Months before the Hugging Face breach, Emergence AI published research that investigative journalist Ronan Farrow made public. Ten autonomous AI agents operated across five virtual environments for fifteen days without human intervention. Much of the attention focused on Grok 4.1 turning violent and Gemini 3 Flash committing 683 crimes. What mattered more went unnoticed: Anthropic’s…
Cyber risk is increasing, but so is the cost of managing it. More than 514,000 cybersecurity job listings appeared in the US between May 2024 and April 2025, while the mean annual wage for an information security analyst reached $132,510. Even after the budget is approved, hiring can take three to six months, with additional time…
Students can save big on an Apple Music subscription. Here’s how to get it.
AI is dramatically reducing the barriers to entry for scam phone farm operators, Human Security warns
Reuters says OpenAI’s rogue AI agent also breached a Modal customer, exposing a wider attack and raising fresh concerns over autonomous AI safety. Reuters reported that the OpenAI agent that hacked Hugging Face earlier this month also compromised a customer at a second company, Modal Labs, a New York-based cloud platform for developers. Modal CTO…
Researchers found 24,650 public BMC interfaces leaking IPMI password hashes, exposing servers to offline password cracking through a decades-old protocol flaw.
Accuris has announced new AI capabilities for BOM Intelligence, part of its Supply Chain Intelligence suite. The launch gives engineering, procurement and supply chain teams a clearer way to move from spotting component risk to acting on it: catching obsolescence early, closing compliance gaps and governing sourcing decisions across programs. Every capability runs on the…
CISA’s new Binding Operational Directive (BOD) 26-04 marks one of the most important changes to federal vulnerability management in years. Rather than requiring agencies to patch every critical vulnerability on the same timetable, the directive prioritizes remediation based on risk, with patch deadlines ranging from three days for the highest-risk vulnerabilities to deferral for those…
Cybersecurity researchers have shared additional technical details about a recently patched critical security flaw impacting Check Point Security Management Server and Multi-Domain Security Management Server (MDS) that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16232 (CVSS score: 9.3), is an authentication bypass in the SmartConsole login process that
Fortinet has announced the FortiGate 1200G series, the newest addition to the FortiGate G series with FortiSASE Outpost, which brings cloud-delivered security services into customer-controlled environments. By combining high-performance threat protection, connectivity, hardware-rooted platform security, and cloud-delivered security capabilities, the solution gives organizations the flexibility to enforce security where it makes the most business sense.…
Ad account theft, the systematic hijacking of Meta Business Manager and Google Ads accounts, has grown into a commodity-driven cybercrime economy complete with tiered pricing, escrow services, and money-back warranties for stolen accounts. Public reporting on this topic tends to focus on drained ad budgets, but according to Mimecast, that’s often a short-lived gain for…
The National Cyber Security Centre has released a detailed framework to assist with incident response and recovery
A breached “no-logs” VPN exposed 58 million connection logs and millions of user, device, and payment records, contradicting its privacy claims. A threat actor on the Altenen cybercrime forum is distributing a 17 GB SQL database claimed to have been stolen from SplitVPN, formerly known as NotVPN, a Russian VPN marketed for bypassing internet censorship.…
1Password has launched 1Password Privileged Access, extending the 1Password Unified Access platform with privileged access management (PAM). It enables just-in-time, least-privilege access to critical infrastructure and is accompanied by the public preview of 1Password Credential Broker for GitHub Actions and new Enterprise Password Manager capabilities for developer and AI security. “Most organizations have more standing…
WhatsApp has launched support for voice and video calls on the web, allowing users to make and receive calls directly from their browser without installing the desktop app. Web Calling (Source: WhatsApp) The new Web Calling feature is designed for people using shared or restricted computers, such as students on campus machines or employees using…
Torq has introduced Torq SOC Brain, a new layer of the Torq AI SOC Platform that continuously learns from historical investigations, analyst decisions, and organization-specific security operations to create a unified, self-learning AI SOC. While most autonomous investigation systems claim to be self-learning, they are, in reality, memory systems, they simply retrieve past cases and…
Here’s how I improve the performance of my Google Pixel, Samsung, and even Motorola. Or at least make it seem that way.
The increased risk that AI-enabled threats pose has led to organizations deciding that a strength-in-numbers approach can improve resiliency. Over the past few months, a number of alliances, programs, and integrations have developed to secure channel organizations and their customers. Among these is ExtraHop, a provider of real-time network intelligence and modern network detection and…
Root Evidence has launched the Evidence Platform, a vulnerability management platform that prioritizes vulnerabilities based on evidence of real-world exploitation and financial impact rather than severity scores alone. The platform is designed to help security teams focus on the vulnerabilities most likely to contribute to ransomware, business disruption, and financial loss. “The cybersecurity industry has…
The security benefits of multifactor authentication (MFA) are well-known, yet MFA continues to be poorly, sporadically, and inconsistently implemented, undercutting its effectiveness as a security tool while often saddling users with an extra workflow burden — one of many obstacles to MFA’s success. Frequent news stories that describe innovative ways to circumvent MFA don’t help, such as…
Abnormal AI has announced the expansion of its Behavioral Security Platform across the enterprise, introducing three new products: Identity Threat Protection, AI Governance, and Infiltration Prevention. Together, the launch extends the behavioral AI that already secures over 4,500 customers1 to the identities, AI systems and onboarding pipeline that attackers increasingly exploit. Additionally, customers can now…
Mend.io has announced new capabilities across Mend AI and Mend AppSec to help organizations respond faster to both application risk and the expanding attack surface created by AI. Mend.io’s latest enhancements help teams identify meaningful risk, reduce manual investigation, accelerate response and extend protection from development into production. As development accelerates, security teams face mounting…
Realm Security has announced two new capabilities. Detection Integrity proves that reducing SIEM log volume never breaks a threat detection. New search inside Realm Data Haven, the platform’s searchable retention layer, makes the data you keep out of the SIEM directly queryable when an analyst needs it. Together, they let teams cut ingestion cost and…
Tines has launched Tines 3B, an AI-native platform for building, running and governing enterprise workflows, applications and agents securely at scale. AI has made it possible for every employee to build software in minutes. The result is an explosion of vibe-coded software spread across the enterprise, much of it built outside traditional IT processes and…
I am a bit late with this summary, but this week Apple released updates to all its operating systems and Safari. The Safari update, as usual, targets macOS prior to macOS 26. macOS updates covered the two older versions (14 and 15), while other operating system patches only covered the current 26 versions. A total of 187…
Ransomware attacks were up year over year in June for the fourth consecutive month, according to the NCC Group, though attacks increased just 3% in Q2 2026 versus the previous quarter. VPNs and other network edge devices continue to be prime initial access targets. And an autonomous AI agent enters the fray. Here is a…
ZeroFox has launched HNTR, a new AI-first platform that brings digital risk protection and threat intelligence together to discover, validate, and disrupt threats, alongside the new platform’s first application, HNTR Executive Protection. HNTR is built on more than a decade of operational experience and threat data collected across the open, surface, deep, and dark web,…
Reco has announced an expansion of AI Runtime, a core component of the Reco Platform. This update adds browser-based enforcement, real-time prompt analysis and blocking, and automated remediation to the Reco Platform. Every agent an enterprise runs carries a blast radius: the apps it can reach, the permissions it inherited, the connections it can trigger…
Infoblox has announced its entry into the external attack surface management (EASM) market. Together, with the introduction of Supply Chain Intelligence, the launch expands the Infoblox Exposure Management portfolio, helping organizations identify, prioritize and reduce exposures across both their own internet-facing assets and the internet-facing assets of their critical vendors before attackers can exploit them.…
Source code for the Flying Eagle Android remote access trojan (RAT) framework is circulating through criminal Telegram channels. Hunt.io and independent researcher NetAskari traced matching control panels and certificates to 170 internet servers. They linked the framework to a fake “公安一网通办” Public Security service application targeting Android users in China. The kit supports payment-password
Japan’s leading automotive aftermarket retailer uses Rimini Smart Path to accelerate innovation without disrupting its core SAP ECC and Oracle Database systems
OpenAI on Tuesday revealed the rogue artificial intelligence (AI) agent that escaped its sealed evaluation environment and broke into Hugging Face’s production environment, and also hacked multiple third-party accounts and services as part of the attack. The latest disclosure shows that the security incident, which stemmed from an internal security test, was more extensive in…
DXC Technology NYSE: DXC, a leading enterprise technology and innovation partner, today announced a strategic partnership with ElevenLabs, the AI company specialising in audio…
The Australian Electric Vehicle Association AEVA has delivered a comprehensive suite of policy solutions to the Federal Government, urging immediate legislative action to…
New integration with Stripe Capital provides eligible businesses with a fast and flexible financing option, streamlines cashflow and improves flexibility
A pull request lands with a tidy bug report in the description. A bot reads it before any person does, pulls a few shell commands out of it, gets them approved, and posts the output back on the thread. The maintainer reads the whole exchange the next morning. Elad Meged, a founding engineer at Novee…
Australian organisations and their customers disagree about what makes good service, according to the 2026–27 Australia and New Zealand Contact Centre Decision-Makers’ Guide,…
New capability reveals the reasoning behind every AI-driven forecast, recommendation, and inventory decision in ActivePlanning, deepening planner trust by turning hours of…
AI is enabling ever more sophisticated online frauds. According to industry leader Entrust, the response requires a lifecycle approach which puts identity management at the…
For years the slow part of your home internet was the line coming into the house. That has flipped.
A ransomware hit lands a chemical plant in a safe state. Nobody is hurt, the site holds steady, and the operators begin the restart. The systems stay down. Every attempt to bring them online meets encrypted processes and altered configurations. The outage runs into weeks, and the losses travel down the supply chain in both…
New generally available offering makes Rapid7 the first major security operations platform to connect GRC workflows with live SecOps data in one platform
New E7 readiness offer secures the data and the agents driving adoption, so organisations can move faster on Microsoft’s newest tier
Specter is a Flipper Zero app that finds powered NFC readers by listening for the radio field they give off. The readers it hunts work at 13.56 MHz. The Flipper’s own chip does the sensing The onboard ST25R3916 carries a hardware external-field detector, the same circuit that lets the device emulate a card and register…
By: Micah DeHarty, Intelligence Team The Evolution of Remote Access Tool Abuse: From Single Payloads to Multi-Stage Campaigns Cofense Intelligence has observed threat actors abusing legitimate remote access tools (RATs) using multiple attack stages to gain malicious access to victim machines, establish persistence in enterprise networks, and sell access to infected machines and networks. This…
By: Micah DeHarty, Intelligence Team The Evolution of Remote Access Tool Abuse: From Single Payloads to Multi-Stage Campaigns Cofense Intelligence has observed threat actors abusing legitimate remote access tools (RATs) using multiple attack stages to gain malicious access to victim machines, establish persistence in enterprise networks, and sell access to infected machines and networks. This…
New research from Konica Minolta Australia has found that 56 per cent of Australian organisations and 52 per cent of New Zealand organisations experienced a print-related…
A credential expired. An AI agent kept using it anyway, and a mid-sized company’s systems went down for a quarter’s worth of trouble before anyone traced the failure back to a non-human account no one had been logging. That agent could reach customer records, source code, and HR files the whole time. The tools that…
Beta release versions of two npm packages in the @joyfill namespace have been compromised to deliver a remote access trojan (RAT) associated with the DEV#POPPER malware family. The list of affected packages is as follows – @joyfill/layouts@0.1.2-2773.beta.0 @joyfill/components@4.0.0-rc24-2773-beta.4 The two packages “contain an import-time JavaScript implant that resolves encrypted code
Jabra flew its head of new product development to Sydney to launch a headset with no microphone arm on it, then spent an hour explaining why the part you can no longer see is…
New extremely portable Thunderbolt™ 4 capture and playback models with HDMI and dual 12G-SDI for 10-bit fill and key playback!
A phone backup app asks for storage, contacts, SMS, and call logs. A device-management tool asks for more than that. Run either one past a machine learning malware scanner and it comes back flagged. Six Android detectors in wide research use, including Drebin, MalScan, and MaskDroid, produced that result on more than half the apps…
Meta chief executive says discourse around AI isn’t optimistic enough and that banning foreign open-source models won’t be productive.
A coordinated cyber attack disrupted water systems across more than 30 Minnesota communities. Here is what defenders need to know about the attack so far. This FAQ also details recent cyberactivity targeting internet-exposed PLCs, and how to protect exposed infrastructure. Key Takeaways A coordinated “cyberattack” targeted water and wastewater systems across more than 30 Minnesota…
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Fortinet has expanded its firewall family with new high-speed boxes that, when combined with the vendor’s FortiSASE Outpost software, extend cloud-based SASE (secure access service edge) capabilities and policy enforcement to on-premises environments. The new midrange FortiGate 1200G series supports 10G, 25G, and 100G connectivity options and delivers 397 Gbps firewall throughput. It’s aimed at…
The ‘no man’s land’ beneath the OS on enterprise servers is becoming the malicious actors’ next target. Attackers are gaining a foothold into broader data center environments by exploiting Baseboard Management Controllers (BMCs) that are largely unprotected, still running decades-old protocols and susceptible to a vulnerability published 13 years ago, according to data center security…
FortiGate 1200G with FortiSASE Outpost brings ASIC-powered threat protection and cloud-delivered SASE to customer-controlled environments.
Security leaders have spent the last decade building controls around people and code. Shift-left practices caught vulnerabilities earlier in the development cycle. Zero trust reduced lateral blast radius. Developer tooling added guardrails at the IDE. The architecture was sound — for an enterprise where humans wrote code and humans ran applications. That enterprise no longer…
The AI pioneer now faces growing distrust from startup founders and researchers over competitive tactics, guardrails and lack of support for open-weight models.
Leasing office space can feel straightforward at first. You find a suitable location, check the floor area, compare the rent and decide whether the space suits your team. But…
Australian organisations will spend more than AU$7.5 billion on information security this…
Arista has patched a VeloCloud Orchestrator (VCO) security hole that has been actively leveraged in the wild, one that the vendor says “may allow a remote attacker to access privileged internal functionality and impact the VCO host.” The Arista security advisory added that the hole “may compromise the confidentiality, integrity, and availability of the orchestrator…
New customer acquisitions grew more than 80% as organidations increasingly adopt new identity security solutions designed for the age of AI
New research shows enterprise preparation continues to outpace implementation, with deployment advancing just two percentage points over the past year.
Carcano, who served as Nozomi’s original CEO, resumes the role following a decade of growth under Edgard Capdevielle, who transitions to executive advisor after leading the…
One year on from our last Secure by Design update, we’re changing the format: deeper, per-product updates. First up: the firewall.
Between January and June 2026, TrendAI™ tracked more than 35,000 fake sites exploiting the 2026 FIFA World Cup, spanning counterfeit merchandise shops, cloned ticket pages, and bogus free-streaming sites, which together drew roughly 1.48 million visits from Japan.
Snowflake establishes the foundation for trusted agent interoperability with new AI security innovations.
Dell PowerStore brings NVMe all-flash storage to Nutanix with transparent Prism integration and independent scaling. Available now.
Qualys, Inc. NASDAQ: QLYS, a leading provider of cloud-based IT, security and compliance solutions, has published its Cloud Security Forecast 2026 report, warning that cloud…
Chainguard announced the expansion of Athena, the industry coalition for the orchestrated defense of open source software, adding new members, including Akamai, Black Duck,…
Excellent. Let’s do it properly. GitHub Copilot Is Redefining the Enterprise Attack Surface Inside Visual Studio Code As GitHub Copilot evolves from a coding assistant into an AI agent capable of understanding repositories, invoking development tools, and executing multi-step tasks, security researchers are warning that software development environments are entering an entirely new security era.…
Retail supply chains have spent the last few years absorbing one disruption after another — shipping delays, unpredictable demand swings, rising costs of capital, and customers…
Reported by Bleeping Computer. A proof-of-concept exploit was released for a vulnerability in Windows Active Directory Certificate Services (AD CS) known as Certighost, potentially allowing authenticated attackers to compromise an entire Windows domain.
As reported by Bleeping Computer, Arista released a patch for a critical command injection vulnerability affecting on-premises VeloCloud Orchestrator (VCO) deployments.
As reported by Dark Reading, Operation Cronos, a significant international law enforcement effort, successfully dismantled LockBit, once one of the most dominant ransomware-as-a-service (RaaS) operations globally.
Bleeping Computer disclosed that hackers are actively exploiting a critical vulnerability in the FastJson open-source Java library, enabling remote code execution without requiring user interaction or elevated privileges.
Plus, the DOT moves to spare space companies from environmental reviews, and long live British politics’ ‘Hot Podium Guy.’
Germany’s Federal Office for Information Security (BSI) published a technical analysis of Windows Hello for Business, detailing how the system performs biometric identification and highlighting potential security vulnerabilities.
Italian organizations faced 148 confirmed ransomware attacks in the first half of 2026, with the manufacturing sector being the most frequently targeted.
Search engines as we remember them are dying fast. These days, even if someone types a query into Google search, the answer that pops up is increasingly likely to be a…
Security researcher Aleksandr Krasnov reveals dormant non-human identities can create security blind spots and releases NHI Hound, an open source tool to sniff out trust paths.
As outlined in Cyber Insider, a malicious Steam Workshop map for the game MECCHA CHAMELEON exploited a vulnerability in the game’s mod-loading system to deliver malware to players’ computers.
The Register reports that Google unveiled its own taxonomy for categorizing cybercrime groups, a move that appears to sideline a previous industry-wide effort led by Microsoft to standardize threat actor names.
CubePilot, an Australian firm that designs flight controllers for drones (UAVs), announced a severe operational disruption caused by a DNS hijacking attack. […]
Ask a room of Australian IT leaders what’s holding up their AI plans and you’ll hear about GPU allocation, model licensing, maybe skills shortages. Fair enough — those are…
Lots of Internet-exposed server management controllers are subject to offline password-cracking attacks — and adversaries have taken note.
Anthropic researchers used Claude Mythos Preview to find new weaknesses in two cryptographic methods, the company said Tuesday, including one that is being considered by the National Institute of Standards and Technology for both traditional and quantum computing. In a blog post detailing the work, the frontier AI company called it a “substantial” research advancement,…
Threat actors are actively exploiting a remote code execution (RCE) vulnerability in the FastJson Java library, placing organizations across multiple industries at risk. The flaw affects FastJson versions 1.2.68 through 1.2.83 and enables attackers to execute malicious code without requiring user interaction, elevated privileges, or traditional Java deserialization gadget chains. Researchers have observed active attacks…
JFrog has confirmed that OpenAI models exploited zero-day vulnerabilities in self-hosted Artifactory servers to help escape an isolated testing environment and gain access to the internet before attacking Hugging Face. […]
OpenAI’s recent AI agent sandbox escape proves traditional security principles matter more than ever: limit access, isolate execution, log everything.
Researchers propose focusing on identification of certain cognitive elements in LLMs that indicate when AI systems may take an unwanted action.
We test dozens of gadgets each year – these are some of our favorite keychain accessories we’re still using.
Mate Security secures $35M in Series A funding after 500% growth, as Fortune 500 demand grows for its agentic AI security operations platform worldwide.
Researchers uncovered the 200,000-device Dysphoria botnet, which uses Ethereum and Solana domains to hide its command servers. QiAnXin XLab, jointly with China’s CNCERT, disclosed Dysphoria, a botnet that has compromised roughly 200,000 devices worldwide and uses Ethereum and Solana blockchain domain names to hide its command infrastructure. The botnet evolved from jackskid and fbot malware…
