1.153 casos · pág. 26/58
A Chinese-speaking operator used the open-source AI agent framework Cairn to run autonomous attacks against more than 1,200 sites, reaching websites of over 100 companies, including Deere, SharkNinja and Cummins. Researcher Snorre Fagerland of NorForge found the operation around 2 October 2026 by scanning for about two dozen exposed Cairn…
Yokai Research (Hakai Security) published an analysis and a public proof-of-concept for GHSA-f9x3-7vq9-cph6, a critical authentication bypass (CVSS v4 9.2) in the Laravel framework's built-in TokenGuard, which backs auth:api. The flaw was discovered by KIKOmanasijev and reported via the GitHub Security Advisory program. When the user tabl…
IT Security Guru published an editorial buyer's guide to cybersecurity thought leadership agencies for 2026. It describes the services of ten firms and offers evaluation criteria for buyers. The article reports no incident, vulnerability, threat actor or indicator, so it has no direct defender impact. It is marketing and industry news onl…
Court records obtained by NPR show that TikTok employees repeatedly warned executives about risks the platform posed to minors, including sexual exploitation and exposure to suicide-related content. Employee depositions filed in March 2026 describe frustration with how leadership responded. Staff reportedly flagged minors appearing in sex…
Electric Plant, a startup co-founded by CEO Justin Mast and neuroscientist Lee von Kraus, raised an $11.2 million seed round led by Onto Ventures and Climactic. The company is commercializing low-cost plant-mounted sensors and Bombadil, a model trained on electrical signals from about 125 plant species. The goal is to give growers real-ti…
At its first Config conference in India, Figma announced 20 new model context protocol (MCP) partners, including Amp, ClickUp, Dia, Junie by JetBrains, Linear, Meta Muse, Mistral, Notion, OpenCode and Sarvam Agents. Co-founder Dylan Field said MCP is "not a perfect protocol" and favors frontier labs. He also criticized Anthropic, MCP's cr…
The Department of Justice announced 28 arrests across California on Monday under Operation Protect the Vote. The defendants are foreign nationals and permanent green card holders charged with fraudulently registering to vote and making false statements in naturalization applications. Officials say all 28 appear on a list of more than 20,0…
The Windows 11 Patch Tuesday update released on October 13 contains a bug that turns off Smart App Control, a feature introduced in 2022 that blocks potentially malicious or suspicious apps and files. Affected systems show the feature as Off with the On option grayed out, so users cannot re-enable it. Microsoft says it is working on a fix…
A Chinese-speaking attacker has reportedly compromised hundreds of websites worldwide by abusing Cairn, an AI-driven penetration-testing tool, to automate the attacks. Reported victims include large industrial and consumer brands such as John Deere, SharkNinja and engine manufacturer Cummins, from which the attacker is said to have looted…
A disruption in Google Cloud's europe-west2 region in London took several Google Cloud services offline on Tuesday. Digital bank Revolut reported a widespread outage at about the same time, including card payments and ATM withdrawals. A person familiar with the matter told Reuters the two events were connected. ING Germany also reported o…
NIST, the NSA and CISA released a report, Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation, on handling AI agents that behave in unexpected or harmful ways. The report uses the term super intelligence (SI) instead of AI, in line with presidential executive order 14434. It sets out ten key pra…
Cisco disclosed CVE-2026-20327, a blind SQL injection vulnerability in the web-based management interface of Cisco Unified Intelligence Center. An authenticated, local attacker could send a crafted request and read the contents of the device's internal database. Cisco rates the Security Impact as Medium. Software updates are available and…
TrustedSec (author Chris Camejo) explains that FCI and CUI safeguarding obligations do not exist during the pre-contract solicitation phase unless the contractor has agreed to a specific pre-contract agreement. Prime contractors, especially large DoD primes, are increasingly pushing CMMC, FAR 52.204-21 and DFARS 252.204-7012/7021 requirem…
Cloudflare and VoidZero, together with Max Schwenk of Owner.com, announced tsrs, an experimental Rust port of the TypeScript compiler incubated within the Oxc JavaScript toolchain and developed in collaboration with the TypeScript team. This is product and open source tooling news with no security incident, vulnerability or threat activit…
Inspired Capital, the New York-based early-stage venture firm founded in 2019 by Alexa von Tobel and Penny Pritzker, closed its fourth fund with $450 million in commitments, bringing assets under management to nearly $1.4 billion. The article is business and funding news with no security incident, vulnerability, threat actor or malware co…
Oura announced two new workout-tracking features, Cardio Effort and VO₂ max, as competition in the smart ring market grows from rivals such as RingConn and Ultrahuman. Cardio Effort shows how much a workout taxes the cardiovascular system and aggregates it into a weekly total relative to each user's baseline. VO₂ max is estimated passivel…
Reliable Robotics, a Mountain View, California startup building autonomous flight systems for existing aircraft, raised $115 million as an extension of its Series D. The round comprises $90 million in equity led by Nimble Partners and $25 million in debt from Silicon Valley Bank. It brings the Series D to $275 million, lifts the valuation…
Eka Robotics, founded by MIT professor Pulkit Agrawal and former Google DeepMind researcher Tuomas Haarnoja, closed a $150 million Series A at a $1.45 billion post-money valuation, led by a16z and F-Prime. The company has built a robotic manipulation system pairing a force-sensitive gripper with a vision-force-action model, trained throug…
The UK government has scrapped its national digital ID scheme, but officials told the Public Accounts Committee on 20 October 2026 that the underlying identity infrastructure remains in development. Work continues on GOV.UK One Login, the Gov Wallet and the digital identity trust framework, with more than 80 document types earmarked for t…
Bullhorn, a US-based recruitment software provider serving more than 10,000 customers, disabled access to its platform after detecting a cyber incident on October 16-17, 2026. The company engaged CrowdStrike to investigate and restore services. Systems are back online in the UK, US and Australia, but as of October 20 some users still had …
