Tag: government
-
‘NeedyMantis’ Provides Long-Term Access to Compromised Networks
Microsoft observed a China-based actor using a previously unidentified malware framework in targeted intrusions against telcos, universities, medical, and government-related organizations. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/needymantis-long-term-access-compromised-networks
-
OpenAI apologizes to Australia after its AI agents breached government sites
The company also detailed how some of those breaches had happened, and outlined additional measures it is taking to assess the impact of the events. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/29/openai-apologizes-to-australia-after-its-ai-agents-breached-government-sites/
-
OpenAI apologizes to Australia after its AI agents breached government sites
The company also detailed how some of those breaches had happened, and outlined additional measures it is taking to assess the impact of the events. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/29/openai-apologizes-to-australia-after-its-ai-agents-breached-government-sites/
-
OpenAI apologizes to Australia after its AI agents breached government sites
The company also detailed how some of those breaches had happened, and outlined additional measures it is taking to assess the impact of the events. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/29/openai-apologizes-to-australia-after-its-ai-agents-breached-government-sites/
-
OpenAI apologizes to Australia after its AI agents breached government sites
The company also detailed how some of those breaches had happened, and outlined additional measures it is taking to assess the impact of the events. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/29/openai-apologizes-to-australia-after-its-ai-agents-breached-government-sites/
-
Microsoft Tracks NeedyMantis Malware Targeting Telecoms and Government Contractors
Microsoft Threat Intelligence has discovered NeedyMantis, a modular post-compromise malware framework that targets specific industries, including telecommunications firms, government contractors, universities, medical nonprofits, and intergovernmental organizations. Unlike typical malware that serves as an initial access point, NeedyMantis is designed to maintain an attacker’s access and support follow-on operations after an initial breach. NeedyMantis activity has…
-
Microsoft Tracks NeedyMantis Malware Targeting Telecoms and Government Contractors
Microsoft Threat Intelligence has discovered NeedyMantis, a modular post-compromise malware framework that targets specific industries, including telecommunications firms, government contractors, universities, medical nonprofits, and intergovernmental organizations. Unlike typical malware that serves as an initial access point, NeedyMantis is designed to maintain an attacker’s access and support follow-on operations after an initial breach. NeedyMantis activity has…
-
OpenAI Pauses Top Models as Rogue Agents Target Agencies
Outside Researchers Exposed Government and UN Incidents Before OpenAI Disclosures. OpenAI once again paused training and evaluation of its most capable models as news of more AI agents trying to hack into U.S. government agencies and the United Nations continues to surface. The attempted breaches show how much of what’s known about OpenAI’s misbehaving agents…
-
Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks
Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis.The malware has been seen in a small number of targeted intrusions at telecommunications organizations, universities, medical nonprofits, intergovernmental organizations, and government contractors. Its use goes back to at least First seen…
-
Oracle PeopleSoft Servers Targeted Again as ShinyHunters Expands Extortion Operations
Tags: cve, cyber, exploit, extortion, government, healthcare, oracle, technology, threat, vulnerabilityThe ShinyHunters-linked threat cluster tracked as UNC6240 has renewed mass exploitation of Oracle PeopleSoft servers vulnerable to CVE-2026-35273. Expanding beyond its earlier focus on higher education into technology, healthcare, government, transportation, agriculture, and IT services. The campaign demonstrates how quickly financially motivated actors can adapt when organizations rely on perimeter workarounds rather than applying vendor-issued…
-
OpenAI Pauses Training Its Most Powerful Models After Rogue Agents Target Government
Sam Altman says the company “have not been as fast as we would have liked” at dealing with security breaches, after news of further incidents over the summer forces another temporary halt. First seen on wired.com Jump to article: www.wired.com/story/openai-pauses-training-most-powerful-models-after-rogue-agents-target-government/
-
CISA orders feds to patch exploited Citrix flaws by Wednesday
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler vulnerabilities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-exploited-citrix-flaws-by-wednesday/
-
CISA orders feds to patch exploited Citrix flaws by Wednesday
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler vulnerabilities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-exploited-citrix-flaws-by-wednesday/
-
CISA orders feds to patch exploited Citrix flaws by Wednesday
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler vulnerabilities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-exploited-citrix-flaws-by-wednesday/
-
Security Affairs newsletter Round 597 by Pierluigi Paganini INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. OpenAI Agents Accessed US Government Websites Without Authorization Exploit.in Database Reveals the Roots of Today’s Ransomware Ecosystem…
-
OpenAI halts training of latest models as reports mount of AI agents going rogue
Decision follows disclosures that OpenAI agents searching government websites had acted in unexpected waysOpenAI said it has paused training of its latest artificial intelligence models as reports of AI agents going rogue mount.The decision to halt development came just hours after the company disclosed Friday that it was reviewing several incidents from the summer in…
-
OpenAI Agents Accessed US Government Websites Without Authorization
OpenAI is investigating AI agents that accessed US gov websites without authorization, including an attempted Education Department hack. OpenAI disclosed on Friday that its AI agents had interacted with US government websites in ways nobody planned or authorized, as part of what the company is calling an ongoing review of unexpected model behavior. The affected…
-
Stop Waiting for Someone Else to Make AI Safe
Forget AI Doomsday. Defend Against the Agent Already Jimmying the Locks AI labs warn their creations could someday threaten humanity while governments race to keep their nations competitive. Security teams have a less cinematic problem: Autonomous agents can already probe defenses, exploit weaknesses and wield credentials. Time for Cybersecurity 101. First seen on govinfosecurity.com Jump…
-
Stop Waiting for Someone Else to Make AI Safe
Forget AI Doomsday. Defend Against the Agent Already Jimmying the Locks AI labs warn their creations could someday threaten humanity while governments race to keep their nations competitive. Security teams have a less cinematic problem: Autonomous agents can already probe defenses, exploit weaknesses and wield credentials. Time for Cybersecurity 101. First seen on govinfosecurity.com Jump…
-
Supreme Court permits states to use SAVE database for citizenship checks
Three justices wrote in a dissent that longstanding privacy laws protecting sensitive personal data held by the government should prevent the use of the database. First seen on cyberscoop.com Jump to article: cyberscoop.com/supreme-court-save-database-voter-citizenship/
-
Supreme Court permits states to use SAVE database for citizenship checks
Three justices wrote in a dissent that longstanding privacy laws protecting sensitive personal data held by the government should prevent the use of the database. First seen on cyberscoop.com Jump to article: cyberscoop.com/supreme-court-save-database-voter-citizenship/
-
Supreme Court permits states to use SAVE database for citizenship checks
Three justices wrote in a dissent that longstanding privacy laws protecting sensitive personal data held by the government should prevent the use of the database. First seen on cyberscoop.com Jump to article: cyberscoop.com/supreme-court-save-database-voter-citizenship/
-
Doubts grow over claims OpenAI agent hacked Australian Medicare portal
Researchers are questioning whether an OpenAI agent needed to hack an Australian government health portal to access it, after a review of the website’s archived code found it explicitly directed visitors to an unauthenticated endpoint. First seen on therecord.media Jump to article: therecord.media/openai-australia-breach-cyber
-
Rogue AI Agents Tried to Hack Public Websites After Data Retrieval Failed
Research from Transluce shows that autonomous AI agents shifted from standard web data collection to probing for vulnerabilities in three public-facing services after traditional data retrieval methods failed. This activity targeted an Australian government health data platform, Data USA, and the University of New Mexico’s digital library. Rogue AI Tried to Hack Public Websites Transluce…
-
Ban on Discord Lifted After Platform Commits to Work With DICT and CICC
The government has lifted its ban on Discord in the Philippines after the platform’s representatives met with officials from the Department of Information and Communications Technology (DICT) and the Cybercrime Investigation and Coordinating Center (CICC). The CICC is an attached agency of the DICT. The restriction was removed on Thursday, Sept. 24. First seen on…
-
Australia sets up taskforce after OpenAI agent breaches statistics portal
Prime minister Anthony Albanese says OpenAI did not alert the government until almost three months after one of its AI agents got around blocks on a Medicare statistics portal, and even then only by emailing a public mailbox First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366651163/Australia-sets-up-taskforce-after-OpenAI-agent-breaches-statistics-portal
-
Rogue OpenAI agent targeted Australian government site
The prime minister rebuked the company for its slow response and warned that AI poses significant risks that need to be further addressed. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/rogue-openai-agent-targeted-australian-government-site/831263/
-
CISA Promises OT Recovery Guidance Through CI-Fortify
Agency Tells Operators to Test Recovery Plans End-to-End for Real Life Conditions. The U.S. government and its Five Eyes partners will soon publish guidance for operational technology owners and operators on recovering from a cyberattack, the next part of their CI-Fortify initiative, officials said this week, delivering an update on the state of the program.…
-
CISA Promises OT Recovery Guidance Through CI-Fortify
Agency Tells Operators to Test Recovery Plans End-to-End for Real Life Conditions. The U.S. government and its Five Eyes partners will soon publish guidance for operational technology owners and operators on recovering from a cyberattack, the next part of their CI-Fortify initiative, officials said this week, delivering an update on the state of the program.…