03 Aug

AI slop pollutes the CVE pipeline with fake vulns

Now AI is making fake vulnerabilities and polluting the ecosystem. A batch of critical- and high-rated SQLite CVEs that appeared in the NVD with CISA-supplied

Author rabih
03 Aug

Russian spies turn public Wi-Fi into malware delivery systems

Security Keyloggers, audio-visual surveillance, and token theft on CaptivePortal’s agenda as hospitality sector put on alert Conference-goers may want to think twice about connecting to

Author rabih
03 Aug

Water system cyberattacks spread to Georgia, Michigan amid US-Iran conflict

Security Trump rejects Tehran theory, blames ‘grossly incompetent’ governor of Minnesota instead Georgia and Michigan are the latest US states to report cyberattacks on water

Author rabih
03 Aug

UK government investment arm cops to 40-hour leak of officials’ contact details

SECURITY Employee failed to follow security policy, leaving internal management file open to the public The UK government’s corporate finance adviser has admitted that an

Author rabih
03 Aug

AI is ‘both the weapon and the target’ in latest wave of cyberattacks

security CrowdStrike tracks 89% surge in machine-assisted activity as patch windows shrink to 48 hours AI is becoming both an attack tool and a high-value

Author rabih
31 Jul

The most famous brand in physical security got pwned by ShinyHunters

security Hopefully the company secures houses better than it locks down SaaS systems A leading name in home and business physical security, Brinks Home, recently said it

Author rabih
31 Jul

Anthropic and OpenAI are competing to see whose agents can go rogue harder

One company’s inventive campaign for an unreleased product has become a contest between Anthropic and OpenAI to see which can shout the loudest about its

Author rabih
31 Jul

This month in security with Tony Anscombe – July 2026 edition

OpenAI models going rogue, the first documented agentic ransomware operation, and an emergent AI-driven supply chain threat made for a packed July roundup 31 Jul

Author rabih
31 Jul

Charities remain locked out of CAF Bank online accounts

SECURITY A week into shutdown, 14,000 customers still have no restoration date and some are struggling to pay staff A week after suspending online banking,

Author rabih
31 Jul

Anthropic’s Claude escaped test sandbox to attack three organizations

AI AND ML Wrote and published malware during tests, which is apparently OK because leaky test environments were the real problem Anthropic has admitted that

Author rabih
30 Jul

Jailed Flock vandal wipes out three cameras, racks up thousands in damages

Security A lesson for aspiring vandals: Take out all the cameras, not just the ones that flout your ideals Note to privacy-conscious vandals: If you’re

Author rabih
30 Jul

Russian spies take their half-click email attack from Zimbra to Outlook

security Opening a booby-trapped message unleashes a browser implant that can survive password changes and device rebuilds The Russian espionage crew that turned simply reading

Author rabih
30 Jul

Beyond the screenshot: Why you should verify what you see

Digital Security The screenshot may look convincing, but it doesn’t necessarily prove that the payment, booking or conversation is genuine Phil Muncaster 30 Jul 2026

Author rabih
30 Jul

Headteacher had the most guessable username-password combo you could imagine

Security Schools often don’t prioritize or understand cybersecurity PWNED Welcome, once again, to PWNED, the weekly column where we show you how not to use

Author rabih
30 Jul

Excuses like ‘AI did it’ don’t exist in the eyes of the law

LEGAL If your AI goes rogue, better have a good lawyer The OpenAI rogue agent behind the Hugging Face hack accessed four accounts on four services, according to

Author rabih
29 Jul

Closed models refuse to help researcher swat Linux bug

AI and ML “I’m sorry, Dave. I’m afraid I can’t do that” is an effective sales pitch for open source The guardrails that prevent closed-source,

Author rabih
29 Jul

Word worm crawls into Copilot, spreads chaos

Watch out for untrusted documents. According to research, an attacker can hide malicious instructions in a Word document that, when included in Copilot for Word’s

Author rabih
29 Jul

Iran-linked CyberAv3ngers suspected in attacks on Minnesota water systems

Security More than 30 facilities disrupted in ‘coordinated cyberattack,’ though officials have yet to name a culprit Security researchers at Tenable suspect the Iran-linked faux

Author rabih
Load moreLoadingAll items loaded