Technology

Updates

Two of the Kremlin’s most active hack groups are collaborating, ESET says
Turla is getting a helping hand from Gamaredon. Both are units of Russia's FSB.
19-09-2025 19:35

Two UK teens charged in connection to Scattered Spider ransomware attacks
Ransomware group is one of the world's most prolific.
19-09-2025 00:00

New attack on ChatGPT research agent pilfers secrets from Gmail inboxes
Unlike most prompt injections, ShadowLeak executes on OpenAI's cloud-based infrastructure.
18-09-2025 16:29

How weak passwords and other failings led to catastrophic breach of Ascension
A deep-dive into Active Directory and how "Kerberoasting" breaks it wide open.
18-09-2025 14:31

KnowBe4 Report Reveals UK Retail Sector on High Alert for Cyber Scams
KnowBe4, the human risk management platform, has released a new report entitled IT and Cybersecurity Trends in UK Retail: 2025 Survey Insights. The findings revealed nearly all (99.6%) of the 250 UK retail IT security professionals surveyed are facing a
18-09-2025 10:57

Salt Security Announces Industry First Solution to Secure API Actions Taken by AI Agents
At CrowdStrike Fal.Con 2025, Salt Security announced the industry’s first solution to secure the actions AI agents take in the enterprise. As large organisations adopt agentic AI, agents are increasingly making real-time API calls through protocols like
18-09-2025 09:14

White House officials reportedly frustrated by Anthropic’s law enforcement AI limits
Officials say Claude chatbot usage policies block FBI, Secret Service contractors' work.
17-09-2025 22:03

Nagomi Control Brings CTEM Into Action
Nagomi Security has announced the next step in its platform evolution with Nagomi Control, a new release that redefines Continuous Threat Exposure Management (CTEM) by enabling security teams to shift from identifying exposures to fixing them. Nagomi Con
17-09-2025 13:24

Check Point Acquires AI Security Company Lakera
Yesterday, Check Point announced that it had entered into an agreement to acquire Lakera, an AI-native security platform for Agentic AI applications. It has been revealed that the acquisition has cost $300m. By joining forces with Lakera, Check Point set
17-09-2025 09:34

Hack the Box acquires LetsDefend for blue team upskilling
Hack The Box (HTB), a provider of gamified cybersecurity skills development, has announced the acquisition of LetsDefend, a pioneering blue team training platform known for its hands-on SOC simulations and growing community members. The company said the
17-09-2025 08:53

ChatGPT may soon require ID verification from adults, CEO says
Chatbot will "default to the under-18 experience" when age is uncertain after teen suicide lawsuit.
16-09-2025 20:09

Millions turn to AI chatbots for spiritual guidance and confession
Bible Chat hits 30 million downloads as users seek algorithmic absolution.
16-09-2025 11:15

Modder injects AI dialogue into 2002’s Animal Crossing using memory hack
Unofficial mod lets classic Nintendo GameCube title use AI chatbots with amusing results.
12-09-2025 21:36

Find Out How You Can Defend Your Organisation Against AI Driven Attacks
KnowBe4, the world renowned cybersecurity platform is hosting its annual CyberSecure Leeds event on Wednesday 24th September as part of the Leeds Digital Festival. This exciting event will focus on the rise of AI-driven cyber threats and how organisation
12-09-2025 14:14

OpenAI and Microsoft sign preliminary deal to revise partnership terms
Companies work to finalize terms as OpenAI pursues for-profit restructuring.
11-09-2025 22:27

35 percent of VMware workloads expected to migrate elsewhere by 2028
“We are all addicted to hypervisors, and that needs to change."
11-09-2025 17:56

The Future of Human Risk Management: The Zensory and Brigantia Partnership A Year On
Cybersecurity distributor Brigantia and The Zensory, the popular wellbeing and productivity platform dedicated to transforming work habits, have been working together for a whole year now. The partnership set out with a hefty aim: to tackle one of the bi
11-09-2025 10:45

Check Point Software Named Among World’s Best Companies 2025 by TIME and Statista
Check Point has once again been recognised as one of the World’s Best Companies of 2025 by TIME and Statista. This marks the second consecutive year that Check Point has been featured on the list, reflecting its strong employee satisfaction, consistent r
11-09-2025 09:49

Vanta introduces Vanta AI Agent for risk management
Vanta, the trust management platform, has announced a new set of capabilities that embed AI across core compliance and risk workflows. The expanded capabilities unify policy management with Vanta AI Agent, continuous monitoring for vendors, risk oversigh
11-09-2025 09:31

Senator blasts Microsoft for making default Windows vulnerable to “Kerberoasting”
Wyden says default use of RC4 cipher led to last year's breach of health giant Ascension.
10-09-2025 19:38

Developers joke about “coding like cavemen” as AI service suffers major outage
Anthropic outage takes down AI tools some developers rely on to create software.
10-09-2025 18:08

Microsoft ends OpenAI exclusivity in Office, adds rival Anthropic
Microsoft will end OpenAI's exclusive hold on its productivity suite, adding second AI supplier.
10-09-2025 15:41

Spanish club Girona FC selects WatchGuard as Official Cybersecurity Supplier
WatchGuard Technologies, a provider of unified cybersecurity, has announced that it is now the Official Cybersecurity Supplier of Spanish football club Girona FC. The strategic partnership marks a significant step in the Club’s ongoing commitment to stre
10-09-2025 09:59

Claude’s new AI file-creation feature ships with security risks built in
Expert calls security advice "unfairly outsourcing the problem to Anthropic's users."
09-09-2025 20:55

Claude’s new AI file creation feature ships with deep security risks built in
Expert calls security advice "unfairly outsourcing the problem to Anthropic's users."
09-09-2025 20:55

SAP warns of high-severity vulnerabilities in multiple products
Users of SAP's S/4HANA and NetWeaver products are at risk and should patch soon.
09-09-2025 19:55

Why accessibility might be AI’s biggest breakthrough
UK study findings may challenge assumptions about who benefits most from AI tools.
09-09-2025 11:08

The IT Revolution You’ve Been Waiting For: Lumos Unveils Game-Changing Agentic AI Innovations for H2 2025
If you’re an IT or Security leader, you know the struggle. Your technology stack looks like a jigsaw puzzle with missing pieces. Manual processes eat up your team’s valuable time. Budget pressures keep mounting while security threats lurk in
09-09-2025 01:54

Software packages with more than 2 billion weekly downloads hit in supply-chain attack
Incident hitting npm users is likely the biggest supply-chain attack ever.
09-09-2025 00:37

Former WhatsApp security boss in lawsuit likens Meta’s culture to a “cult”
Meta allegedly prioritized user growth over security, lawsuit said.
08-09-2025 20:26

AI will consume all of IT by 2030—but not all IT jobs, Gartner says
AI still threatens entry-level IT jobs.
08-09-2025 17:17

What Is the Turning Test? Hassan Taher Decodes the Turing Test’s Relevance in Modern AI
The Turing Test measures machine intelligence by assessing whether an AI can engage in conversations indistinguishable from those of a human. Conceptualized by Alan Turing in 1950, the Turing Test originally qualified a computer’s capacity for human-like
08-09-2025 08:37

Keeper Security Announces Integration With CrowdStrike Falcon Next-Gen SIEM
Keeper Security has announced a new partnership with CrowdStrike, which aims to protect businesses against cyber threats. Keeper’s cloud-native PAM platform, KeeperPAM®, now integrates with CrowdStrike Falcon® Next-Gen SIEM, the AI-powered engine of the
05-09-2025 16:44

ChatGPT’s new branching feature is a good reminder that AI chatbots aren’t people
Users can explore multiple paths without losing their original chat thread.
05-09-2025 16:06

Digital Legacy AI CEO Glenn Devitt Bridges Military Intelligence and Cybersecurity
Former Army Special Operations Intelligence specialist combines battlefield experience with cutting-edge cybersecurity expertise to revolutionize digital inheritance while addressing critical infrastructure vulnerabilities. The cybersecurity landscape de
05-09-2025 09:32

The number of mis-issued 1.1.1.1 certificates grows. Here’s the latest.
Everything to know about about the mishap that threatened to expose millions of users' queries.
04-09-2025 22:29

Microsoft open-sources Bill Gates’ 6502 BASIC from 1978
Historic interpreter taught millions to program on Commodore and Apple computers.
04-09-2025 16:56

Check Point Unveils Enterprise Browser to Secure BYOD and Third-Party Devices
Check Point Software has expanded its Harmony SASE offering with the launch of Enterprise Browser, a tool designed to close one of the biggest gaps in enterprise security: unmanaged devices. The new feature extends Zero Trust protections to personal lapt
04-09-2025 11:27

New AI model turns photos into explorable 3D worlds, with caveats
Openly available AI tool creates steerable 3D-like video, but requires serious GPU muscle.
03-09-2025 21:56

Mis-issued certificates for 1.1.1.1 DNS service pose a threat to the Internet
The three certificates were issued in May but only came to light Wednesday.
03-09-2025 18:40

Discover the Power of Usenet for Global Access and Privacy
What is Usenet? Have you ever heard of Usenet? It might sound like a relic from the past, but nothing could be further from the truth. Usenet is a globally distributed network that has been around since the ’80s and is still very much alive. It off
03-09-2025 15:56

OpenAI announces parental controls for ChatGPT after teen suicide lawsuit
Promised protections follow reports of vulnerable users misled in extended chats.
02-09-2025 15:10

Bringing the Human Back into Cybersecurity: What Values-Based Education Teaches Us About Digital Mindfulness
Recently, I had the pleasure of speaking with Inda Sahota, the dynamic and deeply empathetic force behind cybersecurity awareness at Fresenius Group. What struck me most wasn’t just her deep understanding of human-centric security, it was how naturally s
01-09-2025 08:14

Zuckerberg’s AI hires disrupt Meta with swift exits and threats to leave
Longtime acolytes are sidelined as CEO directs biggest leadership reorganization in two decades.
29-08-2025 18:02

AI-Powered Cyber Crime Raises Worldwide Alarm Bells.
AI-Powered Cyber Crime Raises Worldwide Alarm Bells. A new report from Anthropic, an AI startup backed by Amazon and Google, revealed a major shift in the cybercrime landscape. Through the use of Anthropic’s own AI model (Claude) and coding agent (Claude
29-08-2025 14:55

Google warns that mass data theft hitting Salesloft AI agent has grown bigger
Assume all Salesloft credentials are compromised after Workspace breach, Google says.
29-08-2025 12:15

High-severity vulnerability in Passwordstate credential manager. Patch now.
Vulnerability can be exploited to gain access to customers' crown jewels.
28-08-2025 18:46

Unpacking Passkeys Pwned: Possibly the most specious research in decades
Researchers take note: When the endpoint is compromised, all bets are off.
28-08-2025 13:00

The personhood trap: How AI fakes human personality
AI assistants don't have fixed personalities—just patterns of output guided by humans.
28-08-2025 11:00

Check Point Named Leader in Gartner 2025 Magic Quadrant for Hybrid Mesh Firewalls
Check Point Software has been recognized as a Leader in the 2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewalls, with the research firm citing the company’s execution and completeness of vision. The recognition highlights Check Point’s approach to hy
28-08-2025 11:00

Anthropic’s auto-clicking AI Chrome extension raises browser-hijacking concerns
Malicious websites can embed invisible commands that AI agents will follow blindly.
27-08-2025 16:17

Ziplining into the Minds of US Supply Chains
A recent report from Check Point Research uncovered Zipline, a phishing campaign that fuses subtle, patient social engineering with stealthy in-memory malware, together enabling attackers to slip past traditional defences and manipulate human behaviour o
27-08-2025 15:53

Keeper Security Launches KeeperAI
Keeper Security has today unveiled KeeperAI, a new agentic AI feature for its KeeperPAM® platform. KeeperAI enables real-time session monitoring and analysis, automated threat classification and instant response to combat cyber attacks and suspicious beh
27-08-2025 13:09

KnowBe4 Report Reveals Global Financial Sector Faces Unprecedented Cyber Threat Surge
KnowBe4, the human risk management cybersecurity platform, has released its latest research paper “Financial Sector Threats Report,” uncovering critical insights into the escalating cybersecurity crisis facing the global financial sector. The
27-08-2025 09:22

OpenAI admits ChatGPT safeguards fail during extended conversations
ChatGPT allegedly provided suicide encouragement to teen after moderation safeguards failed.
26-08-2025 22:08

Senator castigates federal judiciary for ignoring “basic cybersecurity”
Breaches in 2020 and 2025, reportedly by foreign adversaries, exposed confidential files.
25-08-2025 19:58

With AI chatbots, Big Tech is moving fast and breaking people
Why AI chatbots validate grandiose fantasies about revolutionary discoveries that don't exist.
25-08-2025 11:00

College student’s “time travel” AI experiment accidentally outputs real 1834 history
Hobbyist training AI on Victorian texts gets an unexpected history lesson from his own creation.
22-08-2025 22:13

Is the AI bubble about to pop? Sam Altman is prepared either way.
"Someone will lose a phenomenal amount of money," says CEO while fundraising at record prices.
21-08-2025 22:06

KnowBe4 Finds Top Cybersecurity Risk is Employee Distraction, Not Threat Sophistication
KnowBe4, the security training provider, today released a new report entitled Navigating Cyber Threats: Infosecurity Europe 2025 Findings. The findings show that cybersecurity professionals are sounding the alarm; not about increasingly sophisticated cyb
21-08-2025 12:50

PPN 01/24: What It Means and How Businesses Can Prepare
In January 2024, the UK Cabinet Office issued a new Procurement Policy Note (PPN 01/24) aimed at strengthening cybersecurity across the public sector supply chain. The policy, which came into effect on 1 April 2024, sets out new requirements for supplier
21-08-2025 10:58

Salt Security Named an Overall Leader in KuppingerCole 2025 Leadership Compass for API Security and Management
Salt Security has been named an Overall Leader in the KuppingerCole Leadership Compass for API Security and Management 2025. The company was also recognised as a Leader in the Product, Innovation, and Market categories, underscoring the strength of its c
20-08-2025 18:51

Keeper Security Launches Biometric Login with Passkeys
Keeper Security has announced the release of biometric login using FIDO2/WebAuthn passkeys on the Chrome/Edge browser extension and Keeper Commander CLI. This update, the first of its kind in the industry, enables users to securely access their Keeper Va
20-08-2025 18:46

Workday Discloses Data Breach Following CRM-Targeted Social Engineering Attack
Workday, a leading provider of human resources and financial management software, has confirmed that it fell victim to a data breach stemming from a social engineering attack targeting a third-party Customer Relationship Management (CRM) system. Accordin
20-08-2025 10:30

Black Duck Debuts GitHub App to Automate Security Scans at Scale
Black Duck has released a new GitHub App designed to make it easier for development and security teams to automate security testing across their repositories. Now available in the GitHub Marketplace, the Black Duck Security GitHub App integrates with Pol
20-08-2025 08:29

How Online Poker Platforms Are Reinventing Cybersecurity Standards for Digital Gaming
The threat of cybercrime is continuously growing online. Developing technology can certainly be a great tool for societal improvement. However, it has its ramifications. The most obvious is that new technologies mean that bad actors have the ability to m
19-08-2025 12:54

Q&A Spotlight: Tannu Jiwnani – Navigating Leadership, Challenges, and Empowering Diversity in Cybersecurity
The Gurus sat down with esteemed cyber professional Tannu Jiwnani to discuss navigating leadership, challenges, and empowering diversity in cybersecurity. Q: Can you share how you got to where you are today in your career? A: My journey into cybersecurit
18-08-2025 17:25

New EMA Research Highlights Keeper’s Strength in Modern PAM
Keeper Security has announced the release of a new global survey report from Enterprise Management Associates (EMA), Beyond the Vault: Elevating Privileged Access Management in the Modern Enterprise. The independent survey and report evaluates eight majo
18-08-2025 16:44

Lack of Developer Training Fuels Cyber Breaches Across UK Organisations
A new survey from SecureFlag has revealed serious shortcomings in how UK businesses protect themselves from software-related threats. In a poll of 100 C-suite and technology leaders, 67% admitted their organisation had suffered at least one cybersecurity
18-08-2025 10:41

Smishing in the Amazon
In this week’s KnowBe4 scam alert, you receive an unexpected text message that looks like it’s from Amazon. The message claims that an item you bought failed a “routine quality inspection” or has been recalled. The text offers you a full refund, an
15-08-2025 11:00

62% of People Believe AI Agents Are Easier To Deceive Than Humans
A new report by Salt Security (Securing the Future of Agentic AI: Building Consumer Trust through Robust API Security) highlights a critical warning: without proper Application Programming Interface (API) discovery, governance and security, the very tech
14-08-2025 14:35

Is AI really trying to escape human control and blackmail people?
Opinion: Theatrical testing scenarios explain why AI models produce alarming outputs—and why we fall for it.
13-08-2025 20:28

OpenAI brings back GPT-4o after user revolt
After unpopular GPT-5 launch, OpenAI begins restoring optional access to previous AI models.
13-08-2025 14:08

Why it’s a mistake to ask chatbots about their mistakes
The tendency to ask AI bots to explain themselves reveals widespread misconceptions about how they work.
12-08-2025 19:52

KnowBe4 refreshes brand after 15 years
KnowBe4, the cybersecurity platform that comprehensively addresses human risk management (HRM), today unveiled a bold new brand with what it claims to be “an innovative new vision for the future of the company.” The refreshed identity reflect
12-08-2025 13:15

High-severity WinRAR 0-day exploited for weeks by 2 groups
Exploits allow for persistent backdooring when targets open booby-trapped archive.
12-08-2025 00:13

The GPT-5 rollout has been a big mess
OpenAI faces backlash as users complain about broken workflows and losing AI friends.
11-08-2025 22:25

SOCRadar Launches Agentic Threat Intelligence Platform
At Black Hat USA, which took place last week, SOCRadar launched SOCRadar Agentic Threat Intelligence. The new platform automates threat intelligence through the deployment of autonomous AI agents that proactively detect, analyse, and respond to external
11-08-2025 16:59

Encryption made for police and military radios may be easily cracked
An encryption algorithm can have weaknesses that could allow an attacker to listen in.
09-08-2025 11:18

It’s getting harder to skirt RTO policies without employers noticing
Most companies downsizing office space say it's because of hybrid work.
08-08-2025 20:11

Adult sites are stashing exploit code inside racy .svg files
Running JavaScript from inside an image? What could possibly go wrong?
08-08-2025 19:41

Google discovered a new scam—and also fell victim to it
Disclosure comes two months after Google warned the world of ongoing spree.
07-08-2025 20:05

OpenAI launches GPT-5 free to all ChatGPT users
New model claims fewer confabulations, better coding, and "safe completions" approach.
07-08-2025 17:48

Here’s how deepfake vishing attacks work, and why they can be hard to detect
Why AI-based voice cloning is the next frontier in social-engineering attacks.
07-08-2025 11:00

Black Duck Announces Enhancements to AI Powered Application Security Assistant
Black Duck has unveiled Black Duck Assist, which enables developers to find and fix security and compliance issues in human and AI-generated code in real time. Black Duck Assist is now woven into the company’s Code Sight™ IDE plugin. These updates introd
06-08-2025 13:37

Jen Easterly Joins Huntress Strategic Advisory Board
Jen Easterly, the former Director of the U.S. Cybersecurity and Infrastructure Security Agency (CISA), has taken up a seat on the Strategic Advisory Board of Huntress. In this new role, she will help drive the company’s innovation efforts, foster key par
06-08-2025 11:57

Voice phishers strike again, this time hitting Cisco
Stopping people from falling for phishing attacks isn't working. So what are organizations to do?
05-08-2025 18:28

Surge in zero-day exploits identified in Forescout’s latest threat report
Forescout Technologies, Inc. today released its 2025H1 Threat Review, an analysis of more than 23,000 vulnerabilities and 885 threat actors across 159 countries worldwide during the first half of 2025. Among the key findings: ransomware attacks are avera
05-08-2025 09:13

AI site Perplexity uses “stealth tactics” to flout no-crawl edicts, Cloudflare says
The allegations are the latest to accuse Perplexity of improper web crawling.
04-08-2025 19:16

Identity Security: The New Perimeter for Cloud Security Companies Using CNAPP
In a cloud-native world, your network is no longer your perimeter; identity is.   Every user, workload and service account is an entry point. And every entry point has permissions. The problem? Most of those permissions are excessive, unnecessary or neve
04-08-2025 11:23

At $250 million, top AI salaries dwarf those of the Manhattan Project and the Space Race
A 24 year-old AI researcher will earn 327x what Oppenheimer made while developing the atomic bomb.
01-08-2025 21:23

One Week of the Online Safety Act: Cyber Experts Weigh In
The conversation around the UK’s Online Safety Act has transformed over the past week. Since it came into force last Friday (25th July 2025), there has been a lot of public outcry, including a petition, which was signed by over 400,000 people, call
01-08-2025 16:03

Microsoft catches Russian hackers targeting foreign embassies
End goal is the installation of a malicious TLS root certificate for use in intel gathering.
31-07-2025 21:43

Salt Security Unveils Salt Surface to Expose Hidden API Risks
API security company Salt Security has announced the launch of Salt Surface, a new capability integrated into its existing API Protection Platform. Salt Surface provides organisations with a comprehensive API attack surface assessment, delivering an atta
31-07-2025 15:27

Ransomware Payment Bans: Prevention Strategy or Misguided Policy?
It’s no secret that ransomware is on the rise, as this escalation is echoed across numerous industry reports. The Verizon 2025 Data Breach Investigations Report (DBIR), for instance, starkly illustrates this reality, revealing that ransomware (with or wi
31-07-2025 13:43

In search of riches, hackers plant 4G-enabled Raspberry Pi in bank network
Sophisticated group also used novel means to disguise their custom malware.
30-07-2025 22:21

So far, only one-third of Americans have ever used AI for work
AP survey shows most Americans treat AI chatbots like a search engine replacement.
30-07-2025 18:47

Flaw in Gemini CLI coding tool could allow hackers to run nasty commands
Beware of coding agents that can access your command window.
30-07-2025 10:30

Keeper Security Releases Mobile Platform Updates for iOS and Android
Keeper Security has announced significant updates to its mobile apps for iOS and Android. The updates will bring users a smarter, smoother and more secure way to manage passwords, passkeys and sensitive data on the go. The updated Keeper mobile apps will
30-07-2025 09:33

AI in Wyoming may soon use more electricity than state’s human residents
Proposed datacenter would demand 5x Wyoming's current power use at full deployment.
29-07-2025 21:24

source : arstechnica, darkreading, itsecurityguru