INTERPOL and Microsoft warn AI is shifting the cyber threat landscape
Two new warnings agree that attackers are benefiting from AI faster than defenders, though they differ on whether it is a revolution or an acceleration.
Security & Privacy
Breaches, offensive and defensive AI, and surveillance.
WordPress Backdoor Rebuilds Itself From Files, Database, and RAM
A newly detailed WordPress backdoor uses eight interlocking persistence mechanisms, making cleanup difficult.
Mimecast CPO Rob Juncker Embraces Hacker Identity
A security executive's unequivocal self-description as a hacker underscores the ethical complexity of the term in the industry.
Security Roundup: Cache Poisoning, ATM Jackpotting, and AI Model Risks
This week's threats show how ordinary infrastructure—caches, console pipes, and public blockchains—can become attack paths.
Thales tool blocks AI reverse engineering in test
Sentinel Envelope Plus aims to harden compiled applications against AI-assisted attacks without requiring source code changes.
Microsoft turns on Windows settings backup by default for enterprise PCs
Enterprise Windows 11 26H2 devices will now automatically back up settings to the cloud.
Armadin Raises $255.5M to Expand AI Offensive Security
The seven-month-old startup led by Kevin Mandia has raised $255.5 million, bringing total funding to $445 million as it scales agentic attack simulations for enterprises and governments.
Zero Trust Creator: Framework Still Works Against AI Attacks
John Kindervag, who coined zero trust 15 years ago, says the model remains effective against AI-assisted attacks when properly implemented.
MetaMask Security Incident Forces Exit of Ethereum Validators
MetaMask is remediating an ongoing security incident and proactively exiting affected Ethereum validators in its non-custodial staking operations.
Four Cyber Threats That Will Shape Security Strategies
Security programs must embed disruption planning into daily operations as AI, supply-chain exposure, quantum computing, and geopolitical conflict escalate.
Teen Suspected as KillSec Ransomware Leader Arrested in Spain
An international operation dismantled KillSec's infrastructure, arresting three people including a 16-year-old alleged administrator.
Osavul Raises $10M for Hybrid Risk Intelligence Platform
The Series A round led by 33N Ventures will support Osavul's effort to detect hostile intent across both cyber and physical domains.
US sanctions 10 over ATM malware tied to Tren de Aragua
Treasury sanctions target a Venezuelan gang's ATM jackpotting network, which caused $40.7 million in losses across 1,500 attacks.
GitHub AI taskflows uncover 24 Android app vulnerabilities
Custom AI-driven audit workflows built on GitHub's open source Taskflow Agent found real-world Android flaws, but human review remains essential.
TeamViewer Urges Immediate Patching of High-Severity Flaws
TeamViewer has warned users to prioritize fixing high-severity vulnerabilities in its client and host software.
Most Breaches Now Begin and End in the Browser, Analysis Finds
A new analysis argues that the browser has become the primary battleground for cyberattacks, with entire attack chains unfolding within a single session.
Chrome, Firefox Updates Patch Over 100 Vulnerabilities
New browser updates address more than 100 security flaws, including bugs that could let remote attackers execute code or escape the sandbox.
Microsoft to block Entra ID script injection attacks from October
Microsoft is reminding customers that Entra ID will begin blocking external script injection attacks next month, a move aimed at reducing authentication threats.