TECHNOLOGY · AI · CYBERSECURITY · THE SYSTEMS SHAPING BUSINESSThreats, vulnerabilities, identity, critical infrastructure and the security architecture emerging around AI agents.
Google advises organizations to treat any internet-facing appliance that ran a vulnerable version as potentially compromised, then rebuild it and rotate the credentials it held.
The contractor-run center that mails and emails notices for every federal bankruptcy court is offline, and neither the judiciary nor BAE has said when it will return.
The largest U.S. bank says agents that log in with customers' passwords are too risky, while it still supports data sharing through approved open-banking channels.
CEO Brian Moynihan said the outside workers joined about 3,000 technical staff, a rare look at what AI-driven bug hunting costs once the findings arrive.
The NCSC's updated guidance names the quantum-resistant key exchanges to switch on now and warns that TLS 1.2 will never get them.
Citizen Lab ties Discover-Tech's ad platform to attacks on Al Jazeera devices, and its ads showed up on Pentagon, NATO and chipmaker networks, though that alone does not prove infection.
The count covers only one of four states the utility serves, a month after it learned of the theft from an attacker’s online post.
Both vendors say there is no workaround, and Cisco warns that intruders with root access to its email appliances may erase traces of their activity.
A Florida court order lets Microsoft and Health-ISAC take over web addresses used by an account marketplace and two phishing kits that Microsoft says earned their operators tens of millions of dollars.
Eighteen months after the attack, Britain’s Legal Aid Agency says stolen files include about 250,000 pre-2007 records and details on some people supervised by probation services.
The update to software embedded in billions of devices also removes support for an old Windows file-sharing protocol, a change some users will have to plan around.
Federal agencies have until Friday to patch the Windows Shell flaw, while a critical Outlook bug can run attacker code when an email is merely previewed.
Researchers say intruders reached root on an up-to-date appliance without leaving a web shell, and Ivanti’s own integrity tool may not spot it.
England's social housing complaints body says the incident is contained but it does not yet know how much data is involved or whether personal information was affected.
An Ohio indictment says the scheme placed workers at more than 70 U.S. employers, as the FBI warns facilitators now run smaller, harder-to-spot laptop farms.
Police in Ghana and Nigeria worked alongside Meta, Google, OpenAI, crypto exchanges and blockchain analysts in the first joint push aimed at the region’s scam centers.
A former U.S. acting national cyber director, a Microsoft security executive and three other experts name the risks they think leaders underrate, from indifference to post-quantum delays.
The figures come from one security company's own clients, sit behind a download form and were promoted in sponsored content, but they point to questions dealer boards can ask now.
Danfoss says many hijacked units were outdated or past end of life, nobody has claimed the attack, and Reuters notes similar disruptions at U.S. military commissaries in August.
The owner of Food Lion, Stop & Shop and Albert Heijn says it has no evidence so far that customer or employee data was taken, but has not said what kind of incident it is.
The Swedish retailer has not notified the U.K. data regulator, and unnamed sources told The Times the claims may come from the group behind last week's ASOS attack.
The security company’s September figures also show more phishing and a measurable share of employee AI prompts that risk leaking sensitive company data.
The agency wants compromise checks and secret rotation, not just upgrades, even though the new bug is not on its exploited list and Citrix knows of no attacks.