What's happening in security
Breaches, credential dumps, actively exploited bugs and AI incidents — pulled from 5,643 items across public feeds, Have I Been Pwned and CISA KEV.
Biggest this week
- Westcon-Comstor posts record US$3.37B first-half sales as APAC demand for AI, cloud and cyber accelerates — Reseller News (NZ), 3d ago
- GitHub Octoverse 2026 — Simon Willison (AI), 4d ago
- Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen — The Hacker News, 3d ago
- Upwind Security Raises $400 Million at $3.8 Billion Valuation — SecurityWeek, 4d ago
- Binance hit by record $6.3 billion crypto hack, scrambles to freeze funds — The Record, 3d ago
-
Anthropic Flags AI Agent Liability Risks as OpenAI Faces Hacking Lawsuit
Attacks by autonomous AI agents are moving out of the lab and into the courtroom, raising unsettled questions about who is liable for what agents do. The post Anthropic Flags AI Agent Liability Risks as OpenAI Faces Hacking Lawsui…
-
I Want Better Reporting on AI Genie Behavior
AI systems are regularly completing tasks in ways that their prompters don t want or intend. Some of them are disturbing, and some of them are dangerous. This is something I ve been calling genie behavior , because I think that re…
-
Deeper expertise, closer to home: What SoftwareOne and Crayon mean for New Zealand partners
For New Zealand channel partners, simply reselling technology is no longer enough. Customers are navigating complex technology environments, spanning cloud, AI, cybersecurity, data, and software. They expect channel partners to pr…
-
Why a network digital twin is the missing piece for AI-era operations
Ask a software developer where they test code, and they’ll describe a staging environment, version control, and an automated regression suite. Ask a network engineer the same question, and the honest answer, more often than not, i…
-
Genea brings AI agents to access control with role-based permissions
Genea has announced the release of Genea MCP, a Model Context Protocol (MCP) server that connects AI agents directly to the Genea Access Control platform. Onboarding a new hire, setting up a contractor for two weeks, or unlocking …
-
Security tools can now scan Claude Enterprise chats and uploads for sensitive data
More than 100 security and compliance vendors have integrations with the Claude Compliance API, which lets a company send Claude activity into the monitoring tools it already uses. CrowdStrike, Microsoft Purview, Splunk, Palo Alto…
-
Trump Says Top Tech Firms Have Signed Accord to ‘Self-Police’ AI Development
The accord opened the door to future regulation but focused on four voluntary steps for the companies to take. The post Trump Says Top Tech Firms Have Signed Accord to ‘Self-Police’ AI Development appeared first on SecurityWeek .
-
It has been five months since my last keynote about AI and so much has happened that I need to write a whole n…
It has been five months since my last keynote about AI and so much has happened that I need to write a whole new talk.
-
Leadership Program 2026: Raising the talent bar and forging new paths
Emerging and mid-career professionals across New Zealand’s technology channel are being encouraged to sharpen their leadership skills and prepare for the next wave of transformation at the Reseller News Leadership Program on 15 Oc…
-
AMD agrees to buy World Labs to fill out its AI stack
Advanced Micro Devices (AMD) has agreed to buy World Labs, a developer of AI “world models” that incorporate knowledge of the physical world, to extend the AI ecosystem around its hardware to encompass areas such as robotics, simu…
-
AI State of the Union (October 2026)
A charcoal sketch of a giant seesaw with a tall angular purple AI machine on the raised left end and a domed purple AI machine on the lowered right end, as small sienna builders with laptops run down the beam toward the lit right …
-
Ingram Micro Experience event to focus on customer outcomes
This year’s Ingram Micro Experience event will focus on helping New Zealand channel partners navigate rapid technology change and turn new opportunities into stronger customer outcomes. Themed “Customer Ready”, Ingram Micro Experi…
-
Quoting Anthropic Frontier Red Team
We evaluate several models on 100 tasks from the [internal Binary Exploitation benchmark] (selected at random), and find that GLM-5.3 develops full control flow hijacks in 4% of the trials; Claude Mythos Preview did so in 6%. Alth…
-
NCSC puts focus on identifying scams for Cyber Smart Week
The National Cyber Security Centre (NCSC) is placing the focus on educating organisations and people on how to recognise and avoid falling victims to scams during next week’s Cyber Smart Week. As the cyber security environment is …
-
Custom ChatGPTs push ClickFix attacks to deploy RAT malware
Custom variants of OpenAI's ChatGPT promoted in sponsored Google results are directing unsuspecting users to malicious sites that use ClickFix attacks to deliver malware. [...]
-
DyFlex preparing to help local customers with AI
Following its acquisition of Bluetree last year, Australian-founded DyFlex is continuing to expand its local presence, supported by a growing customer base and ongoing investment in talent. In the year since, Bluetree has fully co…
-
OpenAI CEO Announces New AI Agent and Avoids Mention of Security Concerns at Developer Conference
Altman made a slew of product announcements and updates, including the company’s new agents, called Dots. The post OpenAI CEO Announces New AI Agent and Avoids Mention of Security Concerns at Developer Conference appeared first on…
-
OpenAI apologizes for agents breaching Australian government websites without authorization
The artificial intelligence giant acknowledged it botched its response to the incidents and should have done more to promptly notify and work with the Australian government in the days after it discovered the breaches.
-
US is looking to weave AI into critical infrastructure for cybersecurity, national cyber director says
Sean Cairncross said CEOs need to be cognizant of how it’s being used, however. The post US is looking to weave AI into critical infrastructure for cybersecurity, national cyber director says appeared first on CyberScoop .
-
OpenAI Gets Sued Over the Hugging Face Hack
A nonprofit in California is doing what Hugging Face has not, and attempting to hold OpenAI legally accountable for the actions of its agents.
-
GPT 6.1 Sol: Near-Astra intelligence for a fifth of the price
My comment on GPT 6.1 Sol: Near-Astra intelligence for a fifth of the price Hacker News. I'm a bit late with the pelicans because I was live-blogging the keynote: https://simonwillison.net/2026/Sep/29/openai-devday-2026-liv... Her…
-
Photo Scrubber — local face blur & metadata removal
Tool: Photo Scrubber — local face blur metadata removal I took a photograph of some protesters, then thought about how I don't like sharing photographs of strangers with identifiable faces. I had GPT-6 Astra build this experimenta…
-
OpenAI DevDay 2026 live blog
I'm at OpenAI DevDay today, in Fort Mason, San Francisco. Same as last year I'll be live blogging the keynote and some other notes during the day. OpenAI gave me a free ticket and a seat in the "creator" area for the keynote. Tags…
-
AI Autopsy: ACRO Breach Shows What Happens When Teams Ignore the Basics
The ICO’s reprimand is a warning to others Phil Muncaster investigates what happens when organisations fail the accountability test Read the rest of AI Autopsy: ACRO Breach Shows What Happens When Teams Ignore the Basics on Assure…
-
From Influence to Evidence: Teaching the SOC Not to Make the Same Mistake Twice
AI-driven security, Artificial Intelligence, Machine Learning, Security Operations Center (SOC), SOC, SOCless – Christophe Briguet, Sr. Director of Product Management – AI Security Analytics, Stellar Cyber San Jose, Calif. – Sep. …
-
Dotted Line: How construction is dealing with cybersecurity in the age of AI
Contractors rank cybersecurity low on their priority lists. But lawyers say being prepared is critical when the inevitable breach occurs.
-
Security Roundup September 2026
Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. BH Consulting launch BH Haven a new service for SMEs We are delighted to announce the launch of BH Haven, a new service from…
-
LastPass warns employees before they share sensitive data with AI tools
LastPass has announced an expansion of its Business Max offering to include AI Monitoring Protect and Web Monitoring Protect, new visibility and governance capabilities that enable organizations to identify and secure the AI tools…
-
Postman adds security controls for AI agents, APIs, and MCP servers
Postman has announced the general availability of Fabric Gateway, a protocol-agnostic control plane for governing how AI agents, LLMs, and MCP servers discover and interact with APIs, tools, and other agents. With Fabric Gateway, …
-
Reco Raises $55 Million for Agentic Security
The company will use the funds to expand its sales, partnerships, channels, and customer support teams. The post Reco Raises $55 Million for Agentic Security appeared first on SecurityWeek .
-
Hackers Use ChatGPT Custom GPTs in ClickFix Attacks
The personalized versions of ChatGPT were used to impersonate legitimate products and trick users into executing PowerShell commands. The post Hackers Use ChatGPT Custom GPTs in ClickFix Attacks appeared first on SecurityWeek .
-
Webinar: Closing the accountability gap in AI-assisted delivery
Source control records who committed code. It does not record who made the decisions behind it, and that gap is widening as AI agents take on more of the delivery process. This session explores how organisations can adapt accounta…
-
Meta gives small businesses an AI agent that knows their work
Meta has introduced Muse for Small Business, adding skills and connectors to its personal AI agent to help business owners get work done using the tools they already use. Muse launched earlier this month in the US and Canada and c…
-
Vega II brings security-trained AI and lasting memory to the SOC
Vega has introduced Vega II, its biggest platform release since emerging from stealth. The update brings frontier AI trained for security operations into the SOC, gives teams a lasting record of what they have learned, and removes…
-
Rig Security Emerges From Stealth With $12M to Tackle Agentic AI Identity Risks
Rig provides an identity dependencies graph to distinguish between legitimate users and rogue AI agents The post Rig Security Emerges From Stealth With $12M to Tackle Agentic AI Identity Risks appeared first on SecurityWeek .
-
Deepfakes become a board priority once an executive falls for one
Nearly three-quarters of security leaders have encountered or suspect a deepfake attack in the past year, while just 10% say their organizations have purpose-built defenses, according to Pindrop’s 2026 Deepfake Readiness Index. Re…
-
Malicious Custom GPT on chatgpt.com lures users into installing a RAT
Malware peddlers are using sponsored Google results to push a malicious ChatGPT Custom GPT named Plus 5.6, created to lead users to a fake Cloudflare CAPTCHA check and, ultimately, make them download and run a remote access trojan…
-
OpenAI’s GPT-6 Astra ran supply chain attacks despite being told not to
OpenAI s GPT-6 Astra carried out supply chain attacks on software outside the scope of a security test, according to the UK AI Security Institute (AISI). Anatomy of an unsanctioned simulated supply-chain attack (Source: AISI) AISI…
-
Four Cyber Threats Harboring Big Plans for the Future
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations. The post Four Cyber Threats Harboring Big Plans for the Fu…
-
OpenAI Calls Off GPT-6.1 Astra Launch, Details Safety Cases for Frontier Training
The GPT-6.1 Astra model was slated to debut in ChatGPT and Codex in October, but it fell short of expectations. The post OpenAI Calls Off GPT-6.1 Astra Launch, Details Safety Cases for Frontier Training appeared first on SecurityW…
-
Palo Alto Networks and NVIDIA want tighter control over AI agents
Palo Alto Networks is expanding its work with NVIDIA to help companies control what AI agents can access and do. The collaboration covers agent activity, network traffic and identity management through NVIDIA’s Open Agent Safety P…
-
Claude Sonnet 5.5 gets faster without a price hike
Anthropic has released Claude Sonnet 5.5, an AI model for coding and office work. The company says it responds more than 30% faster than its predecessor and uses fewer tokens to complete many tasks, reducing the cost per task with…
-
OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions
OpenAI on Monday shelved plans to release GPT-6.1 Astra, a next-generation artificial intelligence (AI) model that was planned for an October launch, after it failed internal safety and alignment audits. The development was first …
-
A four-week plan to tackle vendor concentration risk
In this Help Net Security video, Guilliano Molaire, founder of Skycloak, explains how to map vendor concentration risk. A company may pay 30 vendors and think its tools are spread out, but many of those vendors run on the same few…
-
OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot
OpenAI said it has made the decision to pause training of its most powerful models after one of its agents during reinforcement learning (RL) training contacted an external chatbot by exploiting a loophole in its internet-access r…
-
Is Microsoft truly serious about confronting AI’s dangers?
What’s been hiding for years is now in plain sight: AI poses a danger to humanity in a way no technology has since the atom bomb. That was made clear in July when OpenAI agents broke loose from a containment area blocked from onli…
-
llm-anthropic 0.30
Release: llm-anthropic 0.30 In addition to Claude Sonnet 5.5, this release adds the ability to run llm anthropic refresh to refresh the list of Anthropic models directly from their API - which means I don't need to push a new rele…
-
Claude Sonnet 5.5
Claude Sonnet 5.5 New Sonnet model from Anthropic today. They say it "runs 30%+ faster, and costs up to 30% less for most work" - it's priced the same as Sonnet 5 but appears to beat it on every benchmark, and should be cheaper to…
-
Nvidia Launches AI Agent Safety Platform to Prevent Rogue Activities
The Open Agent Safety Platform relies on both hardware and software components to monitor agent activities and quarantine unruly agents before they cause harm.
-
The Top CISO Stories from Around the Web: September 2026
As deepfake voice scams and rogue autonomous agents reshape the threat landscape, today’s CISOs are stepping onto the front lines of a high-stakes AI revolution. Navigating this shift requires security leaders to evolve into key C…
Last fetch 1m ago · 1 new · 1 source error(s)