Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
IANS' Kakolowski: How AI Is Reshaping CISO Budgets & Security Teams
In this video interview, Nick Kakolowski, senior director for CISO research at IANS, talks AI: budgets, ROI, and changes inside security teams.
'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates
Not quite an EDR-killer, but the proof-of-concept cyber technique creates a silent virus detection gap while service runs normally, no exploit required.
HW090: Inside eduroam
Keith Parsons talks with Mary Bull from Internet2 to discuss the history and widespread deployment of eduroam, a global Wi-Fi roaming service supporting research and education netw…
ASOS confirms data breach after “HACKED” in-app notifications
UK fashion retailer ASOS confirmed a data breach Tuesday after hackers sent unauthorized push notifications through its mobile app while claiming to have stolen customer data from …
HS145: The Economics and Architecture of AI Factories (Sponsored)
What is an AI Factory, and why would an enterprise want to invest in one? Johna and John are joined by guests Thierry Pienaar of HPE and Kaushik Shirhatti of NVIDIA to discuss what…
Wikimedia Foundation comes forward as latest OpenAI agent assault victim
Millions of automated requests may have contributed to partial Wikidata outage in May
Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
A new campaign targeting ad account managers uses fake ChatGPT, Gemini, Claude, and Perplexity sites that steal login credentials and multi-factor authentication (MFA) codes throug…
Microsoft extends the Outlook naughty step with two more file types
You didn't really want to be sending around .msix and .msixbundle files, did you?
FBI Blames Contractor’s Missed Patch for ShinyHunters Breach
The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees. The post FBI Blames Contractor’s Missed Patch for…
Classic Outlook clings to stale search results as Microsoft works on a fix
Moved messages linger and throw errors when clicked, leaving Windows Desktop Search as the workaround
How to secure RMM software: 8 controls MSPs should test
RMM platforms give MSPs privileged access across customer environments, making their security controls critical to limiting risk. Acronis outlines eight controls MSPs should test w…
Zombie instructions on carefully constructed web pages could trick GitHub Copilot CLI into sharing secrets
Run the CLI in autopilot mode and take your chances
FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware
An alleged leader of Tren de Aragua’s ATM jackpotting activities, Canelon Aguirre was on the FBI’s top 10 most wanted list since March 2026. The post FBI Arrests ‘Most Wanted’ Deve…
Google overhauls cloud modernization portfolio with new AI agents
Google is overhauling its cloud modernization portfolio by bringing its existing migration and modernization tools along with new agentic migration tools and a new Modernization Hu…
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There is no warning first,…
Asos app delivers a data leak threat instead of fast fashion
Rogue notification claims Snowflake instance compromised, but customer info theft remains unverified
Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks
Citing growing risks posed by more capable and autonomous AI agents, Apple will introduce additional controls. The post Apple to Tighten Full Disk Access Controls in macOS Amid AI …
Denmark's ID register spills more people's details than the country has residents
Abuse of private firm's access exposed 8.8M records, including those of people who had died or moved abroad
Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits
The Wikimedia Foundation says rogue OpenAI agents made unauthorized Wikipedia edits and may have been partially responsible for a May outage. [...]
Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies
The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessful efforts to compromise…
Possible Vulnerability in Apple’s Automatic Reboot
404Media is reporting (alternate link) that a cyber-weapons arms manufacturer is exploiting a vulnerability in iOS to bypass its automatic reboot security feature. This is the feat…
Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers
In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol delivered. Thousands o…
Cybersecurity M&A Roundup: 39 Deals Announced in September 2026
Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind. The post Cybersecurity M&A Roundup: 39 Deals Announced in September 2026 ap…
Long-Running NPM Malware Campaign Accumulates 40,000 Downloads
Since August 2023, attackers have published eight malicious packages as part of the MALFEX supply chain campaign. The post Long-Running NPM Malware Campaign Accumulates 40,000 Down…
Atos lands £350M beat keeping Met Police applications running
Six-year deal covers management and security, with options to add cloud and digital workplace services
8.8 Million Impacted by Data Breach at Denmark’s Central Person Register
Hackers abused a company’s lawful access to the CPR system to steal the personal information of registered citizens. The post 8.8 Million Impacted by Data Breach at Denmark’s Centr…
Nikkei discloses breaches of employees’ Microsoft, Google email accounts
Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts and used one to send thousands of phishing emails.…
Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, means researchers ca…
GTT bets that the network, not the log file, is where AI-era security gets won
Security teams face a time problem, and AI is making it worse. Attackers use AI to find flaws and write exploits faster than any human-staffed security operations center can respon…