TECHNOLOGY · AI · CYBERSECURITY · THE SYSTEMS SHAPING BUSINESSPage 4 of 8: earlier stories.
Vetted defenders, red teams and critical-infrastructure testers get progressively fewer refusals, while the public versions of Claude keep their stricter blocks.
Microsoft is adding .msix and .msixbundle files to the blocked list in new Outlook for Windows and Outlook on the web, with an opt-out for admins.
AI tools including OpenAI Codex, LiteLLM and Oracle's Autonomous AI Database fell alongside phones, printers and smart home gear.
Classes are canceled through Thursday, and records on at least 130,000 students, staff and others may have been exposed, according to The Record.
GitHub rejected the report because a user must point the agent at untrusted content, but the researchers say the attack chain still works.
The bureau's first account of the root cause points to an unpatched third-party platform, which Reuters sources identify as Oracle PeopleSoft run by Accenture.
Fake Cloudflare checks talk visitors into running PowerShell, installing a rented stealer whose browser extension poses as a Microsoft Word editor.
The companies used AI-assisted analysis to find the bugs and now let enterprises queue specific open-source dependencies for embargoed fixes and backports.
LibreOffice shipped fixes Monday, but Apache OpenOffice users remain exposed until version 4.1.17 leaves testing, and a proof of concept is already public.
The alert, addressed to the retailer's data protection officer, reached customers' phones; ASOS has not said whether any data was taken or how the message was sent.
Checkmarx says one package, function-flag, has been delivering malware for more than a year and drew about 37,000 downloads with no advisory flagging it.
Regulators issued a consumer fraud alert as the count of exposed records grew, and Woori Bank and NH NongHyup Bank were reportedly targeted as well.
CVE-2026-21589 lets attackers without a login read files in the web root of self-hosted Jira, Confluence and Bitbucket, and Atlassian says exposed servers should come offline until patched.
An insider with any valid account could read other users' mail and attachments on unpatched on-premises servers; Microsoft rates exploitation as more likely.
The foundation says the agents tried to turn a citation tool and its public note pad into proxies and flooded Wikidata with queries that contributed to a May outage.
A Russian-speaking group called DataSuckers put a ransom note and countdown on the chain's website and says it will sell the data, while ATB insists customer information is safe.
Names, addresses and lifelong CPR numbers for most people ever registered in Denmark were taken, in what may be the country’s largest breach.
A path traversal bug in the command-line tool admins use to push firmware and BIOS updates is fixed in version 2.3.0.0, along with four high-severity flaws.
Anibal Alexander Canelon Aguirre faces bank fraud, laundering and terrorism-support charges over ATM jackpotting tied to Tren de Aragua.
The Linux malware turns hijacked routers, cameras and DVRs into proxy nodes and talks to its operators through public NAT-traversal servers used by VoIP and video apps.
A social engineering attack on a New Jersey insurer and a ransomware claim against a Texas back-office firm landed on the federal breach portal in the same week.
Regulators ordered lenders to cut external access to nonessential systems after finding the same IP address at all seven firms, including Yegaram Savings Bank.
Appliances patched days earlier for two other zero-days began crashing, and CISA gave federal agencies until Oct. 7 to deal with the new bug.
The company paused its open-source rewards program Oct. 1 after maintainers were flooded with AI-generated findings that did not hold up.