UK unveils £90m cybersecurity funding at CYBERUK to boost SME resilience, promote Cyber Essentials and a new Cyber Resilience Pledge, sparking industry debate
AI, Global Security News
Google Chat becomes an agent interface for Workspace
Google wants its Chat app to become the main interface for office workers to interact with AI agents within its Workspace suite. “We’re making Chat the centerpiece through which people talk, not just with other people, but with all their agents, whether they are in Workspace or built on our platform,” Google Cloud CEO Thomas…
AI, Global Security News
Inside Caller-as-a-Service Fraud: The Scam Economy Has a Hiring Process
Fraud operations now operate like call centers, complete with hiring, training, and performance tracking. Flare reveals how cybercriminals manage “Caller-as-a-Service” operations like a professional sales team. […]
AI, Apps, Exploits, Global Security News, Network Security, Risk Management
Microsoft out-of-band updates fixed critical ASP.NET Core privilege escalation flaw
Microsoft fixed critical ASP.NET Core vulnerability, tracked as CVE-2026-40372 (CVSS score of 9.1), that lets attackers escalate privileges. Microsoft released out-of-band updates to address a serious ASP.NET Core vulnerability tracked as CVE-2026-40372 (CVSS score of 9.1). Microsoft fixed the flaw in ASP.NET Core version 10.0.7. An attacker could exploit the flaw to gain SYSTEM-level privileges, access…
Global Security News
Mustang Panda Hits India and S. Korea with Updated LOTUSLITE Backdoor
Acronis reveals Mustang Panda is using a new LOTUSLITE backdoor to target Indian banks and Korean diplomats. Learn how this DLL sideloading attack works.
AI, Global Security News
Prove Identity Platform connects verification, authentication, and fraud prevention
Prove has launched the Prove Identity Platform, turning identity verification into an ongoing, real-time process for users, businesses, and AI agents. AI agents are already initiating real transactions on behalf of real people. OpenAI and Stripe launched the Agentic Commerce Protocol in September. Visa named Anthropic, OpenAI, and Perplexity as agentic commerce partners. As that…
AI, Global Security News, Network Security
Gigamon Showcases Momentum in the Network Observability Market, as AI and Hybrid Cloud Drive Demand for Deep Observability
GUEST RESEARCH: Network observability market growth projected to be 6.5 percent to $4.39 billion by 2029, with AI-, cloud-, and security-driven segments poised to double or triple that pace
AI, Global Security News
Ping Identity Wins 2026 Google Cloud Security Partner of the Year Award for Identity & Access Management
COMPANY NEWS: Award highlights joint leadership in modernising and extending identity controls into real-time AI-driven environments
Global Security News
Anthropic Probes Possible Unauthorized Access to Mythos AI Model
The incident could complicate efforts to keep a tight lid on a tool that has spooked the White House and businesses.
AI, Global Security News
Rubrik Secures and Accelerates AI Agents on Google Cloud
New Rubrik Agent Cloud Integration with Gemini Enterprise Agent Platform provides a unified control layer for AI agent operations
AI, Exploits, Global Security News, Network Security, Risk Management
Critical BRIDGE:BREAK flaws impact Lantronix and Silex Technology converters
22 BRIDGE:BREAK flaws hit Lantronix and Silex Technology converters, exposing approximately 20,000 devices to hijacking and data tampering. Researchers at Forescout Research Vedere Labs found 22 BRIDGE:BREAK flaws in serial-to-IP devices from Lantronix and Silex Technology. Serial-to-IP converters, also known as serial device servers, connect legacy serial equipment to modern IP networks for remote monitoring…
AI, Cybersecurity, Global Security News, malware, Network Security
New Mirai variants target routers and DVRs in parallel campaigns
Hidden inside newly discovered botnet malware is an unusual message from its creator: “AI.NEEDS.TO.DIE”. Dubbed “tuxnokill” by researchers at Akamai, the malware is one of two fresh Mirai botnet variants documented this month by major cybersecurity firms and, judging by the aforementioned hard-coded string, this particular variant might have been coded the old-fashioned way. “Tuxnokill”…
AI, Global Security News, Risk Management
Acronis GenAI Protection gives MSPs control over AI usage and data risks
Acronis has launced Acronis GenAI Protection, a monitoring and security solution that enables managed service providers (MSPs) to control generative AI usage across client environments, preventing sensitive data exposure and protecting against malicious prompt manipulation. Acronis GenAI Protection represents the initial phase of Acronis Cyber Workspace, with additional capabilities planned for release to deliver a…
Global Security News, Network Security
Check Point Software Ranks #1 in Miercom’s 2026 Hybrid Mesh Network Security
COMPANY NEWS: Miercom’s 2026 Hybrid Mesh Network Security Assessment Shows Check Point achieving the highest overall security effectiveness score of 99.8%, highlighting its industry-leading threat prevention
AI, APAC, Compliance, Cybersecurity, Europe, Global Security News, Government & Policy, malware, Risk Management
More Attack Context for Faster Triage, Response, and Hunting. Now Available to Every SOC
ANY.RUN has expanded access to Threat Intelligence capabilities for SOC and MSSP teams, backed by live attack data from 15,000 organizations. Here’s how your team can test TI’s impact on triage quality, response speed, and threat hunting workflows. See How Threat Intelligence Accelerates Your SOC ANY.RUN now offers 20 premium requests in Threat Intelligence Lookup and YARA Search as part of the Free plan. You can get immediate threat context for over 40 types…
AI, Global Security News
Surge in Silent Subject Phishing Attacks Targets VIP Users
Null subject phishing campaigns bypass filters and target VIPs with QR code and RMM abuse
AI, Global Security News
New npm supply-chain attack self-spreads to steal auth tokens
A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised accounts. […]
AI, Global Security News
Elastic MCP Apps bring security and observability workflows into AI tools
Elastic has announced MCP Apps for Elastic, delivering agent-native UI experiences for security and observability workflows across third-party coding tools and chat clients. The new MCP Apps enable teams to investigate threats, diagnose system behavior, and act on data directly within the AI tools they already use, without switching tools or stitching together separate systems.…
AI, Data Breaches, Global Security News
Bluesky Back Online After DDoS Attack, as Iran-Linked 313 Team Takes Credit
Bluesky is back online after a roughly 24-hour DDoS attack disrupted services, with the Iran-linked 313 Team claiming responsibility and no data breach reported.
Global Security News
Microsoft Teams to get efficiency mode on PCs with limited resources
Microsoft is preparing to roll out a new Efficiency Mode for Microsoft Teams for systems with limited CPU and memory resources to improve app responsiveness. […]
AI, Global Security News, Risk Management
Gemini Enterprise update brings AI agents into collaborative workflows
Google has updated its Gemini Enterprise app, adding new ways for office workers to build, manage, and interact with AI agents. The company also rolled out additional tools for IT teams to govern the use of agents via the new Gemini Enterprise Agent Platform. Google first unveiled Gemini Enterprise last year, pitching it as a…
AI, Apps, Compliance, Data Breaches, Endpoint, Global Security News, Network Security, privacy
Attacking the MCP Trust Boundary
Every secure API draws a line between code and data. HTTP separates headers from bodies. SQL has prepared statements. Even email distinguishes the envelope from the message. The Model Context Protocol (MCP), the fast-growing standard for connecting AI agents to external services, inherits that gap from the models it sits on top of. Its central…
AI, Global Security News
Why ANZ Enterprises Need Better Agent-to-Agent Communication
GUEST OPINION: As enterprises move AI from experimentation to production, they face a growing connectivity and governance challenge. Organisations no longer route prompts to a single LLM, but orchestrate complex systems where agents communicate with external tools via MCP and collaborate with other agents using emerging agent communication protocols, such as Agent to Agent (A2A).
AI, Apps, Global Security News, malware, Network Security
NFC tap-to-pay gets tapped by hackers
Cyber crooks are abusing a trojanized Android payment application to steal near field communication (NFC) data and PINs, enabling cloning of payment cards and draining victim accounts. According to ESET researchers, a new variant of the NGate malware has been infused into the HandyPay NFC-relay application to transfer NFC data to the attacker’s device and…
AI, APAC, Data Breaches, Global Security News
DetectFlow: Deploying Detections at Scale Without the Engineering Overhead
The Problem: Achieving Threat Detections at Scale At SOC Prime, we have spent over a decade making detection engineering easier for organizations of every size. Each year, as threats multiply and environments grow more complex, the traditional approach puts SOC Managers in an impossible position — responsible for coverage they cannot achieve with the tools…
Apps, Exploits, Global Security News
Progress Software fixes sneaky WAF bypass vulnerability (CVE-2026-21876)
Progress Software has fixed a slew of high-severity vulnerabilities in MOVEit WAF and LoadMaster, including a flaw (CVE-2026-21876) that may allow attackers to bypass firewall detection. MOVEit WAF (web application firewall) is designed to protect Progress’s managed file transfer platform MOVEit Transfer from web-based attacks. (A zero-day vulnerability in MOVEit Transfer was infamously exploited in…
Global Security News
Former Ransomware Negotiator Pleads Guilty to Working For BlackCat Cyber Gang
A former ransomware negotiator has pleaded guilty to abusing his position by working with noted cybercrime group BlackCat
AI, Cybersecurity, Global Security News
Lotus Wiper Malware Targets Venezuelan Energy Systems in Destructive Attack
Cybersecurity researchers have discovered a previously undocumented data wiper that has been used in attacks targeting Venezuela at the end of last year and the start of 2026. Dubbed Lotus Wiper, the novel file wiper has been used in a destructive campaign targeting the energy and utilities sector in Venezuela, per findings from Kaspersky. “Two…
AI, Global Security News, Network Security
Toxic Combinations: When Cross-App Permissions Stack into Risk
On January 31, 2026, researchers disclosed that Moltbook, a social network built for AI agents, had left its database wide open, exposing 35,000 email addresses and 1.5 million agent API tokens across 770,000 active agents. The more worrying part sat inside the private messages. Some of those conversations held plaintext third-party credentials, including OpenAI API…
AI, Apps, Global Security News
Tencent’s QClaw AI agent app arrives on Windows and macOS
Tencent has opened an international beta of QClaw, an AI agent application aimed at consumers in Canada, Japan, Singapore, South Korea, and the United States. The first wave is capped at 20,000 users. Additional markets are scheduled to follow. QClaw runs on Windows and MacOS. Setup takes about three minutes and involves downloading the application,…
Global Security News
Microsoft traces Universal Print issues to Graph API code change
Microsoft says that an ongoing Universal Print sharing issue that prevents users from creating some printer shares is due to a Microsoft Graph API code change. […]
AI, Compliance, Europe, Global Security News, privacy, Risk Management
Meta to track employee keystrokes, screen activity to train AI agents
Meta plans to track US employees’ mouse movements, clicks, keystrokes, and screen activity to train workplace AI agents, according to Reuters, offering an early look at how far major tech companies may go to build systems that can automate knowledge work. The company plans to do so through a tool called Model Capability Initiative, or…
AI, Apps, Exploits, Global Security News
Phishing reclaims the top initial access spot, attackers experiment with AI tools
Phishing returned as the leading method attackers used to break into organizations in the first quarter of 2026, accounting for over a third of engagements where initial access could be determined, according to Cisco Talos. It is the first quarter phishing has led the category since Q2 2025, when exploitation of public-facing applications took over…
AI, Compliance, Cybersecurity, Exploits, Global Security News, malware, Network Security, Risk Management, Venture
The AI era demands a different kind of CISO
Many security leaders are still operating with frameworks built for a different era. For years, success was measured by fixed checkpoints, such as passing audits, closing vulnerabilities, and maintaining compliance. Those markers still have value, but they were designed for a threat landscape that moved in predictable, linear ways. Today, that landscape is shifting in…
Global Security News
New GoGra malware for Linux uses Microsoft Graph API for comms
A Linux variant of the GoGra backdoor uses legitimate Microsoft infrastructure, relying on an Outlook inbox for stealthy payload delivery. […]
Global Security News
Researchers Uncover ProxySmart Software Powering 90+ SIM Farms
Infrawatch says ProxySmart platform enables SIM farm activity at “industrial scale”
AI, Compliance, Global Security News
OneDrive updates focus on AI, access control, and compliance
Microsoft OneDrive’s recent updates focus on improving intelligence, collaboration, and administrative control. “Last year, we made a promise: your files should work for you, not the other way around. That meant reimagining OneDrive not just as a place to store files, but as an intelligent layer that surfaces what matters, eliminates busy work, and enables…
AI, Global Security News, privacy
The smartest ways to sync your Android and computer clipboards
For all the fancy-schmancy things our modern-day technology promises to do for us, one thing Google has yet to give us is a simple and reliable way to sync the clipboards on our Android phones and computers. It’s such a powerful feat to have at your fingertips, when it works well — ’cause you can…
Global Security News
Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug
Microsoft has released out-of-band updates to address a security vulnerability in ASP.NET Core that could allow an attacker to escalate privileges. The vulnerability, tracked as CVE-2026-40372, carries a CVSS score of 9.1 out of 10.0. It’s rated Important in severity. An anonymous researcher has been credited with discovering and reporting the flaw. “Improper verification of…
AI, Apps, Cybersecurity, Exploits, Global Security News, Government & Policy, Network Security
Anthropic bets on EPSS for the coming bug surge
Anthropic’s Mythos has intensified a problem that vulnerability management programs were already struggling to contain: too many vulnerabilities and not enough clarity about which ones matter. What changes with Mythos — and the AI-based class of vulnerability discovery systems it represents — is the speed at which software flaws can be found and exploited. That…
Global Security News
Microsoft releases emergency patches for critical ASP.NET flaw
Microsoft has released out-of-band (OOB) security updates to patch a critical ASP.NET Core privilege escalation vulnerability. […]
Global Security News, Risk Management
UK Faces a Cyber ‘Perfect Storm’ Driven by Tech Advances and Nation State Threats, NCSC Warns
The convergence of global tensions and rapid technological change is driving a new era of cyber risk, the NCSC warns
Cybersecurity, Global Security News, malware
Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles
Cybersecurity researchers have discovered a new variant of a known malware called LOTUSLITE that’s distributed via a theme related to India’s banking sector. “The backdoor communicates with a dynamic DNS-based command-and-control server over HTTPS and supports remote shell access, file operations, and session management, indicating a continued espionage-focused capability set rather than
AI, Global Security News, Government & Policy, malware, Network Security
Venezuela energy sector targeted by highly destructive Lotus wiper
Lotus Wiper hit Venezuelan energy systems, used scripts to disable defenses, then erased all data beyond recovery. Kaspersky researchers found Lotus Wiper targeting Venezuela’s energy and utilities sector amid regional tensions in 2025–2026. Attackers first used batch scripts to weaken systems, disable defenses, and prepare the environment. Then they deployed the wiper, which erased recovery…
AI, Global Security News
Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape
A critical security vulnerability has been disclosed in a Python-based sandbox called Terrarium that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-5752, is rated 9.3 on the CVSS scoring system. “Sandbox escape vulnerability in Terrarium allows arbitrary code execution with root privileges on a host process via JavaScript prototype chain traversal,” according…
AI, Global Security News, Network Security
The 6 Best Partner Relationship Management (PRM) Software in 2026
Partner Relationship Management (PRM) software is a type of B2B solution designed to help companies manage and optimize their partner relationships. The best PRM platforms typically include features such as partner management, lead distribution, deal registration, and incentives and rewards management to drive better outcomes. In this guide, we’ll explore the top PRM software solutions…
AI, APAC, Global Security News
Microsoft trims cloud desktop pricing, even as it boosts AI costs
For years now, Microsoft has been doing its level best to move you from desktop Office and Windows to Microsoft 365, Windows 365, and Azure Virtual Desktop (AVD). Since the company first started down this road, however, something changed: the AI revolution, which has become a huge deal for the guys from Redmond. So, it…
AI, Exploits, Global Security News
Over 1,300 Microsoft SharePoint servers vulnerable to spoofing attacks
Over 1,300 Microsoft SharePoint servers exposed online remain unpatched against a spoofing vulnerability that was exploited as a zero-day and is still being abused in ongoing attacks. […]
AI, Endpoint, Global Security News
Kaseya Heads Into Connect with New CEO, API, and AI Strategy
Kaseya is coming into this year’s Connect conference after a year of significant change across its leadership team, platform strategy, and product roadmap. Since the 2025 event, the company has appointed a new CEO, adopted an API-first approach to improve integration across its portfolio, and rolled out new AI-focused product updates. As attendees gather for…
AI, Global Security News
PentAGI: Open-source autonomous AI penetration testing system
Penetration testers have long relied on collections of specialized tools, manual coordination, and documented runbooks to work through a target assessment. PentAGI, an open-source project from VXControl, attempts to automate that entire workflow using a multi-agent AI system that plans, researches, and executes penetration tests with minimal human direction. How the agent system works PentAGI…
AI, Global Security News, privacy
Apple Intelligence flaw kept stolen tokens reusable on another device
Apple claims that Apple Intelligence, a GenAI service provided on its operating systems, is designed with an extra focus on user security and privacy through a two-stage authentication and authorization system using anonymous access tokens. However, researchers from The Ohio State University have identified vulnerabilities in this design, demonstrated on macOS 26.0 (Tahoe), that allow…
AI, Data Breaches, Global Security News
Shadow AI, deepfakes, and supply chain compromise are rewriting the financial sector threat playbook
Financially motivated attacks continued to drive the bulk of cyber incidents against banks, insurers, and payment processors in 2025. Approximately 90% of breaches affecting financial institutions carried a financial motive, with data breaches accounting for roughly 64% of incidents and ransomware making up the remaining 36%. The average cost of a data breach in the…
Global Security News
ISC Stormcast For Wednesday, April 22nd, 2026 https://isc.sans.edu/podcastdetail/9902, (Wed, Apr 22nd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
AI, Global Security News
What a New Apple CEO Will Mean for You and Your Devices
With incoming chief John Ternus, Apple is doubling down on hardware in the age of AI.
AI, Global Security News, Network Security
Adobe builds an ‘agentic content supply chain’ for the AI era
Generative AI is fundamentally (and quickly) shaping how information is discovered and acted on, forcing enterprises to rethink how they engage with both humans and machines. Adobe is responding to this shift, introducing new tools that keep up with evolving branding, surface campaign insights, and speed up content creation. At this week’s Adobe Summit, the…
AI, Cloud Security, Compliance, Cybersecurity, Global Security News, privacy, Risk Management
Winter 2025 SOC 1 report is now available with 184 services in scope
Amazon Web Services (AWS) is pleased to announce that the Winter 2025 System and Organization Controls (SOC) 1 report is now available. The report covers 184 services over the 12-month period from January 1, 2025 – December 31, 2025, giving customers a full year of assurance. This report demonstrates our continuous commitment to adhering to…
AI, Cybersecurity, Exploits, Global Security News, malware, Network Security, privacy, Risk Management
[Guest Diary] Beyond Cryptojacking: Telegram tdata as a Credential Harvesting Vector, Lessons from a Honeypot Incident, (Wed, Apr 22nd)
[This is a Guest Diary by L. Carty, an ISC intern as part of the SANS.edu Bachelor’s Degree in Applied Cybersecurity (BACS) program [1].] Introduction A few weeks ago, my honeypot logged an incident that changed how I think about modern attacks. A threat actor broke into my system using weak SSH credentials and immediately…
Global Security News
Strengthening authentication with passkeys: A CISO playbook
Our passkey rollout took three tries. Here’s a playbook to make your implementation smoother. Categories: Security Operations Tags: CISO, playbook, toolkit, passkeys
AI, Global Security News, Russia
It’s a bird it’s a plane – Oh dear me.
“Excuse me… this is a bit rude.” Firstly with all the negative things happening in the world perhaps a naughty prank can tickle our fancy. Many of the major news agencies have published this story, so what the heck, I will do the same. Here is what happened. Finnish Air Force cadets are facing disciplinary action after…
Global Security News, Venture
Weekly Update 500
Looking back at this milestone video, it’s the audience question towards the end I liked most: “are you happy”? Charlotte and I have chosen a path that’s non-traditional, intense and at times, pretty stressful. There’s no clear delineation of when work starts and ends, no holidays where we don’t work, nor weekends, birthdays or Christmases.…
AI, Global Security News
SpaceX Secures Option to Buy AI Startup Cursor For $60 Billion
After acquiring xAI, the rocket company says close work in coding partnership could lead to combination.
AI, Global Security News
GIGABYTE Collaborates with NVIDIA® on GeForce RTX™ 50 Series and PRAGMATA™ Bundle
GIGABYTE, the world’s leading computer brand, announces the collaboration with NVIDIA for the PRAGMATA™ GeForce RTX 50 Series game bundle across eligible graphics cards, desktops, and laptops powered by NVIDIA GeForce RTX™ 5070 or above GPUs and Laptop GPUs. Powered by NVIDIA Blackwell architecture, the GeForce RTX™ 50 Series GPUs bring game-changing capabilities to gamers.…
Global Security News
John Ternus Has Big Shoes to Fill at Apple. Luckily, Tim Cook Has a Playbook for That.
Cook, too, faced big doubts on whether he could successfully succeed an iconic leader. His early moves are a guide to how it’s done.
AI, Global Security News
Billions on the line: Why SMS-based MFA is no longer fit for Crypto
Cryptocurrency was established with a clear value proposition: decentralisation, transparency and mathematical certainty. However, when it comes to user authentication, many exchanges, wallets and trading platforms still depend on one of the weakest links in digital security: SMS-based multi-factor authentication. For an industry protecting billions of dollars in digital assets, that gap is no longer…
AI, Data Breaches, Global Security News, Government & Policy
French govt agency confirms breach as hacker offers to sell data
France Titres, the government agency in France for issuing and managince administrative documents has disclosed a data breach after a threat actor claimed the attack and stealing citizen data. […]
Global Security News
Ransomware Negotiator Pleads Guilty to BlackCat Scheme
A cautionary tale illustrates why the person negotiating should never be involved with any part of the ransom payment process, experts noted.
AI, Apps, Data Breaches, Endpoint, Exploits, Global Security News, Network Security, Risk Management
$293M KelpDAO Crypto Heist Exposes Cross-Chain Weaknesses in DeFi
A $293 million cryptocurrency theft has rocked the decentralized finance (DeFi) ecosystem, with KelpDAO at the center of an attack now suspected to be linked to North Korea’s Lazarus Group. The attack highlights how quickly sophisticated attackers can exploit weaknesses in cross-chain infrastructure. “Preliminary indicators suggest attribution to a highly sophisticated state actor, likely DPRK’s…
AI, Data Breaches, Exploits, Global Security News
Former DigitalMint ransomware negotiator pleads guilty to extortion scheme
A South Florida man pleaded guilty to conspiring with multiple ransomware affiliates to commit attacks against and extort payments from the same U.S. companies he represented as a ransomware negotiator for DigitalMint in 2023, the Justice Department said Monday. Angelo John Martino III shared confidential information about victim organizations’ internal negotiating positions and insurance policy…
Global Security News
Quiet “micro-indulgences” show signs of resilience as households trade down on big ticket spending, Experian analysis reveals
New analysis suggests Australians are reshaping discretionary budgets toward smaller feel‑good purchases and experiences amid ongoing cost‑of‑living pressure.
Global Security News
Quiet “micro-indulgences” show signs of resilience as households trade down on big ticket spending, Experian analysis reveals
New analysis suggests Australians are reshaping discretionary budgets toward smaller feel‑good purchases and experiences amid ongoing cost‑of‑living pressure.
AI, Cybersecurity, Global Security News
Ransomware negotiator caught secretly assisting BlackCat extortion scheme
Angelo Martino pleaded guilty to helping BlackCat ransomware group while acting as a ransomware negotiator. Another U.S. cybersecurity expert, Angelo Martino, admitted helping the BlackCat ransomware group while working as a ransomware negotiator. Angelo Martino (41) admitted helping the BlackCat ransomware group while working for a U.S. incident response firm. “A Florida man, formerly employed…
AI, APAC, Apps, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security
Thousands of Apache ActiveMQ instances still unpatched, weeks after an actively exploited hole discovered
Two weeks after researchers using an AI tool discovered a major hole in Apache’s ActiveMQ messaging middleware, there are still thousands of unpatched instances open to the internet, more evidence that many application developers and IT leaders aren’t paying close attention to warnings about vulnerabilities. While the remote code injection vulnerability [CVE-2026-34197] was revealed on…
AI, Global Security News
Why Australia’s AI boom demands a new era of energy efficiency
GUEST OPINION: As we commemorate Earth Day 2026 under the theme of “Our Power, Our Planet,” business leaders in Australia are facing a profound reality check.
AI, Global Security News
You can now test and compare AI models on LinkedIn
LinkedIn is testing a new AI feature, Crosscheck, which allows users to compare several popular AI models directly on the platform. Users enter prompts into Crosscheck and receive two different responses generated by competing AI models from companies such as OpenAI, Anthropic, and Google. After the user selects the best response, the model behind each…
Global Security News
Generative Engine Optimisation: The Next Frontier for Australian Tech Companies
Most Australian tech companies are still optimising for a search engine that their buyers are no longer using. The shift has already happened, and the gap between brands that understand it and those that don’t is widening every quarter.
AI, Global Security News
Thunderbird 150 arrives with encrypted message search and OpenPGP improvements
Released today, Thunderbird 150.0 brings eight new features, a round of bug fixes, and security patches that cover the web engine underlying the email client. Thunderbird 150.0 runs on Windows 10 or later, macOS 10.15 or later, and Linux with GTK+ 3.14 or higher. Encrypted email gets more useful Two of the most notable additions…
AI, Global Security News
TrendAI partners with Anthropic to extend leadership in AI security
Trend Micro’s enterprise business accelerates its transformation as AI security category leader
AI, Exploits, Global Security News
Exploits Turn Windows Defender into Attacker Tool
Three proof-of-concept exploits are being used in active attacks against Microsoft’s built-in security platform; two are unpatched.
Global Security News
DroneShield – Quarterly Activities/Appendix 4C Cash Flow Report
COMPANY NEWS: DroneShield Limited (ASX:DRO) (DroneShield, DRO, or the Company) is pleased to release its business update and Appendix 4C for the three-month period ended 31 March 2026 (1Q2026).
Cybersecurity, Global Security News
How U.S. Companies Scale Faster with Agile Thinking and Global Talent
Learn how U.S. companies build scalable agile development teams using global talent. Discover strategies for workflows, collaboration, and faster product growth. There’s a difference between moving fast—and staying fast. Many companies launch with speed. Small teams, quick decisions, rapid execution. But as the business grows, that speed often fades. Processes become heavier. Communication slows. Releases…
AI, Global Security News, Network Security, Russia
Scottish man pleads guilty to attack spree that created Scattered Spider’s notoriety
A core leader of the hacker subset of The Com responsible for a series of high-profile phishing attacks and cryptocurrency thefts from September 2021 to April 2023 pleaded guilty to federal charges, the Justice Department said Friday. Tyler Robert Buchanan of Dundee, Scotland, pleaded guilty to conspiracy to commit wire fraud and aggravated identity theft.…
AI, Cybersecurity, Global Security News, Risk Management
Lawmakers ponder terrorism designations, homicide charges over hospital ransomware attacks
Lawmakers at a hearing Tuesday explored ways to beef up punishments for ransomware attacks against hospitals, possibly by labeling them as more severe crimes. One proposal floated at the House Homeland Security Committee hearing, to treat ransomware attacks as terrorism, is an idea Congress has flirted with before. Another would be to press prosecutors to…
AI, Global Security News, malware
New Lotus data wiper used against Venezuelan energy, utility firms
A previously undocumented data-wiping malware dubbed Lotus was used last year in targeted attacks against energy and utilities organizations in Venezuela. […]
AI, Data Breaches, Exploits, Global Security News
North Korea’s Lazarus APT stole $290M from Kelp DAO
North Korea-linked Lazarus Group stole $290M from Kelp DAO by abusing LayerZero. A second $95M attempt was stopped. Hackers tied to the North-Korea linked group Lazarus APT carried out a $290M crypto theft targeting Kelp DAO. Earlier today we identified suspicious cross-chain activity involving rsETH. We have paused rsETH contracts across mainnet and several L2s…
AI, Global Security News
SpeakON makes a Bluetooth voice tool that actually understands how people communicate
There’s no shortage of AI-powered “note-taking” devices right now. From meeting recorders to transcription tools, the category is crowded with products that promise to capture everything you say and turn it into something useful later. SpeakON takes a different path – and it’s a smarter one.
Global Security News, malware, Network Security
SystemBC C2 Server Reveals 1,570+ Victims in The Gentlemen Ransomware Operation
Threat actors associated with The Gentlemen ransomware‑as‑a‑service (RaaS) operation have been observed attempting to deploy a known proxy malware called SystemBC. According to new research published by Check Point, the command-and-control (C2 or C&C) server linked to SystemBC has led to the discovery of a botnet of more than 1,570 victims. “SystemBC establishes SOCKS5 network…
AI, Global Security News, Network Security
VirtualBox 7.2.8 is out with Linux kernel 7.0 support and crash fixes
Oracle shipped VirtualBox 7.2.8 on April 21, 2026, as a maintenance release covering crashes, networking problems, clipboard issues, and extended Linux kernel compatibility. The update touches the VMM layer, NAT networking, graphics, UEFI, and both Linux and Windows guest support. VMM and core stability A Guru Meditation error carrying the code VERR_IEM_IPE_4 is fixed in…
AI, Data Breaches, Global Security News, malware, Network Security, Risk Management
130K Users Compromised by StealTok Campaign That Uses Fake TikTok Downloaders
A widespread browser extension campaign is quietly compromising users by disguising data-stealing tools as TikTok video downloaders. “While many people see browser extensions as harmless little widgets, oftentimes they have no idea who is actually behind these extensions, and what capabilities they contain within their source code,” said Natalie Zargarov, security researcher at LayerX in…
Global Security News, Risk Management
Microsoft Vulnerabilities Drop, But Critical Flaws Double, Report Warns
Microsoft vulnerabilities fall, but critical flaws double, BeyondTrust report highlights rising risk in Microsoft Office, Azure, and cloud systems.
Global Security News, Risk Management
Microsoft Vulnerabilities Hit Record High, Critical Flaws Decline, Report Find
Microsoft vulnerabilities hit a record high while critical flaws decline, BeyondTrust report reveals rising risks across Windows, Office, and Azure systems.
AI, Apps, Global Security News, Network Security
COO Mark Cree Outlines Scale Computing’s Edge Platform Push
Scale Computing used its Platform//2026 Summit to position its expanded edge computing platform alongside new partner growth opportunities as it looks to move beyond its roots in virtualization. In an interview at the event, President and COO Mark Cree outlined how the company is evolving into a full-stack edge provider spanning compute, networking, security, and…
AI, Cybersecurity, Global Security News
Can You Get Banned for Using Story Viewers?
In this post, I will answer the question – can you get banned for using story viewers? People worry about story viewers for a reason. Instagram makes normal Story views visible to the account owner, warns users to be careful with third party apps and websites, and says data scraping goes against its Terms of…
AI, Global Security News
The AI Spending Spree is Far from Over
Plus, Amazon goes deeper with Anthropic and bets grow on Intel’s AI resurgence
Global Security News, malware
Trojanized Android App Fuels New Wave of NFC Fraud
NGate malware abuses HandyPay app to steal NFC card data and PINs in Brazil
Global Security News
Accor Plus Sees 39% Conversion Growth Within 30 Days of Payments Platform Redesign
COMPANY NEWS: Endava-led payments modernisation delivers immediate results while laying groundwork for next phase of loyalty transformation
Global Security News
Accor Plus Sees 39% Conversion Growth Within 30 Days of Payments Platform Redesign
COMPANY NEWS: Endava-led payments modernisation delivers immediate results while laying groundwork for next phase of loyalty transformation
AI, Apps, Compliance, Cybersecurity, Data Breaches, Funding, Global Security News, Network Security, Risk Management, Venture
AI is one of the two monumental shifts in cyber today
It’s 2026, when nobody can confidently say what the future of security is going to look like. Everyone is trying (what else can we do), but judging by all the progress around AI in recent months, we are all going to be wrong. The biggest mistake we all make is assuming that the future is…
Global Security News, Politics
Tim Cook Built Apple Into a $4 Trillion Powerhouse. He Leaves Big Challenges on AI
The Apple CEO navigated shifts between eras in technology and politics while growing the iPhone maker into $4 trillion giant.
Cybersecurity, Exploits, Global Security News
22 BRIDGE:BREAK Flaws Expose 20,000 Lantronix and Silex Serial-to-IP Converters
Cybersecurity researchers have identified 22 new vulnerabilities in popular models of serial-to-IP converters from Lantronix and Silex that could be exploited to hijack susceptible devices and tamper with data exchanged by them. The vulnerabilities have been collectively codenamed BRIDGE:BREAK by Forescout Research Vedere Labs, which identified nearly 20,000 Serial-to-Ethernet converters exposed
Global Security News
Accor Plus Sees 39% Conversion Growth Within 30 Days of Payments Platform Redesign
COMPANY NEWS: Endava-led payments modernisation delivers immediate results while laying groundwork for next phase of loyalty transformation