News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
UK Home Office May Face Investigation Over Use of OpenAI Tools (opens Wired in a new tab)
A government watchdog is considering a probe into the Home Office’s use of ChatGPT technology to process asylum claims amid concerns over the tools’ accuracy and secrecy surrounding their use.
-
Microsoft Teams is getting a suite new AI features to crack down on phishing attacks (opens IT Pro in a new tab)
A sharp rise in phishing attacks against Microsoft Teams has prompted a raft of new features
-
Microsoft Teams is getting a suite new AI features to crack down on phishing attacks (opens IT Pro Security in a new tab)
A sharp rise in phishing attacks against Microsoft Teams has prompted a raft of new features
-
ISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AI Security Jobs (opens Infosecurity Magazine in a new tab)
ISC2’s new Cyber-AI Workforce Coalition serves as a “vendor-neutral convener” to map the future of AI security careers, ISC2 CEO Scott Beale told Infosecurity
-
How Billionaires Are Fighting the Prop 40 California Wealth Tax (opens NY Times in a new tab)
The latest Silicon Valley billionaire club is a $333 million political ad machine that is heavily engaged in next week’s elections.
-
Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support (opens Help Net Security in a new tab)
Threat actors are flooding employees’ inboxes with spam and then contacting them on Microsoft Teams as IT support, offering to fix the problem they created, Arctic Wolf has found. The security company documented more than 400 incidents in which the external chat feature in Teams was abused. In many...
-
GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption (opens The Hacker News in a new tab)
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the OpenSSL backend with mutual-TLS, where the server...
-
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads (opens The Hacker News in a new tab)
Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary code execution when...
-
Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk (opens Security Week in a new tab)
A leaked SquareML access key could have been used to access a database containing personal and health information. The post Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk appeared first on SecurityWeek.
-
UK Politician Jess Asato Got Deepfaked. Now She’s Taking xAI to Court (opens Wired in a new tab)
Jess Asato’s public campaigning for victims of online abuse put her in the crosshairs of Grok’s deepfake scandal. Then the UK member of parliament became a victim of the abuse herself.
-
Socure links AI agents to verified people and businesses (opens Help Net Security in a new tab)
Socure has launched Agent Intelligence, a suite that detects AI agents, scores whether they should be trusted, and ties each agent to the verified person or business that authorized it. Agent Intelligence includes three layers in one platform designed to go beyond simple Know Your Agent (KYA)...
-
UK police and fire services urged to bolster cyber capabilities (opens IT Pro in a new tab)
From legacy systems and poor training to third-party risks, more needs to be done to protect sensitive data
-
UK police and fire services urged to bolster cyber capabilities (opens IT Pro Security in a new tab)
From legacy systems and poor training to third-party risks, more needs to be done to protect sensitive data
-
HPE Patches Dozens of Critical Flaws in Networking Products (opens Security Week in a new tab)
Eight max-severity security defects could lead to remote code execution and authentication bypass. The post HPE Patches Dozens of Critical Flaws in Networking Products appeared first on SecurityWeek.
-
Sekoia introduces self-hosted deployment for organizations with strict data controls (opens Help Net Security in a new tab)
Sekoia has introduced Sekoia Self-Hosted, a deployment model that brings the Sekoia SOC platform into the customer’s own infrastructure. Designed for large organizations, including government agencies, defense organizations, critical infrastructure operators and highly regulated enterprises, Sekoia...
-
DNSFilter LUMINATE unifies DNS security, AI controls and remote work protection (opens Help Net Security in a new tab)
DNSFilter has launched LUMINATE by DNSFilter, a security platform that allows organizations to deliver five security solutions from one agent, one console and one policy. Shadow AI is now one of the fastest-growing risks in business. Employees are adopting AI tools and agents faster than security...
-
FireMon Agentic AI helps teams investigate access and prepare policy changes (opens Help Net Security in a new tab)
FireMon has announced FireMon Agentic AI, changing how enterprises investigate network access, make policy decisions, and prepare security changes. Built into FireMon’s network security management solutions, the new agentic AI capabilities makes agents first-class citizens alongside practitioners...
-
Exeon expands threat detection to shadow AI and autonomous agents (opens Help Net Security in a new tab)
Exeon Analytics has introduced Exeon.AgentGuard, a new AI security solution designed to give organizations visibility into approved and shadow AI use, autonomous agent activity and the data flows created through connected tools and external services. Building on its expertise in AI-driven...
-
Node2Shell puts Microsoft and Node.js on Brotli patch duty (opens CSO Online in a new tab)
A vulnerability in Google’s Brotli compression library could allow attackers to execute arbitrary code in applications that use an affected Brotli decoder to process compressed data. Tracked as CVE-2026-111497, the high-severity flaw was first flagged in the Brotli decoder bundled with Node.js. The...
-
Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes (opens Infosecurity Magazine in a new tab)
Arctic Wolf warned that the function enables highly effective social engineering attacks, which lead to incidents such as ransomware