Geek-Guy.com

White House executive order purports to limit mail-in voting, mandate federal voter lists 

President Donald Trump signed an executive order Tuesday that purports to limit mail-in voting, though critics say the move will almost certainly be challenged in court on constitutional grounds. The order instructs the Homeland Security secretary, the director of U.S. Citizenship and Immigrations Services and the commissioner of the Social Security Administration to compile lists…

The Invisible Breach: How AI Agents Became the Most Dangerous Attack Surface of 2025–2026

The Attack That Requires No Click In June 2025, Microsoft patched a critical vulnerability in Microsoft 365 Copilot — one that its discoverers at Aim Security described as something that had never been seen before. A threat actor needed only to send a carefully crafted email to any employee within a target organization. No link.…

The Ultimate Guide to Secure Sweepstakes Gaming Platforms

Discover the most secure sweepstakes gaming platforms. Learn how fair play technology and encrypted social casino platforms protect your virtual currency entertainment. The digital entertainment landscape has shifted dramatically, with social casinos becoming a powerhouse of online play. However, as the industry grows, so does the importance of discernment. Choosing secure sweepstakes gaming platforms isn’t…

Construction Safety Compliance Software: Keep Your Site Safe and Audit‑Ready Every Day

Discover how Construction Safety Compliance Software: Keep Your Site Safe and Audit‑Ready Every Day can enhance safety and streamline your site’s compliance. Key Highlights Embrace construction safety software to streamline your site safety and compliance management. In Australia, some of the most popular construction safety compliance software solutions include HammerTech, SiteDocs, and Procore, which are…

How Company Liquidators Manage Insolvent Winding‑Up Processes

Discover how company liquidators manage insolvent winding-up processes effectively. Our blog explains the essential steps and strategies involved. Key Highlights Company liquidators are appointed to manage the winding up of insolvent companies in a legally compliant way. The process involves assessing and realizing the company’s assets to repay creditors. Liquidators handle all communications with creditors,…

Report: Many Orgs Still Rely on Traditional OS Deployment Workflows

Recently, Recast surveyed IT professionals to attempt to understand where organizations stand with ConfigMgr, Intune, and OS Deployment. With Microsoft Deployment Toolkit (MDT) retiring in January 2026, cloud-only isn’t enough for the industry, and SysAdmins are actively seeking tools to make their jobs easier. Recast says replacement planning for MDT is crucial in 2026 IT…

New compliance guide available: ISO/IEC 27001:2022 on AWS

We’re excited to announce the release of our latest compliance guide, ISO/IEC 27001:2022 on AWS, which provides practical guidance for organizations designing and operating an Information Security Management System (ISMS) using AWS services. As organizations migrate critical workloads to the cloud, aligning with globally recognized standards such as ISO/IEC 27001:2022 becomes an important step toward…

Axios npm Attack Deploys Cross-Platform RAT

A brief compromise of the popular Axios npm package shows how quickly a trusted dependency can become a widespread threat.  Attackers hijacked a maintainer account and published malicious versions that silently installed a remote access trojan (RAT) during routine package installs, putting developer environments and CI/CD pipelines at risk. “While traditional risks like manual dependency…

Cloud Security Alliance Wins 2026 SC Award for AI Security Certification

The Cloud Security Alliance (CSA) has won the 2026 SC Award for Best Professional Certification Program for its Trusted AI Security Expert (TAISE) credential, a training program focused on the secure development, deployment, and governance of generative AI systems. The recognition comes as organizations continue adopting AI tools at a rapid pace, often while security,…

Check Point Research Reveals ChatGPT Data Exfiltration Flaw

A flaw in ChatGPT’s code execution environment shows how a single malicious prompt could quietly leak sensitive user data — without any warning or user approval needed. “Sensitive data shared with ChatGPT conversations could be silently exfiltrated without the user’s knowledge or approval,” said Check Point researchers. Inside the ChatGPT DNS Exfiltration Flaw The issue…

Crypto industry may be running out of time to prepare for quantum attacks

Google’s latest research suggests the cryptocurrency industry may have less time than expected to prepare for quantum computing. In a whitepaper, Google examines risks to elliptic curve cryptography, the system securing most blockchain networks. The researchers revisit earlier assumptions about how difficult it would be for a quantum computer to break these protections, concluding that…

5-month-old F5 BIG-IP DoS bug becomes critical RCE exploited in the wild

A vulnerability misclassified five months ago as a denial-of-service issue in F5 BIG-IP Access Policy Manager (APM) turned out to be a critical pre-authentication remote code execution flaw that is now under active exploitation. Hackers are using it to deploy a persistent malware program that runs with root privileges. The CVE-2025-53521 vulnerability was first disclosed…

CrowdStrike and HCLTech Expand Strategic Partnership with AI-Powered Continuous Threat Exposure Management Services

CrowdStrike and HCLTech today announced an expansion of their strategic partnership with the launch of Continuous Threat Exposure Management (CTEM) services. This joint offering enables continuous, intelligence-led identification, prioritization, and remediation of exposure across endpoints, cloud, identity, applications, and data, helping enterprises maintain an always-on view of exposure and address risk in a more structured and timely manner.

RSAC 2026 News: RSA Security and Microsoft Advance Identity Security for AI Era

At RSAC Conference 2026, I had the opportunity to sit down with Kenn Chong, Principal Product Manager at RSA Security (RSA), to discuss how identity security is evolving — and why traditional approaches are no longer enough. Our conversation centered on a clear theme: identity is now the primary attack surface, and securing it requires…

Euro-Office billed as Europe’s sovereign alternative to Microsoft Office

A group of European technology firms has launched a new open-source office suite aimed at offering a sovereign alternative to Microsoft Office. Euro-Office consists of four core applications — a document editor, spreadsheet program, presentation tool, and PDF editor — and is built on the open-source OnlyOffice suite. It supports Microsoft Office file formats DOCX,…

Deeper Network Promo Deeper Network Promo Deeper Network Promo Image

Android Developer Verification Rollout Begins Ahead of September Enforcement

Google on Monday said it’s officially rolling out Android developer verification to all developers to combat the problem of bad actors distributing harmful apps while “hiding behind anonymity.” The development comes ahead of a planned verification mandate that goes into effect in Brazil, Indonesia, Singapore, and Thailand this September, before it expands globally next year.…

Pondurance MDR Essentials uses autonomous SOC to tackle AI-driven attacks

Pondurance announced MDR Essentials, MDR Essentials, an MDR service providing an autonomous SOC that reduces the time from threat detection to containment by 90%. Threat actors today use AI to attack at machine-speed, making it difficult for traditional cybersecurity solutions to accurately detect and contain cyber threats before they can become breaches. A recent paper…

Attack on axios software developer tool threatens widespread compromises

A hacker briefly delivered malware this week through a popular open-source project for software developers that has an estimated 100 million weekly downloads, raising the possibility of compromises spreading widely through a supply-chain attack. Axios is a JavaScript client library used in web requests. The unknown attacker hijacked the npm account — npm being a…

AWS Security Agent on-demand penetration testing now generally available

AWS Security Agent on-demand penetration testing is now generally available, enabling you to run comprehensive security tests across all your applications, not only your most critical ones. This milestone transforms penetration testing from a periodic bottleneck into an on-demand capability that scales with your development velocity across AWS, Azure, GCP, other cloud-providers, and on-premises. With…

TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks

A high-severity security flaw in the TrueConf client video conferencing software has been exploited in the wild as a zero-day as part of a campaign targeting government entities in Southeast Asia dubbed TrueChaos. The vulnerability in question is CVE-2026-3502 (CVSS score: 7.8), a lack of integrity check when fetching application update code, allowing an attacker…

The Tactical Blueprint: Operational Standards for Modern Close Protection

In this tactical blueprint tutorial post, I will talk about the operational standards for modern close protection. In the current global security landscape, the shift from reactive “bodyguarding” to a proactive model of predictive intelligence has reached a critical tipping point. High-threat urban environments now demand a level of sophistication that goes far beyond physical…

Codenotary AgentMon monitors agentic AI activity and behavior

Codenotary launched AgentMon, an enterprise-grade monitoring designed specifically for agentic networks, providing organizations with real-time visibility into the security, performance and cost of AI-driven agents operating across the enterprise. As adoption of AI accelerates, agentic systems, semi-autonomous software agents that act on behalf of users and applications, are becoming embedded across business operations. The market…

DoControl provides security coverage for Google Gemini Gems

DoControl announced new capabilities that provide visibility, monitoring, and automated control for Google Gemini Gems, a newly introduced feature within Google Gemini that enables teams to create customizable AI GPTs. With this launch, DoControl is the first platform to provide comprehensive security coverage for Google Gemini Gems, ensuring organizations can safely adopt this new technology…

Nearly half a Million mobile customers of Lloyds Banking Group affected by security incident

Lloyds Banking Group data incident exposed transactions of ~450,000 mobile banking users due to a faulty update. A faulty software update at Lloyds Banking Group exposed transaction details of nearly 450,000 mobile banking users on March 12. The issue caused some customers to see other users’ account activity within the app, prompting the bank to…

Hacker stripped more than $50 million from Uranium crypto exchange, spent it on trading cards

US prosecutors have charged a Maryland man in connection with two hacks of the Uranium Finance cryptocurrency exchange that led to losses exceeding $50 million. Jonathan Spalletta, also known as “Cthulhon” and “Jspalletta,” is accused of abusing vulnerabilities in Uranium Finance smart contracts to siphon assets from the platform. If convicted, he could face up…

New Bitdefender assessment helps organizations identify and eliminate hidden internal attack paths

Bitdefender has announced the Bitdefender Internal Attack Surface Assessment, a complimentary evaluation that helps organizations identify and reduce hidden internal cyber risks caused by unnecessary user access to applications, tools, and operating system utilities commonly exploited in attacks. The assessment provides organizations with a data-driven view of their internal attack surface and offers actionable guidance…

Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts

Cybersecurity researchers have disclosed a security “blind spot” in Google Cloud’s Vertex AI platform that could allow artificial intelligence (AI) agents to be weaponized by an attacker to gain unauthorized access to sensitive data and compromise an organization’s cloud environment. According to Palo Alto Networks Unit 42, the issue relates to how the Vertex AI…

SonicWall Report Finds Preventable Risks Drive Breaches

The most dangerous cybersecurity threat facing businesses today isn’t a novel, AI-generated attack. It’s a stolen password, an unpatched system, and the quiet confidence that it won’t happen to you. That is the sobering conclusion of the 2026 SonicWall Cyber Protect Report, released today. In a reframing of traditional threat reporting, the company has shifted…

CareCloud Incident Exposes Patient Data, Disrupts EHR Systems

An attack on healthcare IT provider CareCloud has exposed sensitive patient data and temporarily disrupted access to critical systems, highlighting ongoing risks facing digital healthcare infrastructure. We are “… continuing to investigate the nature and scope of the incident. The affected environment stores patient information, and the Company continues to assess whether, and the extent…

California to bar AI vendors that can’t prove bias safeguards

AI vendors selling to the California state government must prove they have safeguards against algorithmic bias, civil rights violations, and illegal content, or risk being barred from state contracts, under an executive order signed by Governor Gavin Newsom. The order directs the Department of General Services and the California Department of Technology to develop new…

GNM has published its 2025 Annual Infrastructure Report

GNM has published its 2025 Annual Infrastructure Report, outlining a year of coordinated backbone expansion, IX ecosystem growth and high-capacity platform scaling across Europe and Singapore. In 2025, the focus was not on isolated upgrades, but on strengthening the platform as one interconnection environment – where transport, peering and IP services develop on a unified…

OpenAI patches twin leaks as Codex slips and ChatGPT spills

OpenAI has fixed two flaws in its AI stack that could allow AI agents to move sensitive data in unintended ways. The issues, disclosed by researchers at BeyondTrust and Check Point Research, affect the OpenAI Codex coding agent and ChatGPT’s code execution environment, respectively. One enabled GitHub token theft through command injection, while the other…

SmartBear Doubles Down on AI Testing, Channel Services

SmartBear is expanding its AI-driven testing capabilities across its platform, positioning channel partners to capitalize on growing demand for quality assurance in AI-powered development environments. The updates, which span API testing, UI automation, and test management, reflect a broader shift in enterprise software development: as AI accelerates code creation, it is also introducing new risks…

Silver Fox Expands Asia Cyber Campaign with AtlasCross RAT and Fake Domains

Chinese-speaking users are the target of an active campaign that uses typosquatted domains impersonating trusted software brands to deliver a previously undocumented remote access trojan named AtlasCross RAT. “The operation covers VPN clients, encrypted messengers, video conferencing tools, cryptocurrency trackers, and e-commerce applications, with eleven confirmed delivery domains impersonating

Dutch Ministry of Finance takes treasury systems offline amid cyber incident investigation

The Dutch Ministry of Finance took treasury banking portal offline after a cyberattack; core tax systems were not affected. The Dutch Ministry of Finance took parts of its infrastructure offline, including the treasury banking portal, after detecting a cyberattack two weeks earlier. The Dutch Ministry of Finance disclosed a cyberattack detected on March 19 after…

Android developers just got a new verification layer

To help prevent malicious actors from spreading harmful apps while hiding behind anonymity, Google is rolling out developer verification to all Android developers. The company is also introducing app registration, which links apps to verified developer identities. Developers can still choose where to distribute their apps (Source: Google) Developers can begin completing verification now through…

Release Notes: Cross-Platform Threat Analysis with macOS, SSL Decryption, and 1,300+ New Detections 

March was a packed month for ANY.RUN. We rolled out major product improvements that help security teams investigate phishing inside encrypted traffic, expand cross-platform analysis with macOS, and bring Windows Server into the sandbox workflow. At the same time, our detection team continued to strengthen threat coverage with new behavior signatures, Suricata rules, and fresh threat intelligence reports focused on active…

Release Notes: Cross-Platform Threat Analysis with macOS, SSL Decryption, and 1,300+ New Detections 

March was a packed month for ANY.RUN. We rolled out major product improvements that help security teams investigate phishing inside encrypted traffic, expand cross-platform analysis with macOS, and bring Windows Server into the sandbox workflow. At the same time, our detection team continued to strengthen threat coverage with new behavior signatures, Suricata rules, and fresh threat intelligence reports focused on active…