241 casos · pág. 3/13
Recorded Future has moved its headquarters from Somerville, MA, where it had been based for twelve years in a former laundromat, to downtown Boston at Post Office Square. The article is a corporate culture and recruitment piece. It describes the new open-plan office, which houses nearly 200 employees across customer success, security, dat…
Huntress explains the compliance obligations of Texas law HB 3834, passed in June 2019. It requires state agency and local government employees, and state contractors, to complete a Department of Information Resources (DIR)-certified cybersecurity awareness training every year. Since September 1, 2025, HB 3512 adds a second annual require…
Huntress published an explainer on business email compromise (BEC), a targeted form of phishing in which attackers impersonate or take over trusted email accounts to redirect payments or steal credentials. The article cites roughly $55 billion in worldwide losses and a Huntress survey of 500+ US IT professionals, in which 36% of organizat…
This TechCrunch Equity interview features Amulya Vishwanath, founder and managing partner of Techable Ventures, a VC firm focused on physical AI. She is a former Nvidia product marketer. She argues that robotics has not yet had its "ChatGPT moment" and is in a "LEGO era", in which foundational software and hardware building blocks such as…
Court records obtained by NPR show that TikTok employees repeatedly warned executives about risks the platform posed to minors, including sexual exploitation and exposure to suicide-related content. Employee depositions filed in March 2026 describe frustration with how leadership responded. Staff reportedly flagged minors appearing in sex…
The Department of Justice announced 28 arrests across California on Monday under Operation Protect the Vote. The defendants are foreign nationals and permanent green card holders charged with fraudulently registering to vote and making false statements in naturalization applications. Officials say all 28 appear on a list of more than 20,0…
NIST, the NSA and CISA released a report, Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation, on handling AI agents that behave in unexpected or harmful ways. The report uses the term super intelligence (SI) instead of AI, in line with presidential executive order 14434. It sets out ten key pra…
TrustedSec (author Chris Camejo) explains that FCI and CUI safeguarding obligations do not exist during the pre-contract solicitation phase unless the contractor has agreed to a specific pre-contract agreement. Prime contractors, especially large DoD primes, are increasingly pushing CMMC, FAR 52.204-21 and DFARS 252.204-7012/7021 requirem…
Inspired Capital, the New York-based early-stage venture firm founded in 2019 by Alexa von Tobel and Penny Pritzker, closed its fourth fund with $450 million in commitments, bringing assets under management to nearly $1.4 billion. The article is business and funding news with no security incident, vulnerability, threat actor or malware co…
Reliable Robotics, a Mountain View, California startup building autonomous flight systems for existing aircraft, raised $115 million as an extension of its Series D. The round comprises $90 million in equity led by Nimble Partners and $25 million in debt from Silicon Valley Bank. It brings the Series D to $275 million, lifts the valuation…
Moody's Ratings published an analysis on October 19 warning that AI-driven cyberattacks could raise financial risk for organisations with weak security, because AI tools make attacks faster, more automated and more persistent. Earlier Moody's research from March, using Bitsight data on more than 9,000 Moody's-rated organisations, found th…
Spotify launched paid podcast memberships on Tuesday, letting creators monetize their biggest fans beyond paywalled bonus episodes. Creators choose the perks, such as bonus audio or video, fewer ads or early access. The feature was previewed at Spotify's Investor Day in May and is rolling out to 34 markets, including the U.S. The launch i…
Paradigm Healthcare Services, a San Francisco-based billing processor for Medi-Cal (California's Medicaid program) under a data use agreement with the California DHCS, told the US HHS that a breach affected more than 970,000 people. The company detected unauthorized access to its local network on October 13, 2025. It determined only on Au…
New York City Mayor Zohran Mamdani said at The People's AI Assembly, hosted by the AI Now Institute, that the federal government has abdicated its role in regulating AI. He urged New Yorkers to resist the idea that AI adoption is inevitable. He pointed to his September order banning AI use in elementary and middle schools. He also pointed…
GreyNoise reports that on 31 August 2026 a likely Russian-speaking malicious cyber actor used 45.142.193.132 and AI to develop, test and deploy exploits for PaperCut NG/MF (CVE-2026-81578 and CVE-2026-82078). Using hundreds of AI agents built on OpenAI's Codex harness, a DeepSeek model and public offensive security tools, the actor compro…
The NSA, CISA, FBI, DOE and EPA issued a joint advisory (AA26-231A) warning of an active threat to Siemens S7 Series PLCs in U.S. critical infrastructure. Unattributed threat actors are conducting reconnaissance and capability development against U.S.-based installations using AI-generated exploitation scripts disguised as legitimate OT m…
CISA ran concurrent red team assessments at two organizations: Organization A (Government Services and Facilities) and Organization B (Water and Wastewater Systems). Both reached full domain compromise and accessed sensitive business systems (SBSs) and cloud resources. Organization A did not detect or contain the activity. Organization B …
CISA added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Two affect JFrog Artifactory: CVE-2026-42016 (incorrect authorization) and CVE-2026-42018 (improper authentication). The third is CVE-2026-84869 in ConnectWise ScreenConnect (improper privilege management and mis…
CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-76460, an incorrect use of privileged APIs flaw in Cisco Identity Services Engine, and CVE-2026-87886, an incorrect default permissions flaw in Acronis Backup. CISA describes these vulnerability types as a…
CISA added two Linux Kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2025-39964, a race condition flaw, and CVE-2026-53266, an out-of-bounds write flaw. CISA describes these vulnerability types as a frequent attack vector for malicious cyber actors and a significant…
