security

iOS 27 beta 2 is out now, here's what's new - Engadget

- [Big Tech]($1) - [Apple]($1) # iOS 27 beta 2 is out now, here's what's new Spoiler: It’s more Siri stuff. By [Anna Washenko]($1) June 22, 2026 4:16 pm EST ...

Meta is 'pausing' employee tracking program after it let the whole company see sensitive data - Engadget

- [Big Tech]($1) - [Meta]($1) # Meta is 'pausing' employee tracking program after it let the whole company see sensitive data This won’t make the already-controversial AI training endeavor ...

OpenAI's new Daybreak⁠ initiative will help open-source projects fend off bugs - Engadget

- [Cybersecurity]($1) # OpenAI's new Daybreak⁠ initiative will help open-source projects fend off bugs Patch the Planet will pair security researchers with open-source projects. ...

Google Cloud generative AI automates council planning operations

Government ministries are deploying [Google Cloud]($1) generative AI across municipal agencies to automate council planning operations. Public sector administration handles vast volumes of unstructur...

HSBC expands AI banking partnership with Google Cloud

HSBC has entered a multi-year partnership with Google Cloud to develop and deploy artificial intelligence tools across its global operations. Announced at Google Cloud Summit London 2026, the agreeme...

Mitigating vendor lock-in with Sakana AI Fugu multi-agent models

[Sakana AI]($1) launched Fugu to orchestrate multi-agent operations and mitigate single-vendor dependency risks in enterprise deployments. Enterprises face operational vulnerabilities when relying en...

Top spy agencies say AI cyber threats will impact you within months. Here’s why

The global surge in AI cyber threats is no longer a distant problem for corporate data centres, according to an urgent public warning from the world’s most powerful intelligence alliance. On June 22, ...

Omio scales travel product development using OpenAI models

[Omio]($1) integrates OpenAI models across its engineering operations to accelerate travel product development and launch booking interfaces. The multimodal travel platform coordinates operations wit...

INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific

- **Ravie Lakshmanan**Jun 22, 2026Cybercrime / Artificial Intelligence [*]($1) A new report from INTERPOL has revealed a "dramatic increase" in cybercrime in Asia and the South Pacific, fueled by ...

AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network

- **Swati Khandelwal**Jun 22, 2026IoT Security / Vulnerability [*]($1) A new malware family is turning forgotten home routers into a distributed reconnaissance and proxy network, not the DDoS botn...

Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices

- **Swati Khandelwal**Jun 22, 2026Cyber Espionage / IoT Security [*]($1) Canada's spy service got a judge's permission to reach into infected servers, home routers, and IoT gear sitting on Canadia...

Stop Your Legacy Infrastructure from Hijacking Your AI Agents

- **The Hacker News**Jun 22, 2026Exposure Management / AI Security [*]($1) Earlier this month, I spoke at the [Gartner Security & Risk Management Summit]($1) about a blind spot most security progr...

Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries

- **Swati Khandelwal**Jun 22, 2026Mobile Security / Open Source [*]($1) Google has set September 30, 2026, as the day it begins enforcing [Android developer verification]($1) in the first four cou...

New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer

- **Ravie Lakshmanan**Jun 22, 2026Malvertising / Endpoint Security [*]($1) Cybersecurity researchers have disclosed details of a new campaign that delivers CastleStealer by means of a previously u...

Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants

- **Ravie Lakshmanan**Jun 22, 2026AI Security / Vulnerability [*]($1) Cybersecurity researchers have disclosed details of four vulnerabilities in [Dify]($1), an open-source agentic workflow platfo...

29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests

- **Swati Khandelwal**Jun 22, 2026Vulnerability / Server Security [*]($1) A heap over-read in the Squid web proxy can leak another user's cleartext HTTP request, including any credentials or sessi...

ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack

- **Ravie Lakshmanan**Jun 22, 2026Supply Chain Attack / Malware [*]($1) Multiple WordPress plugins from [ShapedPlugin]($1) were compromised in a supply chain attack after unknown threat actors man...

WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool

- **Ravie Lakshmanan**Jun 23, 2026Malware / Social Engineering [*]($1) Direct messages sent via WhatsApp are being used to distribute malicious Visual Basic Script (VBScript) files that lead to th...

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

- **Ravie Lakshmanan**Jun 23, 2026Supply Chain Attack / Developer Security [*]($1) Cybersecurity researchers have discovered a set of malicious npm packages that are designed to deliver a Windows-...

Agentic AI: The Weapon That No Longer Needs a Warrior

- **The Hacker News**Jun 23, 2026Offensive AI / Cybersecurity Training [*]($1) Every weapon begins as an extension of the hand that holds it. The spear lengthened the reach of the arm. The bow sen...

GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

- **Ravie Lakshmanan**Jun 23, 2026Workflow Security / Software Supply Chain [*]($1) GitHub is moving to strengthen software supply chain security by updating "[actions/checkout]($1)" to block **p...

Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration

- **Swati Khandelwal**Jun 23, 2026Cryptography / Quantum Computing [*]($1) President Trump signed an [executive order on June 22]($1) setting hard deadlines for federal agencies to move high-valu...

Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents

- **Swati Khandelwal**Jun 23, 2026Supply Chain Security / Enterprise Security [*]($1) Security firm AIR built a fake AI agent skill, pushed it through a popular skill marketplace and an Instagram...

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled **Transport for London**, the entity responsible for the public transp...

Record a skill

Hey folks, I’ve been looking at a lot of design resources for the manual recently. Interface Craft by Josh is one of the best places I’ve found for learning how to actually feel and notice taste. []...

The Download: record-breaking subsea tunnels and flexible data centers

*This is today's edition of *[*The Download*]($1),* our weekday newsletter that provides a daily dose of what's going on in the world of technology.* *—Niall Firth*I’m currently around 1,000 feet bene...

Three things to watch amid Anthropic’s latest feud with the government

*This story originally appeared in The Algorithm, our weekly newsletter on AI. To get stories like this in your inbox first, *[*sign up here*]($1)*.*For those of you enjoying your summer unaware of An...

The Download: the future of chipmaking and Anthropic’s government clash

*This is today's edition of *[*The Download*]($1),* our weekday newsletter that provides a daily dose of what's going on in the world of technology.* It’s a bit of a schlep to get to the top of ASML’s...

Following user outcry, AMD reinstates memory encryption in consumer CPUs

** Text settings Story text Size Small Standard Large Width * Standard Wide Links Standard Orange * Subscribers only [Learn more]($...

OpenAI launches new initiative to help find and patch open source bugs | TechCrunch

The first StrictlyVC of 2026 hits SF on April 30. Tickets are going fast. [Register now.]($1)[Founder Summit]($1) ticket savings of up to $190 end June 26. Join 1,000+ founders and VCs for all-day boo...

AI is cursing renters with the promise of impossible homes

- **Report - **AI - **Tech # AI is cursing renters with the promise of impossible homes “Virtual staging” might be able to cram a six-seater dining table into a studio apartment, but tenants can’t. ...

Meta launches cheaper smart glasses without Ray-Ban

- **Tech - **AI - **Gadgets # Meta launches cheaper smart glasses without Ray-Ban They’re also $80 cheaper, and Alex Himel, Meta’s VP of wearables, says privacy improvements are on the way. If you ...

The Fitbit Air takes a smarter approach to the AI health dumpster fire

- **Tech - **AI - **Gadgets # The Fitbit Air takes a smarter approach to the AI health dumpster fire Google Health remains a work in progress, but it could be so much worse. If you buy something f...

Computer vision deployments drive retail productivity gains

Computer vision deployments are driving retail productivity gains as operators automate physical shelf tracking to protect eroding margins. This hardware deployment directly addresses the persistent ...

e2e-assure introduces Cumulo, the U.K.’s only sovereign, AI-driven, zero-day SOC platform to secure IT and OT environments

*Built around digital twin technology and customer-dedicated AI models, Cumulo answers the recent announcement by GCHQ for AI Cyber Shield, enabling early identification of threats and vulnerabilities...

SAP and Google Cloud deploy agentic commerce architecture

[SAP]($1) and [Google Cloud]($1) are deploying agentic commerce architecture to automate multi-agent marketing and retail operations at enterprise scale. SAP research indicates 78 percent of business...

Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development

- **Ravie Lakshmanan**Jun 17, 2026Endpoint Security / Vulnerability [*]($1) Microsoft has formally disclosed that it's working to release a patch to address a Defender zero-day codenamed [RoguePla...

Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments

- **Ravie Lakshmanan**Jun 17, 2026Malware / Social Engineering [*]($1) An unknown threat actor has been observed leveraging paid or promoted posts on legitimate news websites to drum up buzz for t...

DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic

- **Ravie Lakshmanan**Jun 18, 2026Remote Access Trojan / Ransomware [*]($1) Threat actors associated with the [DragonForce]($1) ransomware have been observed using a custom Go-based remote access ...

The Scripts on Your Checkout Page Are Now a PCI DSS Problem

- **The Hacker News**Jun 18, 2026Payment Security / Compliance [*]($1) An independent PCI assessor tested Reflectiz against the new PCI DSS rules. Here is the verdict: **[See the full QSA assessme...

INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023

- **Ravie Lakshmanan**Jun 18, 2026Vulnerability / Enterprise Security [*]($1) Cybersecurity researchers have charted the evolution of [INC]($1) from an nascent ransomware-as-a-service (RaaS) opera...

Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2

- **Ravie Lakshmanan**Jun 18, 2026Malware / Cryptocurrency [*]($1) Microsoft has disclosed details of a Windows-based cryptocurrency clipper campaign codenamed **CryptoBandits** that has targeted...

Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network

- **The Hacker News**Jun 18, 2026AI Security / Data Security [*]($1) If an autonomous AI agent interacts with your company's core intellectual property today, can your security team instantly name...

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

- **Ravie Lakshmanan**Jun 18, 2026Vulnerability / Cloud Security [*]($1) F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to ach...

Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone

- **Ravie Lakshmanan**Jun 19, 2026Mobile Security / Vulnerability [*]($1) Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited b...

Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data

- **Ravie Lakshmanan**Jun 19, 2026Data Breach / Cloud Security [*]($1) Salesforce has revealed that it disabled the Klue Battlecards app integration within its platform in response to a security i...

Forget Data Leakage: Shadow AI's Real Threat Is Access Control

- **The Hacker News**Jun 19, 2026Agentic AI / SaaS Security [*]($1) The first wave of enterprise AI concern was straightforward. It was simply employees pasting sensitive data into public AI tools...

From Assistive to Agentic: The AI Shift That's Redefining Threat Management

- **The Hacker News**Jun 19, 2026Enterprise Security / Agentic AI [*]($1) ## **Introduction** The average enterprise security team has 40 or more security tools, giving a lot of visibility into i...

CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices

- **Ravie Lakshmanan**Jun 19, 2026Threat Intelligence / Firewall Security [*]($1) The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday [urged]($1) Fortinet customers with F...

Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites

- **Ravie Lakshmanan**Jun 19, 2026Malware / Threat Intelligence [*]($1) Dutch law enforcement authorities, along with counterparts from [ Canada ]($1) , Germany, and the U.S., have disrupted malic...

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

- **Swati Khandelwal**Jun 19, 2026Vulnerability / Software Supply Chain [*]($1) Microsoft researchers have detailed an exploit chain, named [AutoJack]($1), that turns an AI browsing agent into a d...

The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes

- **Ravie Lakshmanan**Jun 19, 2026Ransomware / Endpoint Security [*]($1) The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and maintaining a suite of endpoint detection...

Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain

- **Swati Khandelwal**Jun 19, 2026Hardware Security / Vulnerability [*]($1) Security researchers at Paradigm Shift have published a working exploit, dubbed **usbliter8**, that achieves arbitrary c...

Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys

- **Ravie Lakshmanan**Jun 20, 2026Vulnerability / Web Security [*]($1) Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that's installed on ...

For the past four years, a sprawling Android-based botnet called **Popa** has forced millions of consumer TV boxes to relay Internet traffic linked to advertising fraud, account takeovers, and mass da...

The Download: a new hunt for dark matter and Kenya’s case for going solar

*This is today's edition of *[*The Download*]($1),* our weekday newsletter that provides a daily dose of what's going on in the world of technology.* For decades, physicists have hunted for weakly int...

The Download: AI bottleneck debates, and BCI trials take off

*This is today's edition of *[*The Download*]($1),* our weekday newsletter that provides a daily dose of what's going on in the world of technology.* AI startup Subquadratic came out of stealth last m...

Users cry foul after AMD stripped memory crypto from its consumer CPUs

** Text settings Story text Size Small Standard Large Width * Standard Wide Links Standard Orange * Subscribers only [Learn more]($...

Critical Copilot vulnerability allowed hackers to steal 2FA code from users

** Text settings Story text Size Small Standard Large Width * Standard Wide Links Standard Orange * Subscribers only [Learn more]($...

Windows and Linux users: The deadline to update Secure Boot keys is near

** Text settings Story text Size Small Standard Large Width * Standard Wide Links Standard Orange * Subscribers only [Learn more]($...

"Dangerous" AI models are coming no matter what

** Text settings Story text Size Small Standard Large Width * Standard Wide Links Standard Orange * Subscribers only [Learn more]($...

Tesco moving 40,000 server workloads off VMware amid Broadcom's “abusive conduct”

** Text settings Story text Size Small Standard Large Width * Standard Wide Links Standard Orange * Subscribers only [Learn more]($...

Massive breach spills credentials for thousands of sensitive networks

** Text settings Story text Size Small Standard Large Width * Standard Wide Links Standard Orange * Subscribers only [Learn more]($...

Before SpaceX IPO, investors in China secretly acquired stakes

** Text settings Story text Size Small Standard Large Width * Standard Wide Links Standard Orange * Subscribers only [Learn more]($...

Apple patches eavesdropping vulnerability in Beats Studio Buds

** Text settings Story text Size Small Standard Large Width * Standard Wide Links Standard Orange * Subscribers only [Learn more]($...

Microsoft discovers new lightweight backdoor that steals cryptocurrency

** Text settings Story text Size Small Standard Large Width * Standard Wide Links Standard Orange * Subscribers only [Learn more]($...

Source: Elastic agrees to buy CRV-backed Deductive AI for up to $85M | TechCrunch

Deductive AI, a startup that uses AI to catch and resolve bugs in software, has agreed to be sold to enterprise software company Elastic for up to $85 million, according to a person with knowledge of ...

Is the US government's Anthropic ban accidentally helping the brand? | TechCrunch

Just as last week was ending, the US government [forced Anthropic to pull its two newest models]($1), Fable 5 and Mythos 5, citing national security concerns after Amazon researchers allegedly found a...

From PGP to Mythos: a brief history of export controls that didn't stop anyone | TechCrunch

Last Friday, citing unspecified national security concerns, the White House [ordered Anthropic]($1) to restrict the export of its powerful AI models Fable and Mythos to anyone outside of the United St...

When the Trump administration cracks down on Anthropic, who benefits? | TechCrunch

Anthropic recently [took its two newest AI models offline]($1) due to an export control order from the Trump administration, prompting broad debates about AI policy and [digital sovereignty]($1).On th...

Anthropic got hit by export rules nobody understands

- **AI - **Policy - **Anthropic # Anthropic got hit by export rules nobody understands Governing AI through opaque, ad hoc interventions is unsustainable, experts warn. Governing AI through opaque,...

Amazon employees say they’re facing termination for backing data center limits

- **AI - **Report - **Tech # Amazon employees say they’re facing termination for backing data center limits After speaking up for regulation on data centers, Seattle activists say they were called i...

AI vibe-coding expands Web3 access for building dApps

AI-powered vibe-coding translates natural language prompts into functional Web3 components, lowering barriers to building dApps, smart contracts, and on-chain infrastructure. The approach blends AI augmentation with specialized tooling, enabling both seasoned developers and non‑coders to describe ideas and watch them become deployable code. As with any automation, security and auditing remain essential.

Watch Out: New AI Hack Turns ChatGPT into a Data Thief!

A sneaky new attack called 'AgentFlayer' shows how a simple document can exploit ChatGPT to steal sensitive data from Google Drive without any clicks. This highlights the growing security risks of AI and cloud services.

AI Models Under Fire: Major Security Flaws Exposed in Red Teaming Event

A recent red teaming event revealed that all major AI models tested are vulnerable to security breaches, highlighting the urgent need for improved safety measures in AI development.