Tag: technology
-
Ransomware recovery CEO charged over secret ransom payments
The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for decryptors while claiming to use proprietary technology to recover encrypted data. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ransomware-recovery-ceo-charged-over-secret-ransom-payments/
-
Citizen Lab Slams Trump Administration, ‘Techno-Fascist’ Executives
The Citizen Lab’s Ron Deibert warns the US government is pushing for pervasive surveillance and says certain technology executives are all too happy to help. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/citizen-lab-slams-trump-administration-techno-fascist-executives
-
Cyber experts call on CISA to create mandatory federal OT rules
The Operational Technology Cybersecurity Coalition released a white paper urging the CISA to create a new directive centered around operational technology, which is used to monitor and control critical infrastructure. First seen on therecord.media Jump to article: therecord.media/cyber-experts-call-on-cisa-require-ot-security
-
OT Coalition Urges CISA to Mandate Federal OT Security
OTCC urged CISA to mandate baseline security requirements for federal operational technology First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ot-coalition-cisa-mandate-federal/
-
Even with OT network visibility, critical infrastructure operators struggle with legacy equipment
Large critical infrastructure operators run seven separate security tools on average, and most still cannot see every asset on their operational technology (OT) networks. That … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/07/ot-network-visibility-challenges/
-
Automation, AI agents or people? Sorting out who handles each security finding
Just over half of the 200 senior security and technology leaders polled for ArmorCode say their organizations will struggle to simplify their software security programs if … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/07/software-security-vulnerability-management-survey/
-
OT Attacks on US Critical Infrastructure Could Disrupt Military Operations and Physical Processes
US critical infrastructure faces an operational technology threat that extends beyond civilian service outages. State-sponsored intrusions and direct attacks on industrial controllers could disrupt physical processes and undermine military operations by targeting electricity, water, telecommunications, transportation, fuel, manufacturing, and logistics providers outside installation boundaries. Disabling a supporting utility or transportation system could interrupt essential services,…
-
Here’s how experts think CISA should tell agencies to protect OT
Government auditors say federal agencies haven’t met mandated security steps for operational technology, which hackers targeted in water sector attacks this summer. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-ot-cybersecurity-directive/
-
Using Technology to Fight Distraction and Improve Focus
Learn how to use technology to fight distraction and improve focus with notification controls, site blockers, focus timers and task lists. First seen on hackread.com Jump to article: hackread.com/using-technology-fight-distraction-improve-focus/
-
Trust, Control and ROI: AI’s Next Chapter
HumanX Compendium Highlights Leading Perspectives on AI, Safety and Business Value. Welcome to the HumanX Amsterdam 2026 Compendium. Across our conversations with technology leaders, artificial intelligence pioneers and business executives, three themes surfaced again and again: trust, control and return on investment. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/trust-control-roi-ais-next-chapter-a-33022
-
How to Talk to Your Board About AI
Board Member and Ex-CISO on Framing AI Value, Risk and Accountability. Boards don’t need a tour of the technology behind AI. Monique Shivanandan, a Token board member and former HSBC CISO and chief data and analytics officer, explains how leaders can frame AI value, assign accountability and control consequential agent decisions. First seen on govinfosecurity.com…
-
MI5 Raises Alarm Over Chinese Funding of UK Academic Research
MI5 warns UK universities that over 100 academics may have unknowingly worked on research funded by a Chinese institute linked to the MSS. On September 30, MI5 published a formal warning naming the China General Technology Research Institute, CGTRI, also called CAGT in some translations, as an outfit with very strong ties to China’s Ministry…
-
MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics
The U.K.’s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gathering efforts on behalf of Beijing’s state security service.In a “Security Service Espionage Alert” issued on September 30, 2026, MI5 said the “primary purpose of the China General Technology Research Institute (CGTRI) ä¸å›½é€šç, ¨æŠ€æœ¯ç , 究院…
-
UK and Europe at risk from Chinese tech, says security think tank
Although the UK and Europe have laws to restrict Chinese technology from critical infrastructure, implementation is patchy First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366651406/UK-and-Europe-at-risk-from-Chinese-tech-says-security-think-tank
-
OpenAI’s Medicare attack has exposed Australia’s ‘tech debt’. Fixing it could bring a big bill for taxpayers
Home affairs department orders all federal government agencies to conduct review of ‘legacy technology’ amid fallout from AI agent hacks <ul><li>Get our <a href=”https://www.theguardian.com/email-newsletters?CMP=cvau_sfl”>breaking news email, <a href=”https://app.adjust.com/w4u7jx3″>free app or <a href=”https://www.theguardian.com/australia-news/series/full-story?CMP=cvau_sfl”>daily news podcast</li></ul>The Australian government faces significant “tech debt” that could bring a big bill for taxpayers after the <a href=”https://www.theguardian.com/technology/2026/sep/24/openai-agent-hacked-medicare-australia-what-we-know-so-far-ntwnfb”>OpenAI Medicare breach, as…
-
Botnets, adversarial attacks and data poisoning top leaders’ AI threat list
Companies are putting more money into AI while naming attacks on AI systems as the threat they are least ready to face. PwC surveyed 3,934 business and technology leaders in … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/02/pwc-attacks-on-ai-systems/
-
U.S. Arrests Company Owner Accused of Shipping $300 Million in Restricted GPU Servers to China
U.S. authorities have arrested Greg Lui, a 38-year-old California-based technology company owner, on allegations of orchestrating the illegal export of more than $300 million in advanced GPU-equipped servers to China through a network of overseas transshipment companies. Federal prosecutors claim that Lui, also known as Yiu Kong Lui, used false end-user documentation, intermediary companies, and…
-
Omada Purchases EmpowerID to Govern AI Agents at Runtime
EmpowerID Technology Controls What AI Agents Can Execute in Real Time. Omada acquired boutique Ohio-based vendor EmpowerID to add AI agent identity governance and runtime authorization, giving enterprises controls to discover agents, restrict their tools and permissions, govern actions as they occur and create auditable records of execution. First seen on govinfosecurity.com Jump to article:…
-
MI5 Warns Over 100 Academics Helped China’s Espionage Plans
MI5 has issued a rare warning to UK academics contributing to the China General Technology Research Institute First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/mi5-alerts-academics-chinese/
-
US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access
ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from the United States. Technology, manufacturing, government, and consulting organizations showed the highest exposure.By combining Microsoft 365 session theft with remote-access tool deployment, CSuite can turn a phishing incident into broader account compromise, fraud First seen on thehackernews.com…
-
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
Tags: access, citrix, exploit, finance, flaw, google, government, group, intelligence, mandiant, service, technology, threat, usaUnknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe.The activity, observed by Mandiant Consulting and Google Threat Intelligence Group (GTIG) in September 2026, has targeted government, financial services, technology, education, and legal and professional First seen…
-
Pro-Russia Hacktivists Increase OT Intrusion Claims Across EU
ENISA Says NoName057(16) Drove 48% of Incidents, Targeting Critical Infrastructure. The European Union Agency for Cybersecurity warns of rising intrusion claims against operational technology and industrial environments as hacktivist campaigns increasingly target critical sectors. ENISA found that ideology-driven malicious cyberattacks accounted for 57.3% of all incidents. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/pro-russia-hacktivists-increase-ot-intrusion-claims-across-eu-a-32966
-
Oracle PeopleSoft Servers Targeted Again as ShinyHunters Expands Extortion Operations
Tags: cve, cyber, exploit, extortion, government, healthcare, oracle, technology, threat, vulnerabilityThe ShinyHunters-linked threat cluster tracked as UNC6240 has renewed mass exploitation of Oracle PeopleSoft servers vulnerable to CVE-2026-35273. Expanding beyond its earlier focus on higher education into technology, healthcare, government, transportation, agriculture, and IT services. The campaign demonstrates how quickly financially motivated actors can adapt when organizations rely on perimeter workarounds rather than applying vendor-issued…
-
Other users can watch your browsing and time your keystrokes through OS file notifications
Researchers at Graz University of Technology have used the file-notification systems in Windows, Linux, and macOS to spy on activity in other accounts. On Windows, a standard … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/28/cve-2025-68788-file-notification-attacks/
-
US soldier gets 70 months in prison for extorting 10 tech, telecom firms
A former U.S. Army soldier has been sentenced to 70 months in prison for hacking and extorting at least 10 U.S. technology and telecommunications companies between April 2023 and December 2024. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/us-soldier-gets-70-months-in-prison-for-extorting-10-tech-telecom-firms/
-
CISA And FBI Warn OT Operators About Third-Party Hacking
An Intrusion Last Year May Have Provided Hackers With a Roadmap for OT Cyberattacks. U.S. authorities are warning companies that use operational technology to take care when granting online access to third-party integrators or consultants, warning that foreign hackers are actively using such connections as a vector for cyberattacks. First seen on govinfosecurity.com Jump to…
-
Businesses expand AI’s cybersecurity uses as comfort with technology grows
Companies in the experimentation stage were less likely than established users to deploy advanced AI-powered defenses, a new survey found. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-cybersecurity-maturity-agents-kpmg/831385/
-
Ban on Discord Lifted After Platform Commits to Work With DICT and CICC
The government has lifted its ban on Discord in the Philippines after the platform’s representatives met with officials from the Department of Information and Communications Technology (DICT) and the Cybercrime Investigation and Coordinating Center (CICC). The CICC is an attached agency of the DICT. The restriction was removed on Thursday, Sept. 24. First seen on…
-
CISA Promises OT Recovery Guidance Through CI-Fortify
Agency Tells Operators to Test Recovery Plans End-to-End for Real Life Conditions. The U.S. government and its Five Eyes partners will soon publish guidance for operational technology owners and operators on recovering from a cyberattack, the next part of their CI-Fortify initiative, officials said this week, delivering an update on the state of the program.…
-
CISA Promises OT Recovery Guidance Through CI-Fortify
Agency Tells Operators to Test Recovery Plans End-to-End for Real Life Conditions. The U.S. government and its Five Eyes partners will soon publish guidance for operational technology owners and operators on recovering from a cyberattack, the next part of their CI-Fortify initiative, officials said this week, delivering an update on the state of the program.…