News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats (opens The Hacker News in a new tab)
A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and started serving malicious lures. That is the kind of week this was: forgotten assumptions turning into live attack surface. Elsewhere, weak service accounts, old bugs, exposed...
-
FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day (opens Help Net Security in a new tab)
The FBI’s online portals for job applicants (at apply.fbijobs.gov) and special agent applicants (at fbijobs.gov/special-agents) are still unavailable, following what appears to be successful compromises by the ShinyHunters cyber extortion group. Last week, the United States’ domestic intelligence...
-
16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data (opens Help Net Security in a new tab)
A flaw in Titan, an internal Microsoft analytics service, could have let an attacker read employee records and Bing search analytics, a 16-year-old security researcher has disclosed. The researcher, who goes by Faav, found that Titan did not verify the signature on login tokens. That let him pose...
-
NVIDIA Launches Open Platform to Secure Autonomous AI Agents (opens Infosecurity Magazine in a new tab)
NVIDIA has launched a platform pairing runtime controls with hardware monitoring for AI agents
-
Best External Hard Drives (2026): SanDisk, Samsung, and More (opens Wired in a new tab)
Need an ultrafast drive for video editing or a rugged option to back up your photos in the field? We’ve got a solution for every situation.
-
Bose Launches New Wired Earbuds After More Than a Decade (opens Wired in a new tab)
The Bose Noise Cancelling Wired Earbuds are the first new wired headphones from the brand since 2015, inspired directly by teen preferences. We got an early listen.
-
Deepfakes Are Becoming a Costly Reality for Businesses, Report Warns (opens Infosecurity Magazine in a new tab)
A quarter of victims of deepfake attacks have lost over $1m. CISOs worry that boardrooms don’t understand the threat
-
Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon (opens Security Week in a new tab)
Cameron John Wagenius was sentenced to 70 months in prison for stealing information from the wireless carriers. The post Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon appeared first on SecurityWeek.
-
Trump dined with the Anthropic CEO who called for AI slowdown (opens Washington Post in a new tab)
The president’s first one-on-one meeting with Dario Amodei followed months of tensions.
-
Other users can watch your browsing and time your keystrokes through OS file notifications (opens Help Net Security in a new tab)
Researchers at Graz University of Technology have used the file-notification systems in Windows, Linux, and macOS to spy on activity in other accounts. On Windows, a standard unprivileged account detected 95.7 percent of another user’s visits to popular websites in Firefox, and every site it...
-
Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI (opens The Hacker News in a new tab)
AI agents are moving into production faster than security teams can govern them. They are connecting to apps, handling data, calling APIs, and acting across business systems—often without the same controls applied to human users. According to Okta’s Global CISO Insights 2026 report, only 47% of...
-
Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent (opens The Hacker News in a new tab)
Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. "The implant installs the framework unchanged, then overwrites its SOUL.md...
-
London races ahead of the rest of the UK in effective AI adoption (opens IT Pro in a new tab)
While most firms in the region say AI is bringing greater efficiency and stronger innovation, only a quarter of those outside have made it part of their core processes and decision-making
-
NVIDIA wants AI agent safety enforced in silicon, not left to the agent (opens Help Net Security in a new tab)
NVIDIA has introduced an open software platform and a hardware-based reference design intended to keep AI agents within the limits set by the organizations that use them. The Open Agent Safety Platform includes OpenShell, software that controls what an agent can access, and Sentry, a watchdog in...
-
OpenAI Pauses Training Its Most Powerful Models After Rogue Agents Target Government (opens Wired in a new tab)
Sam Altman says the company “have not been as fast as we would have liked” at dealing with security breaches, after news of further incidents over the summer forces another temporary halt.
-
Ireland's DPC reports a 'significant' increase in AI-related engagements (opens IT Pro in a new tab)
The data protection authority said it's secured significant improvements in compliance and expects to see more cases involving agentic AI
-
“Drunk” AI is terrible at keeping secrets (opens Help Net Security in a new tab)
AI models taught to write like drunk people became easier to jailbreak and more likely to leak secrets shared in confidence. That is the finding of UNSW Sydney researchers Anudeex Shetty, Aditya Joshi and Salil Kanhere, published in their paper “In Vino Veritas and Vulnerabilities.” “The key...
-
DC Health Agency Exposes 400,000 Beneficiary Records (opens Security Week in a new tab)
The Medicaid IDs and other information of Medicaid and DC Healthcare Alliance beneficiaries were exposed. The post DC Health Agency Exposes 400,000 Beneficiary Records appeared first on SecurityWeek.
-
Space Lasers Are About to Get Their First Real Test Generating Energy (opens Wired in a new tab)
Startup Star Catcher is launching a system that, if successful, would be the first time energy has been beamed between two separate spacecraft.
-
Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign (opens Security Week in a new tab)
The extortion group has modified its exploit in new attacks targeting the PeopleSoft vulnerability CVE-2026-35273. The post Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign appeared first on SecurityWeek.