News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
Why we're building IT Leaders Network
A private space for the people who run technology in their organisations, and what to expect as membership opens.
-
Is AI killing jobs for college grads? Not yet, new study says. (opens Washington Post in a new tab)
A paper by two UCLA professors comes amid fears that AI will devastate entry-level hiring.
-
Meta-Led Anti-Terrorism Group Faces Mass Resignation of Expert Advisers (opens Wired in a new tab)
Meta and other tech giants are pushing through structural changes at the Global Internet Forum to Counter Terrorism that outside researchers allege will weaken oversight of an already embattled consortium.
-
A user says Meta’s Muse gave his address to a Marketplace buyer (opens The Next Web in a new tab)
A YouTuber says Meta’s Muse agent gave his home address to a Facebook Marketplace buyer and then told the buyer he was home when he wasn’t. Matt Robb described what happened in a post on Threads. “Just found out it told people my address and agreed a lowball price,” Robb wrote. Robb had let Muse...
-
AI Agents Are Privileged Users; Who Is Auditing Their Access? (opens Dark Reading in a new tab)
Enterprises regularly rigorously monitor human employees, while autonomous AI agents quietly operate with broad privileges that could turn them into the next generation of insider threats.
-
Florida asks a court to stop OpenAI building new AI models (opens The Next Web in a new tab)
Florida’s attorney general, James Uthmeier, has asked a state court to stop OpenAI from developing new AI models without independent safety guardrails. He made the request in a motion for a temporary injunction filed on Monday. It was filed in the Highlands County circuit court. The motion is part...
-
Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks (opens The Hacker News in a new tab)
Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis. The malware has been seen in a small number of targeted intrusions at telecommunications organizations, universities, medical nonprofits...
-
Anthropic releases Claude Sonnet 5.5 with the cyber limits it reserved for its best models (opens The Next Web in a new tab)
Anthropic has released Claude Sonnet 5.5, which scores 70.6% on the Terminal-Bench 4.0 agentic coding test against 10.3% for Sonnet 5 and 66.4% for the more expensive Opus 5.5. It is the first Sonnet to ship with frontier-style cyber safeguards and with classifiers that block reasoning extraction...
-
IAM for AI agents: A Practical Enterprise Framework (opens The Hacker News in a new tab)
What is IAM for AI agents? AI agents authenticate, invoke tools, and act across enterprise systems with delegated authority. IAM for AI Agents is the identity-control architecture that governs those actors. This guide covers the limits of conventional provisioning, the components that matter, how...
-
Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M (opens The Hacker News in a new tab)
The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the exchange used, Bitget said on Monday. The attacker exploited the flaw to obtain high-level internal credentials and then, on September 24...
-
RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims (opens The Hacker News in a new tab)
RatHat's operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has traced nearly 100 deployments of that console since April 2026. It said this fits a malware-as-a-service model, in which each customer...
-
Modulate Raises $25 Million to Advance Deepfake Detection (opens Security Week in a new tab)
The misuse and abuse of AI-generated voice is growing. Modulate’s intention is to allow real time detection and intervention. The post Modulate Raises $25 Million to Advance Deepfake Detection appeared first on SecurityWeek.
-
OpenAI pauses AI model training after another agent bypasses network restrictions (opens CSO Online in a new tab)
OpenAI has paused training, evaluation, and inference involving tool use for its most-capable AI models after an agent bypassed network restrictions to communicate with an external chatbot during reinforcement-learning training of an internal research model. “Our safety case assumed that the model...
-
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions (opens Dark Reading in a new tab)
A purported ad-blocker exfiltrates reams of sensitive information and benefits from having Google's stamp of approval despite researcher warnings.
-
JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack (opens Dark Reading in a new tab)
The "agentic threat actor" may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.
-
Call for Presentations Open for 2026 CISO Forum Virtual Summit (opens Security Week in a new tab)
SecurityWeek seeks original, vendor-neutral presentations that help cybersecurity leaders navigate emerging threats, strengthen resilience, and address the strategic challenges facing today’s enterprise security programs. The post Call for Presentations Open for 2026 CISO Forum Virtual Summit...
-
Bitget Restarts Bitcoin Withdrawals Following $387.5m Wallet Breach (opens Infosecurity Magazine in a new tab)
Bitget has restarted Bitcoin withdrawals after a $387.5m breach of its hot and warm wallets
-
These Extremists Are Running for Election in November (opens Wired in a new tab)
With the threat of political violence at unprecedented levels, state and federal GOP candidates are openly sharing racist, pro-militia, anti-vaccine, sexist, antisemitic, and secessionist views.
-
Autonomous agents attack Azure using compromised identities, destroying resources (opens CSO Online in a new tab)
Jadepuffer, an autonomous AI attacker first identified in July, has expanded into Azure environments, using compromised digital identities to enumerate resources, delete cloud assets and collect other credentials, according to Microsoft. The activity includes “extensive Azure-focused resource...
