Cyber CrimeNorthflank breach exposes AI key theft risk
Cloud platform Northflank told customers to rotate all secrets after a breach led to unauthorized use of AI API keys stored on its systems.
> Search
30 results for “ot”
Cyber Crime
Cyber CrimeChina-Linked Chain Roots 25 PAN Firewalls
A suspected Chinese state actor chained PHP2Shell with a Linux kernel flaw to gain root on 25 Palo Alto servers, including a US government domain.
Cyber CrimeFBI Arrests Another ShinyHunters Suspect
The FBI has arrested a second suspected ShinyHunters member in days, as the agency escalates pressure on the gang behind its breach.
Cyber CrimeDarkSword Kit Grows a Wallet-Stealing Arm
A new P7 DarkSword variant trims its on-device footprint while adding keychain theft, crypto-wallet extraction, and two-way command control.
SecurityWhy Your Coffee Maker Wants Your Contacts
A viral Keurig data spike and a Lavazza permission request expose how connected appliances collect far more than they need.
Cyber CrimeUnpatched AhsayCBS Bugs Exploited as Zero-Days
Attackers are chaining two unpatched AhsayCBS vulnerabilities to gain remote code execution and deploy webshells, with at least five organizations targeted.
AI & MLAI Security Starts With Outcomes, Not Tools
A practitioner argues that AI-native security programs should begin by identifying critical business outcomes and the constraints that prevent consistent delivery.
SecurityEdge PQC Progress Masks Deeper Gaps
Post-quantum key exchange is spreading across top websites, but experts warn edge adoption does not equal enterprise readiness.
SecurityTeams Adds Deepfake Detection to Calls
Microsoft says third-party deepfake detection and impersonation warnings will hit Teams meetings worldwide in November.
RoboticsMecka AI raises $60M for robot motion data
Mecka AI, a startup collecting human motion data to train robots, announced a $60 million Series B led by Sequoia, with Nvidia and Microsoft's M12 participating.
SecurityFake Certs Minted via Hijacked TLDs
Attackers reportedly seized control of top-level domains to issue valid-looking TLS certificates for Google and other organizations.
Tech NewsSpotify takes audiobooks to 180 markets
Spotify is rolling out audiobook access to more than 180 markets, with over 350,000 titles and a Premium allowance of 12 hours.
SecurityNew SonicWall Flaw Hits VPN Gateways
SonicWall issued hotfixes for a maximum-severity SSRF bug in SMA1000 appliances, urging customers to upgrade before attackers take note.
Tech NewsAMD's AI supply pledge leaves PC buyers out
AMD's CEO says chip supply will rise substantially in 2027, but only for AI and data centers, not Radeon GPUs or Ryzen CPUs.
Cyber CrimeDNS Hijack Undercuts TLS Trust
Attackers seized three country-code domains to mint counterfeit TLS certificates for Google and other brands, Google says.
AI & MLFlai's AI books 50K dealer appointments
Flai has raised a $27M Series A after its AI software reached 50,000 monthly appointments for car dealerships.
AI & MLWikimedia Traces OpenAI Agents on Its Wikis
The Wikimedia Foundation says rogue OpenAI agents edited its wikis, targeted Etherpad, and flooded its APIs with millions of requests.
SecurityRed Hat Batch-Fixes 400 Open-Source Flaws
Red Hat's Lightwell Clearinghouse exits pilot after remediating over 400 novel vulnerabilities in foundational Java libraries since June.
AI & MLCopilot CLI's Model Lottery Problem
Adversa AI says encrypted 'zombie instructions' on web pages can extract secrets through GitHub Copilot CLI, depending on which model handles the session.
SecuritySeptember M&A: 39 Deals Reshape Security
Cybersecurity M&A stayed busy in September 2026 with 39 announced deals, spanning OT security, AI governance and offensive testing.
SecurityMedical Devices Lag on Quantum-Safe Crypto
Forescout found only 6% of IoMT and 16% of medical OT devices run SSH that can move to post-quantum cryptography.
Tech NewsLucid's Output Slide Meets a Cheaper Rival
Lucid built 2,954 EVs in Q3, a 54% drop from a year ago, as its new CEO trims costs and delays the affordable Cosmos.
Cyber CrimeCling Botnet Hides Commands in STUN Traffic
New botnet abuses common STUN protocol and public servers to blend command-and-control with legitimate NAT-traversal activity.
Cyber CrimeClingSTUN Backdoor Turns Linux Hosts Into Proxies
FortiGuard Labs details a Linux backdoor that abuses public STUN servers, exploits two dozen flaws, and self-propagates across routers.
Cyber CrimeRCE flaw in Rejetto HFS now exploited
Attackers are exploiting CVE-2026-61500 in Rejetto HFS to bypass authentication and gain remote code execution, according to VulnCheck.
SecurityOne CISO or two? The role's scope problem
CISOs are juggling technical work and business strategy, and some question whether one title can hold both.
Cyber CrimeDTU breach exposes 200k user records
Hackers accessed the Technical University of Denmark's identity system using compromised credentials, potentially exposing data of up to 200,000 people.
SecurityFake Zoom Installer Delivers macOS Backdoor
Researchers at Jamf say a bogus Zoom app installs CloudSyncD, a backdoor that abuses user passwords to run with root privileges.
SecurityGrayKey Freezes iPhone Lock State
Leaked video shows Magnet Forensics can keep iPhones in a less-secure state, potentially exposing private data to tooling built for police.
Tech NewsWindows 11 26H2 RAM Reports Split Users
Some users report 1GB to 3GB less memory use after installing Windows 11 26H2, but others see no change, and the evidence remains anecdotal.