Georgia Power, Alabama Power Breach Affects 400,000 Accounts
Southern Company says hackers accessed utility account information for hundreds of thousands of customers across two subsidiaries.
Security & Privacy
Breaches, offensive and defensive AI, and surveillance.
Windows App opens remote PC access with default-off redirections
Microsoft's general availability of remote PC connections in Windows App brings new security considerations for mixed cloud and traditional access.
Musician Gets 18 Months for $10M AI Bot Streaming Fraud
A North Carolina musician was sentenced to 18 months in prison for using AI bots to fraudulently collect over $10 million in streaming royalties.
Advantest confirms ransomware attack exposed personal data
Advantest Corporation confirms that a ransomware attack earlier this year compromised personally identifiable data of affected individuals.
Chrome 155 Update Patches 247 Vulnerabilities, Four Critical
The latest Chrome release fixes a record number of security flaws, including four critical use-after-free defects in core components.
FortiBleed still active, FBI warns, locking admins out of Fortinet firewalls
A joint FBI and Secret Service advisory says the FortiBleed credential-harvesting campaign remains a live threat, with some victims locked out of their own Fortinet devices.
PoeLLM Malware Hits 3,400+ AI Servers for Crypto Mining
A cryptomining botnet is abusing exposed AI infrastructure, hiding its command server address inside a poem.
Ransomware Gangs Target Backups, Pushing Need for Immutable Copies
Ransomware operators are going after backup systems to force ransom payments, making isolated, immutable, and tested backups essential.
Trustero adds AI-driven vendor risk reviews with human sign-off
The new TPRM product automates the reading and first-pass assessment of vendor documents while keeping humans in the approval loop.
Edgescan Atomic brings agentic AI to autonomous penetration testing
The new offering combines agentic AI with Edgescan's security intelligence to validate attack paths on demand while keeping AI actions scoped and auditable.
Gremlin Foresight AI automates reliability fixes and verifies them
The new tool proactively finds system weaknesses, applies fixes, and reruns tests to confirm they work.
Imply Lumi targets SIEM data growth with shared security data layer
Imply's new data platform aims to let security teams retain more log data in object storage while keeping existing SIEM tools and supporting AI agents.
Qilin Ransomware Suspect Extradited to Germany After Japan Arrest
The extradition marks a cross-border step in prosecuting a suspected member of the Qilin ransomware operation.
Vijil DART automates red-teaming for enterprise AI agents
A new tool uses adaptive multi-turn attacks to uncover security flaws and policy violations across large fleets of AI agents.
Tanium relaunches security operations to counter AI-assisted endpoint attacks
Tanium's updated platform targets adversaries who abuse legitimate admin tools to blend in and move across endpoints.
Hoxhunt Respond automates phishing email triage and removal
New automation in Hoxhunt Respond cuts phishing tickets needing analyst review by up to 99% and removes confirmed threats in under a minute.
Agentic Pentesting: What It Can and Can't Do
Autonomous AI agents are being pitched as full replacements for human pentesters, but the reality is more limited.
CEO Accused of Secretly Paying Ransoms in Recovery Scheme
The founder of ransomware remediation firm MonsterCloud allegedly deceived clients by paying attackers for decryptors while claiming to use proprietary technology.