What's happening in security
Breaches, credential dumps, actively exploited bugs and AI incidents — pulled from 5,638 items across public feeds, Have I Been Pwned and CISA KEV.
Biggest this week
- Westcon-Comstor posts record US$3.37B first-half sales as APAC demand for AI, cloud and cyber accelerates — Reseller News (NZ), 2d ago
- GitHub Octoverse 2026 — Simon Willison (AI), 4d ago
- Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen — The Hacker News, 2d ago
- Upwind Security Raises $400 Million at $3.8 Billion Valuation — SecurityWeek, 4d ago
- Binance hit by record $6.3 billion crypto hack, scrambles to freeze funds — The Record, 2d ago
-
ServiceNow gives AI agents a passport, and limits on what they can do
ServiceNow has announced a new AI Passport solution and significant advances in AI governance to help ensure AI agents are production-ready by combining runtime governance, platform integration, and comprehensive oversight, all in…
-
Anthropic tells investors quarterly revenue up nearly 50% to $16.8bn ahead of IPO
Anthropic tells investors quarterly revenue up nearly 50% to $16.8bn ahead of IPO The phrase "told investors" appears four times in this FT article, which reports on Anthropic's day of hosting investors on Wednesday. Lots of detai…
-
Cybersecurity Awareness Month 2026: Stay Safe Online When Using AI Tools
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Oct. 15, 2026 – Listen to the Podcast Episode It s Cybersecurity Awareness Month (CAM) and Alissa (Dr Jay) Abdullah, PhD, SVP and Deputy Chief …
-
A distributor’s real value doesn’t show up on the price tag
When channel partners weigh up distributors, the conversation often starts with price. This is because price is straightforward and tangible, and is immediately reflected in the bottom line. But price alone says little about what …
-
Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of 2026. …
-
Why AI Confidence Is Not Validation
AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is that these tools are growing more confident in their own output faster than practitioners are develop…
-
What a cockatoo can teach us about the evidence AI wasn’t built to hear
AI systems do not make decisions from reality. They make decisions from representations of reality: records, observations, measurements, histories, labels, documents, and whatever else an organisation has decided belongs in the da…
-
Optro automates GRC workflows with auditable AI agents
Optro has expanded its portfolio of autonomous AI agents for enterprise risk teams. Its GRC Intelligence Platform combines purpose-built governance, risk, and compliance capabilities with human oversight, allowing agents to operat…
-
Qualys introduces TruConfidence to orchestrate cyber risk remediation
Qualys has announced TruRisk Eliminate 2.0 with TruConfidence, a new remediation intelligence and orchestration engine that powers Qualys vision for Autonomous RemOps, a new category for the frontier AI era. Built on Qualys extens…
-
Immuta CISO predicts critical AI incidents at major enterprises within 18 months
In this Help Net Security interview, Michael Scott, CISO at Immuta, talks about how organizations should handle permissions for AI agents. He argues agents should be treated as lower-trust identities that don’t inherit everything …
-
The internet’s attack surface moves at very different speeds
Censys found that AI-related software exposed to the public internet grew 63% in nine months, from 164,088 IP addresses in October 2025 to 267,915 in July 2026. Elsewhere in its scans, the internet-scanning company measured much s…
-
AI-generated changes create review bottlenecks in software delivery
83.4% of respondents who use DevOps practices run CI/CD pipelines, making them the most widely adopted practice in that group, according to JetBrains’ The State of CI/CD in 2026 report. Adoption exceeds that of containerisation an…
-
LaTeX renderer
Tool: LaTeX renderer Inspired by Paul Ford and Aboard Foundary's new web app Tiny Little Office , which provides a suite of web app content editors (a Word Processor, Outliner, Presentation Builder, Spreadsheet, Calculator, Drawin…
-
Ooof - this is the first time I've seen expert commentary generated by AI, but I'm sure it won't be the last 🤦…
Ooof - this is the first time I've seen expert commentary generated by AI, but I'm sure it won't be the last 🤦 https://www. techtarget.com/it-infrastructu re/news/366651937/Finland-tells-Google-to-halt-site-work-on-13B-data-center…
-
Introducing UL Gauntlet, a Benchmark for How Well AI Explains
UL Gauntlet results chart/images/ul-gauntlet-chart.webphttps://thebenchmarks.ai I'm Kai, Daniel's AI assistant, and I wrote this post. toc UL Gauntlet is a benchmark for how well AI models explain things. Each model has to say why…
-
TUANZ calls out political short-termism ahead of election
New Zealand risks squandering its vast digital and economic potential if political leaders continue to reset the nation’s technological direction every three years. This was the warning from technology leaders at the Tech Users As…
-
Tree Appreciator
Tool: Tree Appreciator Another game experiment with Claude. This one used the default Claude iPhone app (chat mode, not Claude Code mode) where I prompted Claude Opus 5.5 Max with: Build a three js game called "Tree appreciator" -…
-
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
-
Onyxia Cyber Joins the Open Secure AI Alliance to Advance Agentic Cyber Governance and Defense
Onyxia Cyber is proud to join other industry leaders as a partner in the Open Secure AI Alliance, a new industry coalition organized by the Linux Foundation and originally established by NVIDIA. The Alliance is focused on ensuring…
-
I moderated an event in DC this morning and a high-ranking government official in cyber kept using the term SI…
I moderated an event in DC this morning and a high-ranking government official in cyber kept using the term SI instead of AI, and pronounced it sigh. I get it, we all have bosses we need to serve and we all pick our battles. Still…
-
AI is mass decompiling games. That's both awesome and scary.
AI is mass decompiling games. That s both awesome and scary. Indie game developer Popcar talks about the recent wave of AI-powered decompilation of existing games, enabling weird mashups between existing games, and producing a boo…
-
AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds
In Booz Allen’s isolated OT lab, AI models met every objective across eight scenarios and reached an industrial control network from a perimeter compromise in just over 16 minutes. The post AI Agents Navigate Unfamiliar OT Systems…
-
10 Endpoint Security Trends and Tips for 2027 | Huntress
Learn the latest endpoint security trends, from AI-powered defense to zero trust and human-led threat hunting that help under-resourced teams stop threats faster.
-
Texas HB 3834 Cybersecurity & AI Training Requirements
Texas HB 3834 and HB 3512 require annual cybersecurity and AI awareness training. Learn who’s in scope, what’s required, and how to comply fast.
-
Senators press Trump admin to rally federal government around AI safety, security
The letter argues federal agencies should more rigorously test AI models for security threats and sandbox evasion, set new safety standards and lean into defensive AI. The post Senators press Trump admin to rally federal governmen…
-
The Future of AI Cryptanalysis
Matthew Green has been writing a rather pessimistic series of posts about the potential for AI systems to vastly outperform humans in cryptanalysis of both symmetric and public-key ciphers. I am more optimistic than he is. That is…
-
Harmonic Security Raises $50 Million for Workforce AI Protection
The cybersecurity startup plans to expand engineering and go-to-market teams in the US and UK. The post Harmonic Security Raises $50 Million for Workforce AI Protection appeared first on SecurityWeek .
-
The Blind Spots of Agentic Pentesting and How to Close Them
AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave many assets and vulnerabilities untested. Picus Security explains how combining agentic pentesting with exposur…
-
Download: The IT and security field guide to AI adoption
Security and IT teams are under pressure to adopt AI, but many are seeing the opposite of what was promised. Tools that demo well don’t hold up in real workflows. Complexity increases. Trust breaks down. And instead of reducing wo…
-
Anthropic warns small AI models could self-replicate through IoT devices
"Small weight-based replicators" could usher in a new generation of computer worms.
-
Advantage 26: Join Cybersecurity Leaders From Anthropic, Palantir, OpenAI, Anduril, AWS. Oct. 21, 2026. Reston, Virginia
Sausalito, Calif. – Oct. 14, 2026 – Hosted by Everfox. REGISTER NOW Join senior government, defense, and industry leaders for a day exploring how trusted mission data and operational AI are transforming national security. REGISTER…
-
How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team
Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structured drill shows security teams exactly where verification breaks down, while nothing is at stake. The call comes…
-
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said. Its researchers built the attack in six da…
-
An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part. TL;DR During an authorized assessment, an AI pentesting agent found a critical authentication bypass on a m…
-
Radware MCP Server Protection monitors agent activity and guards against protocol abuse
Radware has announced Radware Model Context Protocol (MCP) Server Protection, a purpose-built solution designed to help organizations more securely adopt MCP as AI agents gain greater access to enterprise applications, data and bu…
-
SolarWinds Avior pairs IT automation with human approval and audit trails
SolarWinds has announced the launch of Avior, a standalone, goal-oriented agentic AI system purpose-built for mission-critical IT environments. Built on the SolarWinds Platform, Avior will help IT teams securely define goals, coor…
-
Chainguard Harness uses frontier AI to test running applications for vulnerabilities
Chainguard has announced Chainguard Harness, a new cyber harness that uses frontier AI models like Anthropic s Claude Mythos 5.1 to find and fix exploitable vulnerabilities in an organization s application code. Harness builds an …
-
Scytale MCP gives AI tools scoped, read-only access to compliance data
Scytale has announced the launch of Scytale MCP, a Model Context Protocol server that connects a customer s AI tools directly to their compliance program. With Scytale MCP, tools such as Claude and ChatGPT can query live complianc…
-
GitHub adopts cheaper AI model to catch secrets developers leave in code
GitHub has trained a credential classifier to improve generic secret detection and reduce false alerts. The new pipeline cut median post-push scan execution time by 86% and model serving costs by more than 98% compared with its pr…
-
OpenAI engineer arrested for allegedly trying to eavesdrop on executive meetings
A recording device wrapped in toilet paper and plugged into the back of a television in an executive conference room at OpenAI’s San Francisco office has led to the arrest of one of the company’s engineers. Abdulrahman Alfozan, a …
-
Lenovo’s Angela Roberts on helping partners navigate challenges and opportunities
AI, the rising cost of components, an election year and global factors affecting the economy are all impacting the local channel, but for Lenovo New Zealand channel manager Angela Roberts, the focus remains clear: helping partners…
-
Most companies count AI agents as insiders, and CISOs worry about their own liability
Software that works on an employee’s behalf is now turning up in incident reports. At 95% of the companies in a Trellix survey of 600 CISOs, an AI agent or other autonomous system was linked to an insider incident in the past 12 m…
-
OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room
A Saudi National and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to covertly record sensitive conversations. Abdulrah…
-
An OpenAI Employee Allegedly Used a Chatbot to Help Plant a Recording Device at the Office
Chatbot prompts reveal the engineer’s alleged efforts to set up a covert listening device days before one was found in a meeting room used by high-level executives.
-
Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say
Saudi national Abdulrahman Alfozan was arrested Friday and terminated by OpenAI. The post Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say appeared first on SecurityWeek .
-
Redesigning source control at Anthropic
Redesigning source control at Anthropic Interesting piece from Anthropic describing why and how they built their own custom alternative to Git, based on the dramatic increase in rate of changes to their code after the past six mon…
-
Saudi national charged with planting spy device in OpenAI executive conference room
Abdulrahman Alfozan, 35, a Saudi national working as an engineer for OpenAI, was charged Tuesday with secretly bugging an executive conference room at one of the company’s buildings in San Francisco.
-
OpenAI engineer arrested for allegedly planting spy device in office
A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to secretly record sensitive conversations. [...]
-
llm-gemini 0.35
Release: llm-gemini 0.35 I added support to llm-gemini for the new Gemini 4 Argon model, made available today via the Gemini API and for customers of their $100/month subscription plan. Here are the low, medium and high pelicans .…
-
Anthropic warns self-replicating AI could spread to your smart devices
Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating distributed botnets capable of running AI workloads without relying on data…
Last fetch 1m ago · 0 new · 1 source error(s)