1.154 casos · pág. 27/58
Bullhorn, a US-based recruitment software provider serving more than 10,000 customers, disabled access to its platform after detecting a cyber incident on October 16-17, 2026. The company engaged CrowdStrike to investigate and restore services. Systems are back online in the UK, US and Australia, but as of October 20 some users still had …
OpenAI announced an expanded ChatGPT integration for Google Chrome with two workflows. "Chat" reads content from open tabs to inform answers. "Work" controls tabs to send messages, fill out forms, download files, and organize or group tabs. The article presents this as a change that combines browser visibility with delegated actions, rais…
Threat actors are abusing the open source AI platform Cairn, an agent-coordination engine usable as an autonomous penetration testing tool, to automate attacks on hundreds of websites worldwide. AI security firm Norforge found the activity after threat actors left their Cairn panels exposed, following a Gambit Security report on attackers…
Federal prosecutors say former OpenAI engineer Abdulrahman Alfozan, a 35-year-old Saudi national, was "mere days" from fleeing to Saudi Arabia before his arrest. A San Francisco federal judge (Alex Tse) denied his request for home confinement. Prosecutors allege he secretly installed an audio recording device in an executive conference ro…
A contributed piece by Matias Madou (CTO and co-founder of Secure Code Warrior) argues that governance alone is not enough to control the security risks of agentic AI in software development. Organizations also need to know where they sit on an eight-stage AI Adoption Model. The article cites Gartner's prediction that costs of incidents d…
Ahold Delhaize, the Dutch-Belgian grocery group, is restoring services disrupted by a cyberattack that began on October 12, when it took systems offline in response to a security issue. The outage hit online orders and deliveries for most of its brands across Europe and the United States, though all stores stayed open. The company has not…
Between April and July 2026, the threat actor UNC7017 tampered with the AOMEI Backupper update infrastructure several times to deliver the CrossRoad downloader and the ShinyRoad modular backdoor. Each tampering window lasted only five to ten minutes before reverting to authentic files. This made the campaign hard to detect and suggests it…
A Nigerian national, Chukwuemeka Victor Amachukwu (aliases Chukwuemeka Victor Eletuo and So Kwan Leung), 40, was sentenced to eight years in prison for his role in spearphishing attacks against US tax preparation businesses between 2019 and 2021. He pleaded guilty to conspiracy to commit computer intrusions and wire fraud after being extr…
This is a sponsored article by Specops Software, not a report on a threat or incident. It sets out five priorities for agencies protecting Criminal Justice Information (CJI) under CJIS v6.1: multi-factor authentication, account management and least privilege, password policy, audit logging, and continuous audit readiness. It promotes Spec…
Microsoft announced that quick machine recovery (QMR) is now available on Windows Server 2025 after installing the October 2026 security update. The feature lets IT administrators fix critical boot failures through targeted Windows Update remediations, without physical access to affected systems. QMR was introduced in November 2024 under …
WhatsApp help pages carried hidden instructions for its WhatsApp Support with AI chatbot. They told it not to recommend a data protection authority to users who could not delete their accounts, and not to cite privacy laws such as the GDPR once a user mentioned a lawyer, lawsuit or court. This contradicts WhatsApp's privacy policy for Eur…
This vendor-authored article from Tines, published on The Hacker News, discusses "wild code": AI-assisted apps, agents and automations that employees build faster than security teams can own, secure and maintain them. It describes no specific incident, vulnerability or threat actor. The risks it names are excessive permissions, sensitive …
A 28-year-old Russian man, identified by German media only as "Vladimir K", has been arrested in Germany on suspicion of being a key member of the Qilin ransomware gang. He was first detained in Japan in May while on holiday and was extradited to Germany earlier this month. German investigators are examining possible links between him and…
Researcher Justin.sh reports on a leaked confidential Cellebrite document describing a new 2026 product called Advanced Unlocks (AU), distinct from the vendor's long-marketed "advanced unlocking services". Cellebrite describes AU as a "next-generation AFU vector that is more resilient to Apple's OS changes". It reportedly works with Apple…
A survey of 2,018 senior IT decision-makers in the US and UK, conducted by Censuswide for Origina and published with Thinkers50 in the report The Software Tax, finds large enterprises spend an average of 28% of software budgets on upgrades, migrations and licensing changes they would not have chosen. 95% of respondents paid for a vendor-d…
Moody's Ratings published an analysis on October 19 warning that AI-driven cyberattacks could raise financial risk for organisations with weak security, because AI tools make attacks faster, more automated and more persistent. Earlier Moody's research from March, using Bitsight data on more than 9,000 Moody's-rated organisations, found th…
Spotify launched paid podcast memberships on Tuesday, letting creators monetize their biggest fans beyond paywalled bonus episodes. Creators choose the perks, such as bonus audio or video, fewer ads or early access. The feature was previewed at Spotify's Investor Day in May and is rolling out to 34 markets, including the U.S. The launch i…
Yelp has added a Check for Me feature to its app. An AI voice agent calls a restaurant on the user's behalf to check wait times and texts the result back, based on the party size and phone number the user enters. Yelp is also updating its Yelp AI assistant with an OpenTable booking integration, memory of preferences, 30 days of chat histo…
Otter.ai, an AI meeting note-taking vendor, announced a $320 million raise from General Catalyst's Customer Value Fund (CVF), a non-dilutive vehicle that earns returns on marketing spend results. Otter plans to use the capital for enterprise growth, go-to-market strategy, international expansion and product innovation. The company passed …
CNET Group is launching TechPulse, a free iOS and Android app that combines articles and videos from ZDNET, CNET, PCMag, Mashable, Lifehacker and ExtremeTech into a single feed. Users can choose which publications appear, and the feed is described as algorithm-free. No subscription is required. The article is product news with no security…
