access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
Ex-OpenAI Engineer Detained After Planting Secret Recorder at HQ
The perp, who has Saudi ties, was arrested for allegedly bugging an OpenAI conference room, highlighting a preventable insider threat vector. First seen on darkreading.com Jump to article: www.darkreading.com/insider-threats/ex-openai-engineer-secret-recorder-saudi-ties also interesting: Gen AI is transforming the cyber threat landscape by democratizing vulnerability hunting Gen AI is transforming the cyber threat landscape by democratizing vulnerability hunting…
-
OpenAI Breach Puts Intent at Center of AI Liability Fight
Researcher Says Prosecutors Have a Credible Case – But Current Law Favors OpenAI. A new legal analysis says prosecutors could pursue hacking charges against AI developers whose agents break into other companies’ networks – but the intent requirement favors defendants, and the researcher behind it says a fix should also reach enterprises that recklessly run…
-
Live Video Moderation Challenges Traditional Content Safety Systems
Learn how live video moderation handles frame sampling, end-to-end encryption, behavioural signals, privacy and content retention in video… First seen on hackread.com Jump to article: hackread.com/live-video-moderation-content-safety-systems/ also interesting: Brussels faces privacy crossroads over encryption backdoors 9 unverzichtbare Open-Source-Security-Tools NDSS 2025 Workshop On Security And Privacy Of Next-Generation Networks (FutureG) 2025, Session 3 Session 3: Novel…
-
FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024
The FBI and cyber agencies in the UK and Germany said SafePay is targeting businesses and critical infrastructure by guessing passwords, exploiting vulnerabilities and using phishing attacks. First seen on therecord.media Jump to article: therecord.media/fbi-says-safepay-ransomware-gang-among-most-active-600-victims also interesting: The most notorious and damaging ransomware of all time The most notorious and damaging ransomware of all time…
-
Ex-OpenAI Engineer Held Over Secret Recorder, Saudi Ties
A judge ordered that Abdulrahman Alfozan be detained after he was arrested earlier this month for allegedly bugging an OpenAI conference room. First seen on darkreading.com Jump to article: www.darkreading.com/insider-threats/ex-openai-engineer-secret-recorder-saudi-ties also interesting: OpenAI Didn’t Notice Its AI Agents Using a Message Board to Plan Their Hacking Spree FBI arrests OpenAI employee accused of planting hidden…
-
Zeabur shutting down after second security breach in two months
Development platform Zeabur has disclosed details of a cybersecurity incident in which an attacker used leaked internal credentials stored in plaintext to compromise its infrastructure and steal over 3.2 million environment variable records and information for 321,810 accounts. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/zeabur-shutting-down-after-second-security-breach-in-two-months/ also interesting: Business continuity and cybersecurity: Two sides of…
-
Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme
Chukwuemeka Victor Amachukwu hacked tax preparation businesses, filed false tax returns and enticed victims to send him money for investment schemes. First seen on cyberscoop.com Jump to article: cyberscoop.com/nigerian-sentenced-hacking-fraud-tax-investment-scheme/ also interesting: Cybersecurity Snapshot: Study Raises Open Source Security Red Flags, as Cyber Agencies Offer Prevention Tips Against Telecom Spying Attacks AI disinformation didn’t upend 2024…
-
California warns all public school students of data stolen in contractor breach
The CDE released multiple statements over the last week warning the state’s students that assessment contractor Educational Testing Service (ETS) suffered a months-long data breach. First seen on therecord.media Jump to article: therecord.media/california-warns-all-public-school-students-of-data-breach also interesting: Top 7 zero-day exploitation trends of 2024 U.S. fintech and data services firm 700Credit suffered a data breach impacting at…
-
The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/ also interesting: A new era of cyberthreats from sophisticated threat actors is here Fortinet confirms new zero-day attacks against customer devices 28,000 Exposed .git Repositories Leak Active AWS, OpenAI, Stripe and GitHub Credentials Salt Typhoon…
-
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google’s Chrome Root Program confirms on October 20.An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate for any website that a browser would accept.A researcher reported the First seen…
-
OpenAI says GPT-6.1 Sol is dramatically better at migrating legacy code
OpenAI confirmed that its newer models are much better at writing and migrating software in older programming languages. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openai-says-gpt-61-sol-is-dramatically-better-at-migrating-legacy-code/ also interesting: ChatGPT API flaws could allow DDoS, prompt injection attacks ChatGPT rolls out Codex, an AI tool for software programming 6 ways hackers hide their tracks What’s Powering…
-
Google Cloud power event knocks out UK banks, courts and couriers
Google runs a single UK cloud region, so when one London zone lost power, there was nowhere to failover most services recovered by late afternoon, but courts are still down First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366652539/Google-Cloud-power-event-knocks-out-UK-banks-courts-and-couriers also interesting: Threat intelligence platform buyer’s guide: Top vendors, selection advice What is Single Sign-On (SSO) Thales…
-
Fraudsters Clone Bank Support Pages, Urge Victims to Call
Phone-Led Fraud Ring Pushes Legitimate Remote-Support Tools to Ransack Systems. A campaign running since March and tied to phone-savvy fraudsters has been tricking targets into phoning a fake call center and directing them to a lookalike version of their bank’s support site, designed to push installers for legitimate remote-access tools criminals use to ransack the…
-
Nikkei data breach affected over 1.8 million records
Nikkei disclosed a data breach affecting over 1.8 million records after hackers used stolen credentials to access a cloud service for system development. Japanese media company Nikkei has disclosed a data breach affecting more than 1.8 million records. The company, known for its financial news publications, including The Nikkei and the Financial Times, said attackers…
-
Nikkei data breach affected over 1.8 million records
Nikkei disclosed a data breach affecting over 1.8 million records after hackers used stolen credentials to access a cloud service for system development. Japanese media company Nikkei has disclosed a data breach affecting more than 1.8 million records. The company, known for its financial news publications, including The Nikkei and the Financial Times, said attackers…
-
Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign
It’s the work of the infamous group behind the attacks on Democrats during the 2016 presidential election, Symantec said. First seen on cyberscoop.com Jump to article: cyberscoop.com/russian-hackers-apt28-target-nato-defense-firms/ also interesting: Top 10 Cybersecurity Predictions for 2026 Russian hackers use ISP access to hack embassies in AiTM attacks FBI Warns FSB-Linked Hackers Exploiting Unpatched Cisco Devices for…
-
23andMe successor settles with California for $6 million over cybersecurity failings
California Attorney General Rob Bonta announced a settlement under which 23andMe’s successor will pay $6 million to resolve allegations that the company did not properly protect customers’ data before a 2023 breach. First seen on therecord.media Jump to article: therecord.media/23andme-california-data-breach-settlement also interesting: The 2024 cyberwar playbook: Tricks used by nation-state actors How CISOs can rebuild…
-
Chrome flags malicious commands that scammers pass off as fixes
Google is updating Chrome’s Enhanced Protection mode to detect scam websites and warn users when a page tricks them into copying a malicious command. The company introduced … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/20/google-chrome-enhanced-protection-updates/ also interesting: Chrome 137 Integrates Gemini Nano AI to Combat Tech Support Scams Cybersecurity Snapshot: Global Agencies Target Criminal…
-
BAE Systems Cyber Incident Disrupts US Bankruptcy Notices
A cyber incident affecting BAE Systems halted US bankruptcy notices, forcing federal courts to change service procedures and… First seen on hackread.com Jump to article: hackread.com/bae-systems-cyber-incident-disrupts-us-bankruptcy-notices/ also interesting: Cyber Incidents Hit 3 NHS Hospitals in U.K. US order is a reminder that cloud platforms aren’t secure out of the box CSO hiring on the rise:…
-
it-sa 2026 Diese fünf Sicherheitsthemen sollten Besucher auf dem Radar haben
Die it-sa in Nürnberg ist für IT-Verantwortliche, CISOs, Security-Teams und Entscheider eine Gelegenheit, Sicherheitsstrategien und konkrete Lösungen auf den Prüfstand zu stellen. 2026 geht es dabei nicht mehr nur darum, bekannte Angriffswege zu blockieren. Unternehmen müssen zunehmend auch den Einsatz von KI absichern, Zugriffsrechte kontrollieren, ihre digitale Souveränität bewerten und sicherstellen, dass sie nach einem…
-
Nigerian national given 8-year sentence for tax business hacks
A Nigerian national who worked with a group to hack tax prep businesses and conduct millions of dollars in fraud using customer data was sentenced this week. First seen on therecord.media Jump to article: therecord.media/nigerian-given-8-year-sentenc-tax-hacks also interesting: 25 on 2025: APAC security thought leaders share their predictions and aspirations 25 on 2025: APAC security thought…
-
Close Identity Gaps in Software Development Before Unleashing AI
Artificial Intelligence is complicating security in the software development lifecycle, but a Dark Reading roundtable found collaboration, better identity visibility, and reduced testing costs offer CISOs a way ahead. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/close-identity-gaps-sdlc-before-ai also interesting: What is the cost of a data breach? Top 10 Cybersecurity Predictions for 2026 Software developers:…
-
Google Cloud Outage in London Disrupts Revolut Banking Services
Google Cloud’s London outage disrupted Revolut payments and ATM withdrawals, while ING Germany reported online banking issues. Multiple Google Cloud services went offline in the London region this morning, according to Google’s status page, and the disruption didn’t stay contained to infrastructure dashboards. British digital bank Revolut reported a widespread service outage at roughly the…
-
ConnectWise customers hit by supply-chain attack linked to compromised API secret
Hundreds of customers are confirmed impacted, as attackers use a sensitive credential to break into connected Microsoft 365 applications unimpeded. First seen on cyberscoop.com Jump to article: cyberscoop.com/connectwise-cloud-backup-supply-chain-attack/ also interesting: Top 12 ways hackers broke into your systems in 2024 Cybersecurity Snapshot: AI Will Take Center Stage in Cyber in 2026, Google Says, as MITRE…
-
Ransomware groups expand targeting of Palo Alto Networks vulnerability
Multiple threat actors have exploited a high-severity flaw in the company’s GlobalProtect portal. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ransomware-targeting-palo-alto-networks-vulnerability/833474/ also interesting: Critical infrastructure under attack: Flaws becoming weapon of choice Foreign hackers breached a US nuclear weapons plant via SharePoint flaws Zero-day exploits hit enterprises faster and harder Ransomware Hackers Exploit Palo Alto…
-
ISO/IEC 27090: Neue ISO-Regel gegen Datenvergiftung von KI
ISO/IEC 27090 erklärt, wie sich KI-Systeme absichern lassen. Der Leitfaden behandelt Data Poisoning und Modelldiebstahl. First seen on golem.de Jump to article: www.golem.de/news/ki-sicherheit-neue-iso-norm-soll-ki-systeme-vor-angriffen-schuetzen-2610-214281.html also interesting: Biden Opens US Federal Sites for AI Data Center Growth Anthropic Report Shows Bad Actors Abusing Claude in Attacks Cybercriminals are Winning with AI US FDA Piloting Use of AI…
-
Web-Zertifikate: Kompromittierte Schlüssel gefährden TLS-Verbindungen
Tags: unclassifiedAcht private Schlüssel der Zertifizierungsstelle Emuhdra, mit denen sich Webseitenzertifikate signieren lassen, können mit trivialen Methoden geknackt werden. First seen on golem.de Jump to article: www.golem.de/news/web-zertifikate-kompromittierte-schluessel-gefaehrden-tls-verbindungen-2610-214314.html also interesting: Release the hounds! Securing datacenters may soon need sniffer dogs Navigating the Complex Landscape of Web Browser Security Ross Ulbricht: Trump schenkt dem Silk-Road-Gründer die Freiheit Prepare.…
-
Mondoo erweitert Exposure Management um agentenbasierte Schwachstellenbehebung
Mondoo erweitert sein Exposure Management um Agentic Remediation. KI-Agenten erkennen und beheben Sicherheitslücken in Code, Cloud und Endpunkten automatisch. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/mondoo-erweitert-exposure-management-um-agentenbasierte-schwachstellenbehebung/a46833/ also interesting: Cybersecurity Snapshot: CISA Analyzes Malware Used in SharePoint Attacks, as U.K. Boosts Cyber Assessment Framework 6 hot cybersecurity trends 3 practical ways AI threat detection improves…
-
Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites
A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and a security researcher watched it happen because the operators left their control panels open on the internet.The agents tried more than 1,200 sites and reached websites belonging to more than 100 companies, including farm-equipment maker…
-
Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree
A Chinese-speaking attacker has compromised hundreds of websites across the globe, looting from big fish like John Deere, SharkNinja, and engine manufacturer Cummins. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/hackers-abuse-ai-pen-test-tool-cairn also interesting: In Other News: Salt Typhoon Hacks US ISPs, China Doxes Hackers, New Tool for AI Attacks Hackers impersonate DeepSeek to distribute malware…
-
AOMEI Backupper servers hijacked for minutes at a time to push backdoor
An unknown number of AOMEI Backupper users had their computers infected with a backdoor through an unusually stealthy supply chain attack, security researchers discovered. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/20/aomei-backupper-compromised-supply-chain/ also interesting: 6 ways hackers hide their tracks Top 10 Cybersecurity Predictions for 2026 Startup Amutable plotting Linux security overhaul to counter…
-
Future digital ID arrangements remain unclear, PAC hears
Following the scrapping of the government’s digital ID scheme, future plans, costs and data-sharing agreements are not yet settled First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366652522/Future-digital-ID-arrangements-remain-unclear-PAC-hears also interesting: Hiring Kit: Computer Forensic Analyst Agent Tesla and Taskun Malware Targeting US Education and Govt Entities The imperative for governments to leverage genAI in cyber defense…
-
There’s only so much code: the rise in vulnerability numbers
The September Microsoft Tuesday release included 975 vulnerability advisories. This month, 1,415 vulnerabilities were just dropped. Compared to a pre-June average of 100 a month, that increase is staggering. Where did they come from? And what does the future look like? First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/theres-only-so-much-code-the-rise-in-vulnerability-numbers/ also interesting: Researcher Releases Exploit of Claimed…
-
DOJ escalates fight for election supremacy with California raids
Tags: electionThe arrests were paired with comments from DOJ and DHS officials, threatening to investigate, arrest or prosecute tens of thousands of California voters if they vote in November. First seen on cyberscoop.com Jump to article: cyberscoop.com/justice-department-california-voter-arrests-noncitizen-claims/ also interesting: Breach Roundup: Sitting Ducks in the DNS How Russia, China & Iran Are Targeting US Elections Duo…
-
EU cyber law won’t force fixes for fridge controllers hit in French attack
The EU’s Cyber Resilience Act that took effect last month only requires companies to fix vulnerabilities and issue free updates during a product’s support period, which manufacturers define. First seen on therecord.media Jump to article: therecord.media/eu-cyber-law-wont-force-fixes-for-fridges-in-french-attack also interesting: Cybersecurity Snapshot: Tenable Highlights Risks of AI Use in the Cloud, as UK’s NCSC Offers Tips for…
-
ThreatLocker CEO On Launch Of New AI Agent Controls: ‘Massive Opportunities For MSPs’
ThreatLocker announced a new offering Tuesday that aims to make enabling secure AI adoption a bigger opportunity for MSPs, with new capabilities that bring a zero-trust approach to controlling what AI agents can access, according to ThreatLocker Co-founder and CEO Danny Jenkins. First seen on crn.com Jump to article: www.crn.com/news/security/2026/threatlocker-ceo-on-launch-of-new-ai-agent-controls-massive-opportunities-for-msps also interesting: TDL 019 –…
-
AI security hiring focuses on red-teaming, SOC orchestration and governance
Roles mitigating AI deepfakes and overseeing post-quantum encryption rollouts are on the horizon, according to a new report. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-security-jobs-hiring-sans-tracker/833465/ also interesting: AI disinformation didn’t upend 2024 elections, but the threat is very real AI disinformation didn’t upend 2024 elections, but the threat is very real AI disinformation didn’t…
-
Streit um Model-Destillation – OpenAI meldet mutmaßlichen Klau von Modellfähigkeiten
Tags: openaiFirst seen on security-insider.de Jump to article: www.security-insider.de/openai-moonshot-ai-systematische-abfragen-model-destillation-a-0b03a12ce4c4b5c462a9542c0adadb12/ also interesting: OpenAI says it may store deleted Operator data for up to 90 days OpenAI’s new model can’t believe that Trump is back in office MY TAKE: The Pentagon punished Anthropic for red lines it accepted from OpenAI hours later ChatGPT’s new feature could give infostealers…
-
Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk
OpenCode silently patched a critical RCE flaw, leaving vulnerable users unaware of the security risk, researchers at Pillar Security warned First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/opencode-quietly-patched-critical/ also interesting: DNA sequencer vulnerabilities signal firmware issues across medical device industry RCE Vulnerability (CVE-2025-62518) Discovered in Popular Rust Library async-tar and Its Forks BeyondTrust Remote Access…
-
Head of AI Security Roles Surge in Large Organizations
A new IANS report has found that despite the growth of the head of AI security role, accountability for AI governance in firms remains unsettled First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/head-ai-security-roles/ also interesting: What Security Leaders Need to Know About AI Governance for SaaS Multimodal AI, A Whole New Social Engineering Playground for…
-
CJIS v6.1 Compliance: 5 Practical Priorities for Agencies
CJIS v6.1 requires agencies to maintain strong authentication, account security, and audit controls while demonstrating ongoing compliance. Specops outlines five practical priorities covering MFA, account management, passwords, logging, and audit readiness. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cjis-v61-compliance-5-practical-priorities-for-agencies/ also interesting: Five Cyber Agencies Sound Alarm About Active Directory Attacks: Beyond the Basics Overcome the…
-
DHS bans DeepSeek products across US federal civilian agencies
Tags: governmentThe U.S. Department of Homeland Security (DHS) is ordering federal civilian agencies to stop using DeepSeek products and remove them from government systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/dhs-bans-deepseek-products-across-us-federal-civilian-agencies/ also interesting: NSCS: The New Watchdog for India’s Cybersecurity Interna von Ransomware-Gruppe Black Basta durchgesickert Governments Issue AI Security Guidance to Safeguard Critical Infrastructure…
-
Best Cybersecurity Thought Leadership Agencies
The best cybersecurity thought leadership agencies help organisations turn expert insight into credible executive content, original research and influential industry commentary. For technical, practitioner-led thought leadership: Bora combines cybersecurity content expertise with a team that includes former security practitioners. For research-led programmes: CyberEdge Group and 10Fold offer examples of turning cybersecurity data into substantial reports…
-
Incomplete security patches show hackers where to look next
Tags: hackerSecurity patches are turning into roadmaps for attackers, with a growing share of fixes later found incomplete or open to bypass. Oren Yomtov, a security researcher at Terra … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/20/ncomplete-security-patches-broken-fixes-rise/ also interesting: Acuity confirms hackers stole non-sensitive govt data from GitHub repos Anyone Can Trick AI Bots Into…
-
The Risk of AI-Powered Antidetect Browsers in Online Fraud and Influence Operations
ey Findings Introduction Antidetect browsers conceal their users’ digital identities, enabling a single operator or small team to simultaneously run thousands of isolated accounts across multiple platforms such as Facebook, Instagram, TikTok, YouTube, Twitter/X, Discord, LinkedIn, Reddit, and many more, without triggering the detection systems employed by those platforms. In this report, we highlight three…
-
Anti-Putin messages disrupt nationwide school assessments in Russia
A pro-Ukraine group that says it operates within Russia took responsibility for anti-Putin messages appearing on an education assessment platform. Authorities said they had restored systems. First seen on therecord.media Jump to article: therecord.media/anti-putin-messages-disrupt-russian-education-platform also interesting: Shuckworm Group Leverages GammaSteel Malware in Targeted PowerShell Attacks International operation disrupts pro-Russian hacker group NoName057(16) Europol Disrupts NoName057(16)…
-
AOMEI yet to notify customers after hackers hijacked its software updates
In an email, the Hong Kong-registered company confirmed to Recorded Future News that hackers repeatedly altered configuration files on its update servers between April and July, redirecting the software to download malware for minutes at a time. First seen on therecord.media Jump to article: therecord.media/aomei-yet-to-notify-customers-hijack-software also interesting: Top 7 zero-day exploitation trends of 2024 Top…
-
Das KI-gestützte Security Operations Center (SOC) – Wie Sicherheitsteams fragmentierte Alarme, Identitätsdaten und Ereigniskontext in priorisierte Untersuchungen überführen
Tags: aiFirst seen on security-insider.de Jump to article: www.security-insider.de/ki-im-soc-alarme-priorisieren-nis2-risiken-senken-a-ca69a6470d7473df073d7b3f552844d5/ also interesting: Security Bosses Are All-In on AI. Here’s Why Why Traditional Security Tools Fail-and How Unified AI Platforms Solve the Problem Data Brokers’ and AI Firms’ Opt-Out Forms Are Built to Fail, Report Finds What Does the Cyber Industry Want to See From the New UK…