Trump AI order proposes a 30-day voluntary review of frontier models before public release.
Tag: public
Global Security News
Crypto whales and executives face rising physical attacks
The public ledger that underpins cryptocurrency, while enabling transparency, also exposes wealthy holders, known as whales, to identification and targeting by hackers and con artists.
AI, Apps, Funding, Global Security News, Network Security
Anthropic Moves Toward IPO as OpenAI Competition Heats Up
Anthropic has confidentially filed paperwork with the U.S. Securities and Exchange Commission (SEC) for an initial public offering (IPO), becoming the latest artificial intelligence giant to move toward the public markets and potentially beating rival OpenAI to a public debut. The Claude developer submitted a draft registration statement to the SEC on June 1, a…
Global Security News
Russian hacker used AI to run fraud scheme on MAGA Telegram channel
The threat actor created the public Telegram channel, @americanpatriotus, shortly after the Capitol riot in 2021.
AI, Cybersecurity, Exploits, Global Security News, Risk Management
Microsoft and security researcher’s dueling posts about cybersecurity disclosures get nasty
Microsoft and a prominent cybersecurity researcher have gotten into a very public and rather personal exchange of unpleasantries about what responsible cybersecurity disclosures should mean in 2026. A cybersecurity researcher going by the name Nightmare Eclipse, who has disclosed several cybersecurity holes before patches were available, posted that he had tried to contact Microsoft officials…
AI, Cybersecurity, Data Breaches, Global Security News, Network Security, Risk Management
Cybersecurity trends in SEC filings
In 2023, the Securities and Exchange Commission (SEC) required public companies to include a new section in their 10-K annual filings that is devoted to cybersecurity. This section is meant to address “cybersecurity risk management, strategy, governance and incidents.” I got curious as to what senior cybersecurity executives are conveying about their companies in these…
Global Security News, Risk Management
Anthropic confirms Claude Mythos-class models will roll out to the public
Anthropic has confirmed that it plans to bring Mythos-class models to the general public after delaying the rollout due to security risks to public and private software. […]
AI, Cybersecurity, Global Security News, Risk Management
OpenAI prepares ChatGPT for the election misinformation wave
AI-generated election misinformation could shape public opinion and influence the lives of millions of people. To address those risks, OpenAI outlined a series of safeguards ahead of the 2026 election cycle. The company said its efforts will focus on helping users access voting information, supporting cybersecurity defenders, and improving transparency around AI-generated content. “People already…
AI, Apps, Cybersecurity, Global Security News, Government & Policy
A Fake UK Visa Site Left 100,000 Passports Wide Open
A third-party UK visa site exposed passports and selfies on a public AWS server. It’s not official GOV.UK and affected at least 100,000 documents. UK Visa Portal is not run by the British government. It’s a third-party service, apparently operated by a UAE-registered company called Active Leadgen LLC, that charges fees to help people apply…
AI, Data Breaches, Global Security News, privacy, Risk Management
340 Million OnlyFans Profiles Allegedly Rebuilt from Leaks
A hacker is selling a 340M-strong OnlyFans-linked dataset built by correlating old breaches and public data, not by hacking OnlyFans directly. A threat actor is adverertising a purported database containing data of 340 million OnlyFans users, but the available evidence points to something less dramatic than a direct breach. According to HackRead, which reported the…
Global Security News, Risk Management
Anthropic’s restricted Claude Mythos model may be coming to Claude Code
Anthropic appears to be preparing for the public rollout of the Mythos model, which was announced in April as a restricted model that poses major security risks to private and public software. […]
AI, Funding, Global Security News
What an OpenAI IPO Might Mean for the Channel
OpenAI is reportedly preparing for an initial public offering (IPO), a move that could significantly impact both the consumer AI market and the channel ecosystem as we know it. As the company behind arguably the world’s most recognizable AI platform, OpenAI’s transition into a publicly traded company could unlock new opportunities, partnerships, and revenue streams…
AI, Global Security News
California Governor Signs Order on AI Aimed at Helping Workers
Gavin Newsom’s move follows broadening signs of public discontent over AI’s impact on jobs.
AI, Apps, Exploits, Global Security News, Network Security
Terra adds continuous network exploitation validation to its platform
Terra Security has announced the public preview of continuous exploitation validation for network infrastructure, now available to all customers through the Terra Platform. The launch expands Terra’s offensive security capabilities from web applications to network infrastructure and extends coverage across three areas: web applications, AI, and network environments. Terra said the update expands its continuous…
Global Security News
The Secrets Revealed in SpaceX’s IPO Filing
Documents related to SpaceX’s initial public offering show the company is unprofitable and CEO Elon Musk controls 85% of the vote.
AI, Exploits, Global Security News, Risk Management
PinTheft: Another Linux Privilege Escalation, Another Working Exploit, This Time Targeting Arch
PinTheft is a Linux LPE flaw in the RDS subsystem with public exploit code. Arch Linux users face the highest risk and should patch immediately. The wave of Linux local privilege escalation vulnerabilities showing up with working exploit code is not slowing down. The latest is PinTheft, discovered by the V12 security team, which affects…
AI, Data Breaches, Global Security News, Government & Policy, Network Security, Risk Management
CISA GitHub Leak Exposes AWS GovCloud Secrets
A public GitHub repository tied to a CISA contractor reportedly exposed sensitive AWS GovCloud credentials, plaintext passwords, and internal deployment files. Researchers said the exposure may have provided privileged access to multiple internal systems and cloud environments before the repository was removed. “Passwords stored in plain text in a csv, backups in git, explicit commands…
AI, Global Security News
Public Instagram posts provide raw material for AI phishing campaigns
A handful of public Instagram posts can give attackers enough material to generate convincing phishing emails with GenAI. Research from the University of Texas at Arlington and Louisiana State University showed how public social media activity can be turned into phishing messages that appear personal and credible to human recipients. Attack pipeline overview (Source: Research…
Global Security News
SpaceX Is Aiming to Go Public on June 12 in What Stands to Be Biggest IPO Ever
Elon Musk’s rocket company is expected to make its IPO paperwork public next week.
Europe, Global Security News, Government & Policy
KDE gets over €1 million investment to strengthen security and core infrastructure
European governments and public institutions have been shifting away from proprietary software for years, and the financial infrastructure supporting open-source alternatives is growing to match. Germany’s Sovereign Tech Fund announced today that it is investing more than €1 million in KDE, the open-source project behind the Plasma desktop environment and a broad range of Linux…
AI, Data Breaches, Global Security News
Who’s the winner in the new Microsoft-OpenAI deal?
It feels like the world’s longest and most public divorce: In late April, Microsoft and OpenAI once again renegotiated the slow-motion breakup that has been playing out between the two over the last several years. At first glance, it looks like a win-win. In the broadest terms, OpenAI gets more freedom to set its own course — it can sell its…
AI, Data Breaches, Exploits, Global Security News
Another Universal Linux Local Privilege Escalation (LPE) Vulnerability: Dirty Frag, (Fri, May 8th)
Less than two weeks after the public disclosure of the Copy Fail vulnerability (CVE-2026-31431), another local privilege escalation (LPE) vulnerability in the Linux kernel has been revealed. Referred to as “Dirty Frag,” this vulnerability was discovered and reported by Hyunwoo Kim (@v4bel) [1]. In this diary, I will provide a brief background on Dirty Frag,…
AI, Global Security News
Claude Security enters public beta with Opus 4.7 vulnerability scanning and patching
Claude Security, previously called Claude Code Security, is in public beta for Claude Enterprise customers. Available in Claude.ai, the capability scans codebases for security vulnerabilities and suggests targeted patches for review, helping teams identify and fix issues that might otherwise be missed. Admins can enable it in the admin console. Access for Claude Team and…
AI, Global Security News
The Lore of Sam Altman Is Being Tested Like Never Before
Pressure on the OpenAI CEO is mounting as the onetime AI front-runner prepares for a public offering.
AI, Global Security News
Anthropic Rolls Out Claude Security for AI Vulnerability Scanning
Claude Security enters public beta, giving enterprises AI driven code scanning with no API integration or custom agents required
Global Security News
Romanian leader of online swatting ring gets 4 years in prison
A Romanian national who led an online swatting ring that targeted more than 75 public officials, multiple journalists, and four religious institutions was sentenced to 4 years in federal prison. […]
Data Breaches, Global Security News
UK: Education Sector Faces Surge in Cyber Breaches Despite Stable National Threat Levels
The British public education sector has faced the nation’s most dramatic increase in cyber breach prevalence over the past year
AI, Apps, Cybersecurity, Data Breaches, Endpoint, Global Security News, Government & Policy, Network Security, Risk Management
ClickUp Data Leak Exposes Enterprise Emails for Over a Year
A hardcoded API key embedded in ClickUp’s public website has quietly exposed hundreds of corporate and government email addresses for more than a year. The flaw, first reported in early 2025, remained active as of April 2026 — allowing anyone to access sensitive data with a simple request and no authentication. “I went to http://clickup[.]com,…
AI, Funding, Global Security News
Oracle’s Deluge of AI Debt Pushes Wall Street to the Limit
The AI boom has hit a funding snag, compounding power constraints and a growing public backlash against data centers.
AI, Cybersecurity, Global Security News, Network Security
Fireside Chat: PKI has carried digital trust through every tech advance—now comes the hardest one
Public key infrastructure — the authentication and encryption framework that has held digital commerce together through every chaotic leap forward in technology — is facing a double whammy. Related: Achieveing AI security won’t be easy Autonomous AI agents are flooding enterprise networks, most without verified identities or any meaningful governance. What’s more, quantum computers are…
AI, Global Security News, Government & Policy, privacy
LAPD Deployed Drones to Spy on No Kings Protest
The Los Angeles Police Department deployed drones intended for public safety uses to surveil a No Kings rally and a protest against the Trump administration’s anti-immigrant campaign, flight data reveals. Last year, the LAPD launched its “Drone as First Responder” program with a clearly articulated goal: to protect and even save lives. The pilot program…
Global Security News, Network Security, privacy
Wi-Fi roaming security practices for access network providers and identity providers
Public Wi-Fi roaming networks carry authentication credentials across multiple administrative boundaries, and the protocols governing that process vary widely in their security properties. The Wireless Broadband Alliance published a set of guidelines that specifies which authentication, encryption, and credential-handling practices operators should apply to networks running Passpoint and OpenRoaming. “What this work shows is that,…
AI, Global Security News
Apple worst, Asus best for laptop repairability
Broken laptops are not becoming easier to fix, despite the availability of public data about their repairability and growing support for right-to-repair legislation. That’s according to US PIRG Education Fund, a consumer protection nonprofit. Its fifth annual Failing to Fix survey found Asus to be the most repairable laptop brand — although its score dropped…
Global Security News
This Engineer Wants to Make Computer Chips on the Moon
Atsuyoshi Koike, the public face of Japan’s effort to muscle back into the semiconductor industry it used to dominate, first needs to prove he can make them on earth.
AI, Global Security News
Evolution of Ransomware: Multi-Extortion Ransomware Attacks
Multi-extortion ransomware relies on stolen data to pressure victims with public leaks. Penta Security explains how its D.AMO platform keeps exfiltrated files encrypted and useless to attackers. […]
AI, Global Security News
Buying the Dip? This AI Agent Will Do it For You
Public, an investing platform, will offer AI agents that can help put your brokerage account on autopilot.
AI, Global Security News, Risk Management
Make OpenAI’s models misbehave and earn a reward
OpenAI’s public Safety Bug Bounty program focuses on AI abuse and safety risks across its products. The goal is to support safe and secure systems and reduce the risk of misuse that could lead to harm. This program complements the Security Bug Bounty. It accepts reports of abuse and safety risks that do not meet…
AI, Global Security News
Geely EX2 electric hatch to make Australian debut at 2026 Melbourne Motor Show
Best-selling Geely EX2 to make Australian debut at 2026 Melbourne Motor Show. First public look at the highly anticipated Geely EX2 electric hatch Sedan and SUV models being considered for Australia join the show’s lineup Starray EM-i and updated Geely EX5 complete the Geely display The Melbourne Motor Show runs from 10-12 April
AI, Global Security News, Government & Policy, Network Security
Palantir Will No Longer Profit Off of New Yorkers’ Health Data
A controversial multimillion-dollar deal between New York City’s public hospital system and military contractor Palantir, first reported by The Intercept, is coming to an end, according to recent testimony before the city council. Related Palantir Gets Millions of Dollars From New York City’s Public Hospitals The Intercept reported in February that the New York City…
AI, Cybersecurity, Global Security News, Government & Policy, Politics, Risk Management
Treasury asks whether terrorism risk insurance program should bolster cyber coverage
The Treasury Department is soliciting public feedback on whether it should change a terrorism risk insurance program to address cyber-related losses. In a Federal Register notice set for publication Wednesday, Treasury seeks comment from the public for a mandatory report it must deliver to Congress this summer on the effectiveness of the terrorism risk insurance…
AI, Global Security News, Russia
FBI links Signal phishing attacks to Russian intelligence services
The FBI has issued a public service announcement warning that Russian intelligence-linked threat actors are actively targeting users of encrypted messaging apps such as Signal and WhatsApp in phishing campaigns that have already compromised thousands of accounts. […]
AI, Global Security News
Cloud misconfiguration has evolved and your controls haven’t
In this Help Net Security video, Kat Traxler, Principal Security Researcher – Public Cloud at Vectra AI, walks through two AWS misconfigurations that go beyond the basics of bucket visibility. The first is bucket name squatting. Because S3 uses a global namespace, attackers can register bucket names they expect a target company will use, then…
Global Security News, Risk Management
1Password Users API for Partners helps automate identity response during incidents
1Password has announced the public preview of Users API for Partners, which allows security teams to respond to incidents faster during active security events. Launch partners like CrowdStrike, in addition to BlinkOps, Elastic, Sumo Logic, Tines, and Torq enable mutual customers to automatically suspend or restore users in 1Password Enterprise Password Manager when risk is…
AI, Cybersecurity, Global Security News, Network Security
Is It Safe to Apply for a Loan on Public Wi-Fi?
In this post, I will answer the question – is it safe to apply for a loan on public Wi-Fi? Public Wi-Fi is convenient, but it is not designed for secure financial transactions. When someone applies for a loan, they submit identity details, income data, and banking information. Transmitting that data over an unsecured network…
AI, Apps, Data Breaches, Global Security News, malware, Network Security, Risk Management
South Korean Tax Agency Leak Leads to $4.8M Crypto Theft
A public press release intended to highlight a tax enforcement victory instead exposed millions in confiscated cryptocurrency. South Korea’s National Tax Service (NTS) inadvertently revealed the mnemonic seed phrase of a seized Ledger hardware wallet, enabling an unknown actor to transfer approximately $4.8 million in digital assets. “The thief first deposited a small amount of…
AI, Global Security News
VAST Data and TwelveLabs Partner to Expand Video Intelligence for the World’s Largest and Most Secure Video Archives
COMPANY ANNOUNCEMENT: New collaboration extends TwelveLabs’ video foundation models beyond public cloud deployments, introducing a first-of-its-kind customer-managed deployment path on the VAST AI Operating System to power video search, analytics, and reasoning at massive scale
Global Security News
Android app uses Bluetooth signals to detect nearby smart glasses
Smart glasses with built-in cameras are showing up in more public spaces, and a growing number of people want a way to know when one is nearby. An Android app called Nearby Glasses, developed by Yves Jeanrenaud, attempts to fill that gap by scanning Bluetooth Low Energy traffic for manufacturer identifiers associated with known smart…
AI, Global Security News, Risk Management
New Malicious npm Package Highlights the Speed at Which Supply Chain Risks Propagate
GUEST RESEARCH: Tenable Research investigated a malicious package in the npm public registry named “amber-src” that underscores the rapid nature of modern supply chain attacks. The package, which was downloaded approximately 50,000 times before its removal, was designed to mimic a popular package “ember-source”, to infect developers’ systems across Windows, macOS, and Linux.
AI, Global Security News
44% Surge in App Exploits as AI Speeds Up Cyberattacks, IBM Finds
IBM’s 2026 X-Force report reveals 44% rise in cyberattacks on public apps, driven by AI and flaws
AI, Global Security News, Risk Management
Binding Operational Directive 26-02 sets deadlines for edge device replacement
In this Help Net Security video, Jen Sovada, General Manager, Public Sector at Claroty, explains CISA’s Binding Operational Directive 26-02 and what it means for federal agencies. The directive requires agencies to inventory, report, decommission, and replace unsupported edge devices such as firewalls, routers, switches, load balancers, and wireless access points. Unsupported devices don’t receive…
AI, china, Cybersecurity, Global Security News, Risk Management
State Dept. official says post-quantum transition plans will outlive current leadership
A cybersecurity official at the State Department called for the public and private sector to more tightly coordinate plans to transition their systems, devices and data to quantum-resistant encryption algorithms. Gharun Lacy, Deputy Assistant Secretary for the Cyber and Technology Security Directorate at the Department of State, issued a challenge for cybersecurity defenders to view…
Global Security News
Changes to TLS clientAuth Certificates: Ensuring You’re Not Impacted
Upcoming changes to public TLS client authentication certificates may affect Cisco users. Audit and update trust stores to ensure secure, uninterrupted services.
AI, Global Security News, Risk Management
Microsoft equips CISOs and AI risk leaders with a new security tool
Microsoft released Security Dashboard for AI in public preview for enterprise environments. The dashboard aggregates posture and real-time risk signals from Microsoft Defender, Microsoft Entra, and Microsoft Purview into a single view within security tools. Security Dashboard for AI in browser (Source: Microsoft) “The dashboard equips CISOs and AI risk leaders with a governance tool…
AI, Global Security News, Government & Policy, Network Security, Politics, Risk Management
Palantir Gets Millions of Dollars From New York City’s Public Hospitals
New York City’s public hospital system is paying millions to Palantir, the controversial ICE and military contractor, according to documents obtained by The Intercept. Since 2023, the New York City Health and Hospitals Corporation has paid Palantir nearly $4 million to improve its ability to track down payment for the services provided at its hospitals…
Global Security News
Ivanti EPMM Zero-Day Bugs Spark Exploit Frenzy — Again
It’s time to phase out the “patch and pray” approach, eliminate needless public interfaces, and enforce authentication controls, one expert says.
AI, Apps, Compliance, Global Security News, Government & Policy, Network Security, SIs, VARs, Advisors & MSSP News
SmartBear Expands Carahsoft Partnership for Public Sector
SmartBear has expanded its partnership with Carahsoft Technology Corp. to strengthen its public sector go-to-market strategy and deepen engagement with the government-focused channel ecosystem, the companies announced Tuesday. The expanded agreement positions Carahsoft as SmartBear’s Master Government Aggregator, giving federal, state, and local agencies simplified access to SmartBear’s software quality and application visibility portfolio through…
Global Security News, Network Security
Gigamon Earns Frost & Sullivan 2026 Company of the Year for Global Network Observability, Public Sector
COMPANY NEWS: Honoured for advancing deep observability across public sector environments with real-time network visibility that supports Zero Trust initiatives
Global Security News
SolarWinds WHD Attacks Highlight Risks of Exposed Apps
Organizations that have exposed their instances of Web Help Desk to the public Internet have inadvertently made them prime targets for attackers.