Amazon's Blink home surveillance line is getting five new cameras, available for preorder from October 21, 2026, at prices from $50 to $200. They are the Blink Frontier XR+, Blink Outdoor 2K XR+, Blink Mini 4K+, Blink Pan-Tilt Zoom 2K+ and Blink Spotlight 2K+. The Mini 4K+ is Blink's first 4K wired camera, and the two XR+ models extend co…
The Department of Homeland Security (DHS), under Secretary Markwayne Mullin, has issued an order under the Federal Acquisition Supply Chain Security Act of 2018 (FASCSA). It directs federal civilian agencies to stop buying and to remove products and services from Hangzhou DeepSeek Artificial Intelligence Co., Ltd. and its affiliates. It a…
Industrial Defender, an OT cybersecurity vendor, released a new platform version adding internal network security monitoring (INSM) and Risk Signal, announced via a CyberNewswire press release on October 20, 2026. The INSM capability targets the FERC-approved NERC CIP-015-1 standard, which requires entities with high and medium impact BES…
Check Point Research reports that commercial antidetect browsers, notably Kameleo, AdsPower and MultiLogin, are widely referenced on Russian-language underground forums and marketplaces. They are used for account takeover, payment card fraud (carding), fraudulent loan applications, ad-revenue fraud, bulk creation of fake accounts and coor…
Rapid7's Q3 2026 threat landscape report finds that high-severity vulnerabilities were exploited an average of three days after disclosure, with 71% exploited within the first seven days. 79% of them are classed as 'holy grail' flaws, meaning remote and needing no credentials or user interaction. Ransomware remains the dominant threat. Th…
Asymptote Labs has raised $5.5 million in an oversubscribed seed round led by Tower Research Ventures, with Lytical Ventures, 1984 Ventures and South Park Commons also participating. The company is building runtime control and visibility infrastructure for enterprise AI agents. It was founded by Justin D'Souza (CEO) and Shukan Shah (CTO),…
Google promoted Chrome 156 to the stable channel for Windows, macOS and Linux on October 20, 2026, fixing 353 vulnerabilities, six of them critical (gbhackers.com, securityweek.com). The critical flaws are five memory corruption bugs and one use-after-free in Accessibility. Most of the 353 are memory safety issues: 163 memory corruption b…
ClickFix and its variants (FileFix, InstallFix, TerminalFix, ConsentFix) are now the most common browser-based attack technique seen by Push Security. They averaged 52% of Push detections through Q2 2026 and reached 67% in August, overtaking AiTM and device code phishing. The newest lures impersonate AI tools: ANY.RUN linked 1,258 public …
Resilience's report Cyber risk in energy and utilities analyzes cyber insurance claims filed between Jan. 1, 2023 and Sept. 5, 2026. Email compromise made up 21% of energy and utilities claims, against 10% across the rest of the portfolio. Ransomware was only 9% of claims but about 70% of incurred losses including reserves. In several cas…
The Cyber Security Agency of Singapore (CSA) and Google convened policymakers, critical infrastructure leaders and AI safety experts on Oct. 14 at Singapore International Cyber Week 2026. The tabletop exercise examined security risks from increasingly autonomous AI agents that act at machine speed. Participants concluded that perimeter de…
The U.S. Government Accountability Office (GAO) published its Strategic Plan 2027-2032, which sets out how it will support congressional oversight of federal cybersecurity, critical infrastructure protection and emerging technology risks. The plan cites persistent cyber threats, evolving national security risks and advances in artificial …
Researchers at Claroc disclosed GhostShares, a design flaw in Meta's Muse AI assistant that lets anyone discover shared conversations through passive DNS. Muse share links use the domain cf.metaaiusercontent.com and embed the conversation title and a random identifier in the hostname. Once a browser resolves the name, passive DNS sensors …
Nord Security reports 2,894 ransomware attacks between July and September 2026, a 50% increase year over year and an 8.6% rise over Q2 2026. Researchers attribute the rebound to the market stabilizing after law enforcement takedowns of LockBit, BlackCat and RansomHub, which suppressed activity during 2025. The Gentlemen (383 attacks) narr…
Tenable describes how it moved Tenable One AI Exposure detectors (jailbreaks, prompt injection, harmful content, data exposure) from an English-centric "translate-then-detect" design to a single native multilingual model. The article is product and engineering news and reports no incident, vulnerability or threat actor activity. Tenable b…
Nvidia introduced the OpenShell Reference Architecture at GTC Berlin. It is a blueprint for building, running, observing and policing AI agents on the OpenShell secure runtime, and it extends sandboxing to gateway-brokered credentials, identity and policy boundaries, and eventually routing and workflows (theregister.com). The design calls…
A reader comment on a Schneier on Security post about the Workshop on Economics and Information Security (WEIS) archive was posted by David Mohring on 21 October 2026. It links older material from 2002 and 2004, including a Usenet archive and a 2004 piece titled "Twelve Step TrustABLE IT". The commenter argues that businesses can historic…
ServiceNow and Nvidia announced general availability of Arc, a long-running personal AI agent for enterprise productivity tasks such as email and Microsoft Teams. Arc was first announced in May and is available now on Mac, with Windows support still pending. It is designed for Nvidia's new RTX Spark devices and can run locally or inside N…
Mach9 (formerly Mach9 Robotics) announced a $34 million Series A co-led by First Round Capital and Bessemer Venture Partners, with participation from Prudence and Quiet Capital. The startup pivoted from inspection hardware to AI-driven CAD software that converts laser-scan and imagery survey data into a first-draft plan that engineers ref…
AI cuts coding time, but it's also filling open source's inbox with crap 8 minutes ago Auto tech startup claims it traced hack attempt back to rival's IP address 14 hours ago
Acronis Threat Research Unit found that the Gentlemen ransomware operation is using the BYOVD (bring your own vulnerable driver) technique with legitimate Lenovo and Safetica kernel drivers to terminate endpoint security software before encrypting files. Two custom dropper samples were recovered from a recent incident. They install the dr…