Collaborate Disseminate
Prioritize resilience over productivity, say CISA, NCSC and their friends from Oz, NZ, Canada Information security agencies from the nations of the Five Eyes security alliance have co-authored guidance on the use of agentic AI that warns the technology… Continue reading Five Eyes spook shops warn rapid rollouts of agentic AI are too risky
Britain’s cyber agency says the bill for years of technical shortcuts is coming due, and it’s arriving all at once Britain’s cyber agency is warning that AI-fuelled bug hunting is about to flush out years of buried flaws, leaving defenders scrambling t… Continue reading Brace for the patch tsunami: AI is unearthing decades of buried code debt
Exploitation was underway before patches landed, at least one victim reports ransomware demand CISA has added a critical cPanel bug to its known-exploited list, confirming that attackers are already poking holes in one of the internet’s most widely use… Continue reading First reports come in of victims of critical cPanel vuln as ‘millions’ of sites potentially exposed
Altman’s crew now doing the same gatekeeping it recently mocked OpenAI is lining up a limited release of its new GPT-5.5-Cyber model to a handpicked circle of “cyber defenders,” just weeks after taking a swipe at Anthropic for doing almost exactly the … Continue reading OpenAI locks GPT-5.5-Cyber behind velvet rope despite slamming Anthropic for doing exactly that
313 Team tells Canonical: pay up or the packets keep coming Canonical says its web infrastructure is under attack after a pro-Iran hacktivist group instructed its members to target the open source giant.… Continue reading Pro-Iran crew turns DDoS into shakedown as Ubuntu.com stays down
Start date pushed back a year, annual cost up a third, and UK’s now handing out eight million passports a year The Home Office has increased the annual value and overall duration of its new passport production contract, increasing it to a total of £576… Continue reading Passport to £££: Home Office adds £216M to travel doc contract before a single bid’s been placed
Mini Shai-Hulud caught spreading credential-stealing malware The wave of supply chain attacks aimed at security and developer tools has washed up more victims, namely SAP and Intercom npm packages, plus the lightning PyPI package.… Continue reading The never-ending supply chain attacks worm into SAP npm packages, other dev tools
KnowBe4 says 86% of phishing it tracked used AI, and inboxes are only the start Give a man a phishing kit and he might get lucky a couple of times; teach an AI to phish and it’ll change the landscape, if KnowBe4’s latest phishing trends report is accur… Continue reading Bot her emails: most modern phishing campaigns are AI-enabled
One alleged cyber contractor was extradited to the US over the weekend China’s “hacker-for-hire ecosystem has gotten out of control,” according to Brett Leatherman, assistant director of the FBI’s cyber division.… Continue reading FBI cyber boss: China’s hacker-for-hire ecosystem ‘out of control’
This CVSS 10.0 RCE vuln has been patched, automatically for some, so better check those workflows If you use Gemini CLI, watch out: Google has patched a CVSS 10.0 vulnerability in its command-line AI tool and is warning anyone running it in headless mo… Continue reading Google’s fix for critical Gemini CLI bug might break your CI/CD pipelines