1.168 casos · pág. 50/59
This item is a reader comment by Clive Robinson on a Schneier on Security post about measuring human cryptanalysis effort. It is not a security incident. The commenter argues that doubts about AI-produced work apply equally to human work, which is why review processes exist. He says stochastic or random processes bring efficiency but also…
A reader comment on Bruce Schneier's blog post on backdooring open-weight AI models, written by Clive Robinson, argues that tampering with LLM weights is hard to detect with conventional testing. Black-box testing is impractical because the input space is too large. White-box review does not apply, since a neural network has no code to wa…
Microsoft released updates for at least 974 vulnerabilities in Windows and other software, its largest Patch Tuesday ever. The previous record was 570 fixes in July. The 2026 total now exceeds 2,600, more than double the 2020 record year (1,245), with three months still to go. Microsoft and other large vendors, including Adobe, Cisco, Goo…
The FBI arrested a Canadian cybersecurity executive in Pennsylvania on October 8, 2026, in connection with its investigation into the ShinyHunters extortion group. Court records point to Edward Dubrovsky, a ransomware negotiation specialist formerly of Cypfer and now associated with CyberSteward. He faces charges of conspiracy to threaten…
Dutch authorities arrested a 24-year-old, reportedly Pepijn van der Stap (alias "Umbreon"), around Sept. 16, 2026 on suspicion of aiding data thefts and extortions by ShinyHunters. Van der Stap was previously convicted in 2023 for data theft and extortion. Days after the arrest, remaining ShinyHunters members escalated, breaching the FBI …
U.S. Army soldier Cameron John Wagenius (alias Kiberphant0m), 22, was sentenced in Seattle to 70 months in federal prison and ordered to pay $294,978 in restitution. He had pleaded guilty to hacking multiple telecommunications companies and stealing call and text metadata for more than 100 million AT&T customers in 2024. Working with co-c…
A New Jersey court has ordered radaris.com and 13 other domains in the Radaris family of people-search sites transferred to Atlas Data Privacy Corp. The ruling came after the defendants repeatedly failed to appear and defend a suit alleging violations of Daniel's Law, which requires data brokers to remove personal information of law enfor…
Microsoft released updates fixing more than 1,400 vulnerabilities in Windows and other software, far above September's record of nearly 1,000 fixes. Only one flaw is a confirmed zero-day exploited in the wild: CVE-2026-96951, a security feature bypass in Windows Shell affecting Windows 10, Windows 11 and some Windows Server versions. At l…
On October 8, the U.K. imposed economic sanctions on Cryptomus (formerly Certa Payments and Xeltox Enterprises, rebranded as Heleket) for processing payments that benefit the Russian government and its financial institutions. The sanctions also cover the virtual payment platforms VexPay, TokenSpot and Tsunami Payments. Experts describe Cr…
U.S. federal investigators pursuing ShinyHunters, which recently stole sensitive personnel data from the FBI recruitment site fbijobs.gov, reportedly identified executives at two ransomware negotiation firms with unusually close ties to the group. One U.S. consulting firm executive is suspected of helping operate the now-defunct extortion…
Ingram Micro's AWS Greenfield Practice Lead, Lee Robson, previews the company's participation at DTX + UCX London 2026. The company plans to demonstrate AI, cloud and security solutions built on AWS, including AWS Quick, Claude via Amazon Bedrock, FinOps-led cloud optimisation and AWS security assessments. Robson says channel buyers strug…
Check Point Research disclosed two high-risk vulnerabilities in LiteLLM, the open-source AI gateway that sits between enterprise applications and providers such as OpenAI, Anthropic and Google. A user with minimal privileges could take full control of the gateway, read sensitive files, execute arbitrary code and harvest the provider API k…
This is an opinion and event-promotion piece by Louise John, Head of IT Service Delivery at Virgin Active. It offers IT managers advice on handling unexpected projects with tight deadlines, such as a software rollout due in six weeks. The recommendations are to define the essential deliverables, manage expectations with senior leadership,…
Vega, which describes itself as a pioneer of Agentic Cyber Defense, has appointed Scott Simkin as Chief Marketing Officer. Simkin previously held marketing leadership roles at Palo Alto Networks (Cortex platform) and CrowdStrike (Falcon platform and Falcon Next-Gen SIEM). The announcement coincides with the release of Vega II, which the c…
Certes received Frost & Sullivan's 2026 Global Enabling Technology Leadership Recognition in post-quantum cryptography (PQC) after an independent vendor evaluation. This is vendor and industry recognition news, not a security incident. The article frames the underlying risk as "harvest now, decrypt later" attacks, where data intercepted t…
This is an educational opinion piece, not a report of an incident, vulnerability or campaign. It argues that zero trust has become an imprecise marketing term, and that organizations should work from NIST Special Publication 800-207, which defines it as a set of architectural principles rather than a single purchasable product. The author…
A Salt Security report, State of Agentic AI and API Security 2H 2026, finds that 49.8% of surveyed organisations confirmed or suspected an AI agent took an unintended, unexpected or unauthorised action in the past year. The research combines a survey of 380+ security and technology professionals with Salt Labs production telemetry. Among …
Huntress researchers detailed an SEO-poisoning campaign on 13 October that harvests SSL VPN credentials through a lookalike WatchGuard download page, watchguard-vpn.net, and then delivers the legitimate, validly signed Mobile VPN with SSL installer. Earlier waves used trojanised installers, but this iteration contains no malware, so endpo…
Forescout's Vedere Labs has documented ROMULUS, a previously unknown malware delivery platform used in ClickFix campaigns, and new delivery techniques for loaders tied to Vice Society ransomware activity. The server hosting the ROMULUS panel was found during an incident investigation, and six IP addresses exposed the same authentication i…
Techscaler, the Scottish Government's startup programme run by CodeBase, is funding Scottish founders to attend the Blue Earth Summit in London (14-16 October 2026) and the InvestHer Summit in Paris (27-28 October 2026). The aim is to build investor relationships and support international growth. The article is business and funding news a…
