A former IT employee at an Iowa school district was sentenced to 21 months in prison after conducting a prolonged cyberattack against the former employer that disrupted classroom operations, deleted accounts, and caused tens of thousands of dollars in damages. [...]
Amazon CEO Andy Jassy may have been the source of security concerns that led Anthropic to cut off worldwide access to two models on Friday.
Adaptive Security recruited Conan O'Brien for cybersecurity training videos aimed at helping employees recognize phishing deepfakes and AI-enabled fraud.
Chinese hackers took control of a target organization's authentication stack and maintained persistence for 10 years, with full visibility into the administrative activity. [...]
The FBI has revealed a 22,000 square-foot replica town on its Huntsville, Alabama, campus built to train law enforcement in simulating and investigating real-world cyberattacks. The Kinetic Cyber Range opened in February 2025 and has trained more than 1,400 students, including FBI personnel and partners from other federal and local agencies. The facility features fully […] This story continues at…
Hidden inside a building in Alabama, the FBI has created its own small town as a dedicated cyber training ground for simulating cyberattacks.
Plus: AI bug hunting fuels Microsoft’s biggest-ever Patch Tuesday, ShinyHunters ransomware gang exploits an Oracle zero-day, and more.
The US government has ordered Anthropic to block all foreign nationals from accessing Fable 5 and Mythos 5, forcing the company to suspend both models worldwide. Anthropic is complying but disputes the basis, calling the cited jailbreak narrow and the capability widely available elsewhere. [...]
AI summary The US government issued an export control directive ordering
Researchers from Tokyo Metropolitan University have created a new paradigm for identifying online phishing campaigns. Their new system, PhishLumos, is triggered when links show signs of concealing information and looks for clues in the "infrastructure" of the website to uncover the whole campaign of which the site is only a tiny part. Real-world testing showed detection that was eight days faster…
A coalition of 42 state attorneys general has opened a sweeping investigation into OpenAI, first reported by the Wall Street Journal on Thursday. New York’s attorney general served the company with a subpoena on Friday demanding documents on advertising, user engagement and retention, consumer and health data, its treatment of minors and seniors, deep-learning models, and internal […] This story…
AI summary Компания OpenAI готовится к выходу на IPO, однако столкнулась с масштабным расследованием со стороны 42 генеральных прокуроров штатов США. Расследование, о котором впервые сообщила Wall Street Journal, включает запрос документов по рекламе, вовлеченности пользователей, обработке данных и другим аспектам деятельности компании.
The tech giant said a group called "Outsider Enterprise" used AI to scam hundreds of thousands of victims, sending 2.5 million text messages over a span of two weeks.
Maine has taken its public data breach reporting portal offline after fraudulent breach disclosures were published on the state's website, prompting a review of procedures to prevent abuse in the future. [...]
Vulnerability in the Oracle-owned PeopleSoft software is about as critical as they come.
Iowan’s scheme undone after misplacing trust in former coworker
A 10-year-old authentication bypass vulnerability discovered in the phpBB forum software allows an attacker to log in as any user, including administrators. [...]
A Ukrainian national extradited from Ireland to the United States last year has pleaded guilty to conspiracy charges tied to the Conti ransomware operation. [...]
Millions of clients have valuable data exposed after drive goes missing.
More than 400 packages in the Arch User Repository (AUR) are distributing a Linux rootkit and infostealer malware targeting credentials and access tokens. [...]
AI summary Arch Linux 的用户软件仓库 AUR 遭到大规模恶意攻击，超过 400 个软件包被植入恶意程序，包括 rootkit 和信息窃取器。攻击者修改了构建脚本，但未更改包名称和历史记录。此次攻击仅影响用户贡献的软件包，官方 Arch Linux 包不受影响，维护者正在删除恶意内容并封禁相关账号。
The creators of the hit, enterprise-friendly, open source OpenClaw variant NanoClaw are partnering with software supply chain management leader JFrog to launch a new, joint security integration they say will protect NanoClaw autonomous agents from malicious code injection. "These agents are doing things that you cannot necessarily control, and you cannot necessarily train," said Gal Marder, Chief…
AI summary NanoClaw, an open-source variant of OpenClaw, has partnered with software supply chain management company JFrog to launch a security integration designed to protect NanoClaw autonomous agents from malicious code injection. The collaboration aims to address risks associated with AI agents performing uncontrolled actions.
GitHub access sales, leaked repositories, and stolen API keys can all become supply-chain attack footholds. Flare explores how underground forums expose early signals tied to software supply-chain risk. [...]
Also covering:VentureBeatTechRadarThe Next Web+1
Also covering:TechCrunch
Also covering:The Register