAI said it was updating its Daybreak program  – which provides unreleased frontier models to private organizations and…

Read more →

NATO’s cyber defense arm and a startup that uses artificial intelligence to find software flaws can now issue the ID numbers the industry uses to track those flaws, the European Union Agency for Cybersecurity announced last week.  The NATO Cyber Security Centre, part of the NATO Communications and Information Agency, and AISLE, a cybersecurity company…

Read more →

OpenAI has developed a new model called “GPT 5.6 Cyber,” designed for vulnerability research, penetration testing, incident response, and remediation. […]

Read more →

I came across a LinkedIn post the other day that described “hypegineering,” which the poster explained refers to the moment when AI “marketing becomes more innovative than the technology itself.” That post came from Ralph Aboujaoude Diaz, the global head of GRC for British consumer services company Haleon. Until last year, Diaz worked in operations…

Read more →

U.S. and South Korean cyber agencies warned Monday about a ransomware-as-a-service outfit, Gunra, that reportedly recruits ethical hackers and penetration testers and benefits from North Korean government-linked hackers’ tools to target government and critical infrastructure organizations. Gunra has gone after sectors such as academia, financial services and insurance, government services and facilities, healthcare, manufacturing and…

Read more →

As outages become more expensive and frequent, recovery readiness is emerging as the true measure of resilience.

Read more →

CISA warns of active Progress LoadMaster attacks; patch and investigate now.

Read more →

Claude Code will begin relying less on manual permission prompts when Anthropic makes auto mode the default for Pro, Max, and Team users starting Aug. 14. Under Claude Code’s current permission system, the coding agent can generally read files without interruption but may stop and ask for approval before taking actions such as modifying or…

Read more →

Moonshot AI’s Kimi K3 accessed the public internet during a controlled cybersecurity evaluation, prompting a dispute over the model’s behavior and the test environment’s configuration. US cybersecurity startup Frontier Security said it discovered the behavior while testing Kimi K3, an open-weight model developed by Chinese AI company Moonshot AI, for defensive cybersecurity tasks. According to…

Read more →

A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor. […]

Read more →

Cameras on Royal Navy drone boats were found contacting a Chinese IP address during a UK Ministry of Defence cybersecurity assessment, prompting officials to cut their internet access. Kraken Technology Group’s K3 Scout vessels used the affected third-party camera subsystem. Unexpected outbound traffic from military hardware has put supplier vetting and device-level security under scrutiny.…

Read more →

Sophisticated iPhone exploit chains previously limited to nation-states are spreading far and wide to organized cybercrime groups.

Read more →

We’re excited to announce that Amazon Web Services (AWS) has completed theCyberVadis assessment of its security posture with the highest score (Mature) in all assessed areas. This demonstrates our continued commitment to meet the heightened expectations for cloud service providers. Customers can now use the 2026 AWS CyberVadis report and scorecard to reduce their supplier…

Read more →

The new feature lets you send money to your children without them needing a card or separate account.

Read more →

A public policy expert mapped global cybercrime laws to develop a five-point framework for protecting ethical hackers and good-faith security research.

Read more →

Attackers breached a Polish CHP plant through a Fortinet device and private APN, reaching PLCs and disrupting turbine and water treatment systems. Poland’s CERT has described a second attack on the country’s energy sector, and this one matters for a simple reason: it shows how an ordinary-looking network design can turn into a route into…

Read more →

The crime solver wore disguises, spied on targets, and built intelligence networks long before modern-day tactics emerged. He has lessons for today’s ethical- and nonethical-hat hackers.

Read more →

Most teams are just starting to reckon with the impact of AI agents on the enterprise – here’s how to get started.

Read more →

Apple continues work to get White House go-ahead to source memory from Chinese supplier CXMT, which the US government has placed restrictions on. For Apple, the issue comes down to simple math. With the cost of making iPhones up 38% because of eye-watering memory price increases — up almost 7-fold since the beginning of 2025 — it makes sense…

Read more →

Atlassian fixed a flaw letting one crafted link make its Rovo AI assistant exfiltrate company data

Read more →

In 2026, online scams have unfortunately become part of the new normal. They can appear almost anywhere, from social media and messaging apps to search results, websites, and online communities, and they can target anyone. Sometimes, all it takes is a moment of curiosity and a convincing offer. Among the most devastating scams are so-called…

Read more →

A 20-year-old man in the United Kingdom was sentenced to two years in prison Monday after admitting to running an online abuse campaign that affected 117 victims across multiple countries during his time in the loosely organized online criminal network known as The Com. Justin Swaddle, who was a minor when committed the crimes, pleaded…

Read more →

Levi Strauss said hackers used social-engineering tactics to compromise three employees, gain unauthorized access to company systems, and steal corporate data. The company, according to Reuters, has not disclosed what information was taken or whether customer data was affected, and said the incident remains under investigation. The breach comes amid a broader wave of attacks…

Read more →