NIS2 audit deadline looms: EU leaders face personal liability in 2026
A new guide from Passwork highlights that EU senior management can be held personally accountable for NIS2 compliance gaps as national audits begin in late 2026.
Security & Privacy
Breaches, offensive and defensive AI, and surveillance.
Webinar preview: real Google Workspace breaches and response
A BleepingComputer webinar will walk through actual Google Workspace intrusions, focusing on social engineering, malicious OAuth apps, and early incident response decisions.
PCI SSC: Human approval required for AI agents handling cardholder data
New advisory guidance from the PCI Security Standards Council sets baseline expectations for governing AI in payment environments, including explicit human sign-off for agent actions involving cardholder data.
Thousands of European renewable energy systems exposed online
Researchers found 8,547 internet-facing systems at wind and solar parks across Europe, many with control access.
Working Exploit Published for Pre-Auth AnyDesk Linux Flaw
A published exploit for a pre-authentication heap overflow in AnyDesk Linux can give attackers root access, yet the vendor has not assigned a CVE or issued an advisory.
Report: AI Agent Identity Security Lags Human Programs
A new report finds that while human identity security is maturing, AI agent identities remain largely unmanaged, creating a structural gap.
Outdated Windows to Lose Security Updates After Certificate Rotation
Microsoft will stop delivering security updates to unsupported Windows versions once a certificate rotation takes effect next year, leaving those devices exposed.
GoBalance Bug Lets Attackers Recover .onion Keys and Hijack Dark Web Sites
A flaw in GoBalance, a Tor load balancer, exposes long-term .onion master keys from public data, forcing affected dark-web sites to migrate.
Dual Citizen Admits to Running 15,000-Mule Money Laundering Ring
A guilty plea reveals the scale of money mule networks that move illicit funds for cybercriminals.
SimpleLogin email aliases shield your primary address
A hands-on look at Proton's open-source alias service shows how disposable email addresses can limit spam and tracking.
October Patch Tuesday forecast: Office cleanup after record CVE month
Enterprises face another large Microsoft patch load while post-EOS Office updates add migration and support confusion.
FBI Arrests Suspected ShinyHunters Operative
The FBI's arrest of a suspected ShinyHunters operative and a Pentagon data center compromise highlight overlooked security stories.
Executive Family Members Need Security Training to Close Home Attack Vectors
Security programs that stop at the office leave executives exposed through relatives who may be the weakest link in the chain.
iRhythm breach exposes data of 360,000 cardiac monitoring patients
The Zio Patch maker says hackers stole personal and insurance data from third-party business apps via social engineering, though clinical systems were untouched.
DarkSword iOS Exploit Kit Variant P7 Targets Keychains and Crypto Wallets
A new DarkSword variant cuts its footprint, steals keychain and crypto-wallet data on the device, and adds two-way command-and-control.
FBI arrests another ShinyHunters suspect after jobs site breach
The FBI announced another arrest tied to the ShinyHunters group as it responds to a breach that exposed sensitive data on nearly all employees.
Belarusian Cyber Partisans Claim 2023 Moscow Health Network Breach
The hacktivist group confirms a long-running intrusion into Moscow's healthcare system, disputing the timeline reported by Russian cybersecurity firm Solar.
How to Stop AI Agents From Exceeding Their Permissions
AI agents can misuse valid credentials to act beyond their assigned permissions, so organisations need agent-specific access policies.