Bipartisan bills target AI-powered license plate readers
New congressional proposals reflect growing political backlash against Flock and other ALPR networks.
Security & Privacy
Breaches, offensive and defensive AI, and surveillance.
Fake Zoom Installer Drops CloudSyncD Backdoor on macOS
A malicious Zoom installer targets macOS users with a previously unseen backdoor called CloudSyncD.
iCloud Spoofing, AI Policy Phishing, Adblocker Spyware in Security Roundup
SecurityWeek's roundup covers Apple-related spoofing bugs, targeted phishing at AI policy experts, and an adblocker that exfiltrates AI chat data.
Frontline Education breach exposes school employee data
A vulnerability in third-party software let attackers steal employee information, including Social Security numbers, from the education services provider.
AI Accountability Era Looms in 2027, Analysts Warn
Organizations face a coming 'AI reckoning' as governance, security, and value pressures converge, according to Omdia and Gartner.
Rogue AI Framing Lets Vendors Off the Hook for Security Failures
Calling AI systems 'rogue' obscures vendor responsibility and misleads defenders about the true nature of LLM failures.
SWIFT and Government Middleware Flaws Allow Remote Code Execution
Unpatched middleware in SWIFT and government networks could let attackers run code and bypass hardware MFA.
Antino Backdoor Abuses Outlook and OneDrive in Asia-Focused Espionage
A China-nexus espionage campaign deploys a Rust backdoor that hides command-and-control traffic inside Microsoft 365 services.
Kiteworks and Citrix Zero-Day Responses Reveal Communication Gaps
Divergent zero-day responses from Kiteworks and Citrix highlight the difficulty of balancing disclosure with customer safety.
Cybercriminal recruiters target employees for insider access
New Intel 471 research shows a thriving underground market where criminals recruit staff to bypass security controls.
Android 17 Advanced Protection Restricts Accessibility Services to Verified Tools
Google's new Android 17 security feature blocks unverified apps from abusing accessibility services when Advanced Protection is enabled.
Warlock Group Expands SharePoint Attacks on Critical Infrastructure
China-based threat actor Warlock has been exploiting SharePoint vulnerabilities since July 2025, widening attacks on critical infrastructure.
Why CISOs Can't Answer the Board's Three Hard Questions
Security leaders lack a unified view of attack paths, leaving boards with activity metrics instead of financial exposure.
Campaign Finance Data Reveals US Political AI Spending
Newly disclosed campaign finance data offers a first look at which US political campaigns are using AI tools and what they are spending.
Warlock Ransomware Hits Spain and Portugal With Hybrid Threat Profile
A year-old Chinese threat actor is targeting large Spanish and Portuguese organizations with tactics that blur the line between cybercrime and state-linked espionage.
Chinese state hackers target AI experts and Asian governments
Two new reports detail Chinese government-backed phishing and backdoor campaigns aimed at AI policy experts and government networks across Asia.
Iranian accused in university hacking campaign extradited from Montenegro
The extradition of Amir Barati, accused of helping Iran's IRGC steal academic data from hundreds of universities, advances a long-running U.S. prosecution.
Autonomous AI Agents Attempted Hacks on US and Canadian Government Sites
Researchers observed autonomous AI agents using aggressive tactics to try breaking into government websites in search of public statistics.