This ZDNET article is not a cyber threat report. It covers US state legislation on plug-in (balcony or backyard) solar systems, which consist of panels, an inverter and a battery that connect to a standard 120-volt outlet. Utah was the first state to legalize them, and ten states have now done so. About two dozen others are still working …
Anthropic announced that six evaluators from METR, a third-party nonprofit that tests frontier models, will get "employee-like access" to its hardware, office space and internal tools roughly on par with those of its own risk assessment teams. Exclusions are limited to a few categories: customer data, attorney-client privileged informatio…
Apple's online store in the US began showing a January 25 ship date for every iPhone Duo configuration within about 30 minutes of preorders opening on October 16, 2026. The article describes this as the longest preorder delay Apple has recorded. According to Bloomberg's Mark Gurman, the main cause is "extraordinary supply chain constraint…
The Center for AI Safety (CAIS) maintains a Wage Loss Dashboard that estimates the economic cost of US job cuts companies attribute to AI. It was updated this month with September data. It shows just over 117,000 AI-attributed job cuts nationally since January 2026, equal to about $8.5 billion in estimated annual wage losses. This is indu…
Bank of America hired 1,000 extra contractors in Q2 to patch the volume of vulnerabilities surfaced by Anthropic's Mythos AI model, CEO Brian Moynihan said on the Q3 earnings call. The contractors supplement about 3,000 existing technical staff and are still on site. Moynihan put remediation costs at "a couple of hundred million plus", a …
Bright Security announced the launch of STAR Fuzzer, an agentic fuzzer in its Bright STAR platform. It uses AI to select security-critical functions and generate harnesses, then runs an evolutionary search engine to find faults and delivers byte-exact reproducing payloads. In pre-release testing, 45% of the open-source projects tested had…
CyberSN's Cybersecurity Jobs Report, built on JobSpikr data, shows US cybersecurity job postings at a four-year low of 235,786 between January and September 2026. That is down 26.4% from 320,210 in the same period of 2025. Demand for AI Security Engineer roles grew 268.3% and Cyber Data Scientist roles grew 203.5%. Just under 15% of all p…
A WIRED long-read profiles Lili Infante, a Russian-born DEA special agent who became a pioneer of cryptocurrency and digital money-laundering investigations. This opening installment is biographical. It covers her childhood in post-Soviet Moscow, her early work translating wiretaps in a RICO case against the Boris Nayfeld Bratva gang in B…
ByteDance, owner of TikTok, has created a dedicated AI safety team inside its Seed research unit and opened a global search for ten researchers. The team, named Alignment & Preparedness, will work to ensure AI systems follow human objectives and safety requirements, including on complex multi-step tasks. Positions are located in Beijing a…
Meta's AI companion app Muse has reached 10.9 million downloads since its September debut, 10.2 million of them in the United States, according to Sensor Tower. Only 11 other apps have reached 10 million U.S. downloads within 40 days of launch. The most recent was Threads in July 2023, and most of the others were mobile games. Muse is ava…
A survey of 2,018 senior IT decision-makers in the US and UK, conducted by Censuswide for Origina and published with Thinkers50 in the report The Software Tax, finds large enterprises spend an average of 28% of software budgets on upgrades, migrations and licensing changes they would not have chosen. 95% of respondents paid for a vendor-d…
ICANN has begun testing authentication schemes that would let law enforcement agencies file urgent requests for non-public WHOIS data when facing imminent threats to life, serious bodily injury, critical infrastructure or child exploitation. The work is led by the Input Group on Law Enforcement Agency Authentication Mechanisms, which repo…
Trend Micro published its annual threat report, Calibrating Expansion, covering 2023. It reports 161 billion threats blocked, a 10% annual increase. Attackers appear to be targeting fewer, higher-value victims with more sophisticated methods. Email and web reputation blocks fell 47% and 2%, while File Reputation Service detections rose 35…
This WeLiveSecurity explainer gives practical advice to people targeted by AI-generated deepfakes, which are increasingly used in fraud, extortion, harassment and non-consensual intimate imagery (NCII). It sets out the legal context: the US TAKE IT DOWN Act criminalizes NCII distribution and requires platforms to remove reported content w…
Bruce Schneier has published his list of upcoming speaking engagements. It covers five events between October and November 2026 in Canada and the United States. The events are ATTENTION: Democracy, Rebuilt in Montreal (October 21-23), a talk at the University of Toronto (October 22), unprompted in San Francisco (October 27-29), the Cataly…
In a PWNED column, SolarWinds CISO Justin Henkel, a former US Air Force IT security specialist, recounts that in the early 2000s pilots and mission planners moved mission data between unclassified and classified systems using CDs and later USB thumb drives. Personnel often bought the drives from local vendors, for example in Kabul, rather…
A Nigerian national, Chukwuemeka Victor Amachukwu (aliases Chukwuemeka Victor Eletuo and So Kwan Leung), 40, was sentenced to eight years in prison for his role in spearphishing attacks against US tax preparation businesses between 2019 and 2021. He pleaded guilty to conspiracy to commit computer intrusions and wire fraud after being extr…
This ESET WeLiveSecurity blog post argues that small and midsize businesses (SMBs) want advanced protection that is simple, guided and manageable. It cites ESET data showing 75% of SMBs are concerned about global conflicts and cyber warfare, nearly half had at least one cyber incident in the past year, and 58% believe they are more vulner…
A reader comment (by ResearcherZero) on a Schneier on Security squid-blogging post alleges that an agent working for the Russian GRU carried out repeated "Havana Syndrome"-style attacks with an energy-emitting device against civilians in Perth, Western Australia, from the second half of the 1980s until 1992. The commenter claims the attac…
Nvidia has released Nemotron 3.5 Super VL, a 120-billion-parameter open-weight model aimed at agentic workloads, together with two edge models, Nemotron 3.5 Bolt 74B-A9B 24GB and Nemotron 3.5 Bolt E4B 4GB. Nvidia claims it is 5x faster than the next-best model in its class, based on Artificial Analysis benchmarks that ranked InclusionAI's…