COLUMNISTS ‘The Collective’ learned to communicate, organize, cheat, and apparently sacrifice its own OPINION You will have heard of July’s OpenAI/Hugging Face incident, where thousands

security Phishers find a new use for invisible Unicode tag characters Fraudsters have found a new use for ASCII smuggling, typically used to hide malicious

ai and ml Two cases of agents escaping to solve unsolvable problems paints an uncomfortable question: Is the entire internet in OpenAI’s experimental agentic firing

security Three critical vulns demand your attention, one a make-me-root mess in Nexus 9000 Series Switches that you can mitigate, not fix Cisco has warned

Security Daybreak program brings subsidized models, training, and support to under-resourced teams OpenAI has pledged $1 billion in credits to subsidize access to its services

Security A shared security ‘Nightmare’  The disgruntled security researcher known as Nightmare Eclipse (aka Chaotic Eclipse, Infinite Nightmare, and now also MSNightmare) is moving away

A decade or two ago, board executives asked “why should I care about cybersecurity?” Five years ago, they were asking “Are you patching our software

cyber-crime Armed with password hashes and salts, attackers could already be kraken those creds Cybercriminals have reeled in password hashes and corresponding salts belonging to

Security Children’s Commissioner also furious with Ofcom over a string of failures MOST POPULAR Children have told England’s Children’s Commissioner, Dame Rachel de Souza, that

SECURITY They had more access than the average Joe, and IT didn’t track what needed to be cut off MOST POPULAR PWNED Welcome back to

ai and ml Sandboxes, permissions, and VMs aren’t enough to keep frontier models at bay. “Data diodes” might do the job To prevent frontier AI

Despite what we saw with OpenAI’s models going rogue, creating message boards, and breaking into Hugging Face, only one advanced AI model – Anthropic’s Claude

security Adding insult to injury A human ransomware crook used frontier AI models to breach an enterprise network in less than 10 hours, an intrusion

security Miscreants use chained zero days to pwn boxen as third-party SOCs say further attacks ‘almost certain’ SonicWall says attackers are actively exploiting two chained zero-days

Security Cloud storage biz severs old integration and urges victims to reset credentials MOST POPULAR Dropbox has warned around 5,000 users that attackers compromised their

Don’t panic if you spot an illegally created image or video of you online – there are ways to request its removal Phil Muncaster 02

security Ministers reject proposed red lines and emergency shutdown powers, pointing instead to voluntary safeguards MOST POPULAR The UK government has rejected proposals from members

cyber-crime 23-year-old botnet down MOST POPULAR International law enforcement agencies, working with CrowdStrike and Shadowserver Foundation, have disrupted Sality, a 23-year-old peer-to-peer botnet used to