Глава комитета по информполитике признался, что сам не пользуется VPN.

Документы ФБР показали, что первоначальный пресс-релиз Минюста преувеличивал число успешных взломов

Для атаки не требовался взлом панели администратора, хватало стандартного клиентского аккаунта с правами на домены.

Группа встроила запрещённую фразу в скрипт, чтобы модель отказалась разбирать остальной код.

NCSC предупреждает о росте атак на промышленные системы и признает, что часть вторжений уже дошла до физических последствий.

Новый фреймворк для постэксплуатации получил необычный способ связи с заражёнными машинами.

ИИ-инфраструктура трещит по швам, пока компании играют в инновации.

ToxNetV2 собирает P2P-сеть и позволяет LLM влиять на действия управляющего сервера.

Оптический эффект Магнуса оказался и угрозой, и инструментом для кубитов.

Неправильно настроенный каталог раскрыл код ботнета, журналы атак и инструменты операторов.

Проблемы затрагивали платформу, через которую крупные компании управляют ИТ-инфраструктурой, активами и процессами безопасности.

То самое расширение, которым вы пользуетесь годами, может внезапно начать вас грабить

Компания признала, что сервер TeamCity должен был получить патч от CVE-2026-63077, но обновление так и не установили.

Цифровые доказательства всё чаще приходится запрашивать у зарубежных сервисов и платформ.

Новый алгоритм увеличил емкость ДНК-памяти без изменения химии.

Не хватает не только линейных инженеров и аналитиков, но и системных архитекторов, руководителей проектов, разработчиков безопасных интерфейсов и других специалистов, способных выстраивать комплексные процессы.

Организациям приходится «выращивать» такие кадры самостоятельно: профильные вузы не всегда успевают за темпами развития ИТ и ИБ и изменением требований к специалистам.

Импортозамещение должно рассматриваться не как конечная цель и не как перечень продуктов, которые необходимо заменить, а как часть более широкой системы управления технологическими рисками.

Приоритеты в области ИТ и ИБ должны определяться реальными рисками и потенциальным ущербом, а не только необходимостью соответство…

От замены операционных систем, офисных пакетов и систем управления базами данных ИТ-рынок переходит к замещению сложного промышленного софта.

К началу 2026 года в Реестре российского ПО было зарегистрировано почти 30 000 продуктов, а объём продаж российских ИТ-продуктов и сервисов превысил 5 трлн рублей.

Затраты на покупку ПО на одного занятого в ценах 2015 года (источник: forecast.ru)Вторая волна импортозамещения — это уже этап системной и глубокой работы, переход от срочного импортозамещения к осознанному построению устойчивой отечественной ИТ-экосистемы для промышленности.

Они объединяют крупнейшие компании и разработчиков для определения приоритетных направлений импортозамещения и форми…

Аналогичные нормы действуют во многих странах, в том числе и в России (закон № 436-ФЗ «О защите детей от информации, причиняющей вред их здоровью и развитию»).

Среди них оказались как развитые страны Европы, так и Китай, и целый ряд азиатских стран, и Канада, и даже Австралия.

Из постсоветских стран пока отметился лишь Азербайджан, где соответствующий закон принят в конце июня и вступит в силу в 2027 году.

Страны, которые ввели или планируют ввести возрастные ограничения на доступ к соцсетям (РБК, Reuters)В России ограничения на доступ к соцсетям не планируются.

Они выставляют различные технические и организационные ограничения на доступ к данным.

Эта компания разработала инструменты для её практического применения — первый Фреймворк антихрупкой ИТ-архитектуры и Индекс антихрупкости для построения киберустойчивого бизнеса.

Для практической реализации концепции антихрупкости «Инфосистемы Джет» разработали первый Фреймворк антихрупкой архитектуры и Индекс антихрупкости, позволяющие выявить слабые места и сформировать дорожную карту усиления защиты.

Назначение инструментов, разработанных компанией «Инфосистемы Джет»Как же перейти от понимания концепции антихрупкости к её реализации?

Компания «Инфосистемы Джет» переводит концепцию антихрупкости на язык конкретных инженерных и управленческих решений.

Наличие веб-сервиса для оценки антихру…

В 2026 году российский рынок серверного оборудования и ПАКов достиг новой зрелости: выбор огромен, но разобраться в нём стало сложнее, чем когда-либо.

Они должны входить как в реестр Минпромторга (в части оборудования), так и в реестр Минцифры (в части программного обеспечения).

Ценность заключается в том, что в условиях, в которых оно производится, оно находится на уровне лучших мировых образцов вендоров А-класса.

Логика реализована в софте, и это зачастую требует изменения модели данных и подходов к их хранению, особенно когда часть технологий становится недоступной.

В нашей компании уже разработан ПАК искусственного интеллекта, который умеет управлять балансировкой и загрузкой карт и раб…

Денис Морозов добавил исторический контекст: «Раньше сервисные учётные записи были, но им доверяли по умолчанию — ведь это не люди, которые могут что-то утащить.

Клиент видит, что функция уже есть в PAM, и ему перестают быть нужны лишние системы.

Появляются сущности в инфраструктурном IDM, и доступы в соответствии с заранее определёнными политиками, ролевой моделью и матрицей доступов раскатываются в хранилище и PAM.

Суть не в комбайне, а в синергии продуктов.

Cloud Native PAM в ближайшее время в стране не появится — для этого нужен выход на внешние рынки.

Чтобы понять, как формировалась эта модель и что она представляет собой сегодня, мы посмотрели на её развитие, сравнили предложения и кейсы провайдеров.

MSSP сегодняРасширение рынка MSSP и рост конкуренции повысили ожидания клиентов.

Поэтому от MSSP ожидают не только организации и поддержки процессов ИБ, но и способности демонстрировать измеримый результат по снижению рисков.

Сервисы MSSP UserGate uFactorПоэтому при оценке MSSP важнее ориентироваться не на название услуги, а на фактический набор функций, которые предоставляет провайдер.

Важно понять, что именно заказчик получает от MSSP на практикеГибкостьПровайдер не обязательно привязан к одному стеку технологий.

Детально изучаем функции и возможности 4 отечественных центров сертификации для корпоративных инфраструктур: Aladdin Enterprise CA, Avanpost CA, Clearway CA, SafeTech CA.

ВведениеДо 2022 года в России не было отечественных центров сертификации (Certificate Authority, CA) для корпоративных инфраструктур.

Это пространство почти полностью занимал один из элементов экосистемы Windows — Microsoft Active Directory Certificate Services, или, как его иногда называют для краткости, Microsoft CA.

Так что отказываться от Microsoft CA (Active Directory Certificate Services) тяжело.

Да Да Выпуск и обслуживание сертификатов центров сертификации инфраструктуры открытых ключей Да Да Да Да Да Создание, импо…

В итоге всё же был сохранён налог на прибыль в 5% и удвоение страховых выплат на сотрудников до 15%.

В 2025 году сохранилось освобождение от налога на добавленную стоимость (НДС) при продаже ПО из реестра Минцифры.

Даже преобразование компании из ООО в АО влечёт смену ОГРН и ИНН, и с точки зрения закона она уже становится другой организацией.

Помимо этого не все компании отслеживают исключение своих продуктов из реестра российского ПО, и в результате теряют освобождение от НДС.

Впрочем, эти компании не из сферы ИТ, а претензии ФНС были связаны якобы с тем, что сделки с контрагентами были фиктивными.

Всё это неизбежно повлияет как на сегмент ЦОД, так и на эволюцию мобильных устройств.

В 2010-х годах они начали проникать и в сегмент систем бесперебойного питания, а также в целый ряд других, в частности средств индивидуальной мобильности и электромобилей.

Все эти особенности и обусловили широкую популярность литиевых батарей в портативных устройствах и распространение данной технологии в другие сферы, в том числе на транспорт и в системы бесперебойного питания.

Открываются месторождения и в других странах, но производство лития экологически очень грязное, и его организация сопровождается протестами.

В итоге многие авиакомпании даже запретили провозить его как в багаже, так и в ручной клад…

Другими словами, RedCheck производит мгновенный срез состояния безопасности, находит некорректные настройки и отклонения и проводит аудит системы на предмет соблюдения политик и стандартов ИБ.

Управление сегментами системы в RedCheck 2.13Настройки RedCheck 2.13Рассмотрим, какие возможности предоставляет продукт при создании задач на сканирование и как они настраиваются.

Настройка синхронизации в RedCheck 2.13Доставка отчётовДоставка отчётов в RedCheck настраивается в сетевую SMB-папку или по электронной почте.

Анализ уязвимостей в RedCheck 2.13Модуль «Контроль устранения уязвимостей» анализирует динамику устранения уязвимости целевой системы за выбранный период — например, за 30 дней (интер…

Каково место NDR в сетевой безопасности сегодняшнего дня?

При использовании SPAN устройство копирует трафик c интерфейсов, настроенных на съём трафика, и отправляет его на интерфейс, настроенный на подачу трафика.

В рамках этой технологии захваченный трафик инкапсулируется в GRE-туннель, который обычно настраивается между устройством с источником захватываемого трафика и компонентом захвата.

Они становятся незаменимыми, если в вашей инфраструктуре присутствует большое количество точек подачи трафика в рамках одной площадки.

Поэтому большое значение имеет не только и не столько внедрение само по себе.

При этом независимо от размера компании и отрасли список задач один и тот же, различается только масштаб:развитие и модернизация инфраструктуры;миграции;информационная безопасность и DevSecOps;DevOps и автоматизация;импортозамещение;оптимизация затрат и ИТ-архитектуры.

В результате инфраструктурные задачи превращаются в долгосрочную инженерную нагрузку, а не в проект с понятным началом и концом.

Безопасность всё чаще воспринимается как часть повседневной инженерной работы, а не как проект с конечным результатом.

Даже там, где команда сильная и с кадрами всё в порядке, разрыв не исчезает.

Он может быть полезен как один из этапов проекта, но не как самостоятельный продукт.

Однако форменный ажиотаж как в бизнес-кругах, так и среди обычных людей вызвало появление генеративного искусственного интеллекта (ИИ) в самом конце 2022 года.

Как отмечали на ряде конференций, часто на экономику проектов просто не смотрели, и в итоге получалось внедрение ради внедрения.

Высказываются опасения, что разочарование в технологиях ИИ, а то и страх перед их неконтролируемым развитием может привести к новой такой «зиме».

Основные из них связаны с тем, что ИИ-сервисы ориентированы на бизнес-заказчиков (B2B), а не на конечных пользователей (B2C).

Скорее всего, нас ожидает «мягкая просадка» курса акций в пределах 40%, она будет идти постепенно, а не резко, как это было в 2000 году.

Теперь криптовалюту добывают не только на мощностях промышленных майнинговых ферм, но и на устройствах простых граждан.

Как и любые другие вредоносные программы, майнеры маскируются под легитимные файлы и системные процессы, но действуют более скрытно.

Локальные майнеры проникают на устройство, интегрируются в операционную систему и используют ресурсы компьютера для майнинга, незаметно для пользователя добывая криптовалюту.

Чем дольше майнер работает на вашем компьютере, тем сильнее изнашивается оборудование и тем больше денег уходит на электроэнергию.

Убедитесь, что загрузка процессора и видеокарты пришла в норму и в ней не наблюдается аномальных всплесков.

Файрвол не устаёт, не хочет помочь и не боится начальства.

Она про механику: что именно происходит с человеком в момент атаки, почему инструктаж почти не помогает и что работает вместо него.

Не «не может» — просто перестаёт.

Не «догадайся, что это мошенник», а «перезвони по номеру из внутреннего справочника — не по тому, что назвали в разговоре или указали в письме».

Записано ли где-нибудь право на паузу — не в презентации, а в регламенте, на который сотрудник может сослаться.

Трехфазная защита ваших ИИ-агентов от современных угроз с детальным разбором на базе модели безопасности OGL-MiniПеред началом разбораРазработка приложений на основе больших языковых моделей (LLM) стремительно набирает обороты.

Я и сам на протяжении нескольких лет создают продукты, так или иначе связанные с LLM-системами, используя как локальные модели, так и модели с доступом по Open AI API.

Также, я добавил объяснение того, как гибридная архитектура модели OGL-Mini противостоит каждой из них.

Как OGL-Mini защищает: На стадии эвристик детектируются характерные паттерны изменения инструкций («ignore previous», «override», «bypass»).

Важно: PII-детектор работает не только на английском, но и…

3 Закона «О персональных данных», а также упоминаются в качестве персональных данных в судебных решениях и в разъяснениях Роскомнадзора.

для граждан (самозанятых) от 10 000 до 15 000 рублей;для ИП - от 50 000 до 100 000 рублей;для юридических лиц - от 150 000 до 300 000 рублей.

для граждан (самозанятых) от 10 000 до 15 000 рублей;для ИП - от 50 000 до 100 000 рублей;для юридических лиц - от 150 000 до 300 000 рублей.

для граждан (самозанятых) от 10 000 до 15 000 рублей;для ИП - от 50 000 до 100 000 рублей;для юридических лиц - от 150 000 до 300 000 рублей.

для граждан (самозанятых) от 10 000 до 15 000 рублей;для ИП - от 50 000 до 100 000 рублей;для юридических лиц - от 150 000 до 300 000 ру…

24 августа 2026 года Apple объявила, что новые адреса Private Relay для Sign in with Apple будут выпускаться на домене private.icloud.com .

Что в Sign in with Apple является идентичностью, а что каналом связиНиже не инструкция по подключению кнопки Sign in with Apple.

Email - это контакт, а не ключ аккаунтаУ обычной почтовой регистрации соблазн понятен: человек вводит email и пароль, поэтому email кажется естественным ключом.

Хуже того, этот подход смешивает Apple identity с уже существующей email-учетной записью.

Автоматически объединять аккаунты при «похожем» emailТак можно случайно связать независимую почтовую регистрацию и Apple identity.

Дальше начинается разговор в жанре «это не мы», и закончить его нечем: копии побайтово одинаковые, доказать причастность нельзя ни к кому.

Значит, использовать надо ту свободу, которая в формате уже есть и на смысл не влияет.

бит:10 строк -> 21.8 бит 20 строк -> 61.1 бит 50 строк -> 214.2 бит 1000 строк -> 8529.4 битДвадцать строк дают 20!

Тогда запас в шестьдесят бит превращается в устойчивость к частичной порче, а не просто в лишние знаки.

Что переживает обработку, а что нетМетка бесполезна, если умирает при первом сохранении.

Тот самый флаг порта HTTP-управления относился к WAN-стороне, а не к LAN-панели.

Кто-то вынес read-хендлер за auth-gate, вероятно ради того, чтобы страница логина могла без сессии подтягивать базовые данные типа модели и версии, и не ограничил список полей.

Авторизация устроена как POST с паролем в base64, а в ответ выдаётся cookie на 15 минут.

Он прочитал фронтенд и нашёл то, что находил бы любой исследователь руками, просто быстрее и без сна.

И результатом становится не хаотичный дамп «я пробил всё», а отредактированная заявка в CVE и чек-лист компенсирующих мер.

Похоже, у AI-агентов есть проблема, которую обычно связывают с людьми: они не всегда умеют работать в команде.

Anthropic провела эксперимент, в котором несколько AI-агентов получили одну и ту же задачу по разработке ПО, но при этом их цели были намеренно сделаны несовместимыми.

Anthropic пишет, что в некоторых случаях агенты использовали самораспространяющийся вредоносный код.

Например, Sonnet 4.6 и Opus 4.6 примерно в 60% конфликтных запусков предпочитали силовое решение вместо того, чтобы договориться или просто продолжить работу параллельно.

Можно было бы предположить, что по мере роста возможностей моделей они автоматически станут лучше координироваться.

Он выглядит как назойливость, потому что в 99% случаев ключ сменился по скучной причине: сервер переустановили.

Но проверка существует ради оставшегося процента — она отвечает на вопрос «я разговариваю с той же машиной, что и в прошлый раз, или с другой, которая притворяется ею».

Отдельно неприятно, что в логах это выглядит как успех.

Ключ нового сервера добавляется в known_hosts один раз, руками, когда вы точно знаете, что это ваша машина.

Ключ вместо пароля:key_path = os.environ.get("VPS_KEY", str(Path.home() / ".ssh" / "id_ed25519")) if Path(key_path).exists(): ssh.connect(host, username=user, key_filename=key_path) else: ssh.connect(host, username=user, password=os.environ["VPS_PASS"])П…

Отсутствующее значение считаем крайне редким, а не невозможным: иначе получим деление на ноль там, где на деле просто мало данных. """

if (ipCountry && !timezoneFitsCountry(sig.timezone, ipCountry)) { problems.push('timezone_geo_mismatch'); } return problems; }Каждая проверка тривиальна, и в этом суть.

Отпечаток удобен тем, что снимается дёшево и мгновенно, а не тем, что он самый информативный.

Что из этого следуетФормулировка задачи «сделать отпечаток уникальным» неверна на уровне постановки.

Проверять себя стоит не по единственному числу «уникальность отпечатка», которое показывают публичные чекеры, а по списку противоречий.

Далее проверил версию ядра и у нас здесь Дебиан 6.12, а значит dirtyfrag должен отработать.

Пока её пароль не изменён, нельзя гарантировать, что злоумышленник не сможет снова получить доступ к системе.

alt textИзучив исходники, понял, что я на правильном пути.

Более того флаги уже существуют и user и root.

Рутовый флаг тоже появился в папке root, потому что я уже сменил пароль до этого из подсказки в письме.

Для примера будем использовать наш продукт для просмотра топологии и верификации(EDA) и расскажем, как мы построили его лицензирование.

Лицензировать нужно не бинарь, а праваУ продукта может быть несколько независимых возможностей:просмотр;редактирование;экспорт;DRC;LVS;PEX;AIПрочие фичиНет смысла зашивать всё это в один вечный ключ.

Такой подход позволяет нормально строить тарифы и не превращать каждый новый сценарий использования в отдельную сборку.

Где на самом деле теряются деньгиКрякнутый бинарь заметен сильнее всего, но это далеко не всегда самая большая финансовая проблема.

Например, BSA оценивала долю нелицензионного ПО в мире в 37%, а для Азии и Центральной и Восточной Европы показ…

Характеристика, которую пишут в описании правила детектирования и произносят на защите архитектуры: обнаруживает 99% атак при доле ошибок в 1%.

При таких характеристиках почти каждое сработавшее правило окажется ложным — не потому, что правило плохое, а потому что атака редкая.

Что двигает цифру, а что нетПервое, что предлагают на разборе, — поднять чувствительность.

Почему это заканчивается выключенным правиломДальше начинается то, что видно уже не в формулах, а в тикетах.

Формально покрытие сохраняется — правило в системе есть, в матрице покрытия галочка стоит.

Обычно их мгновенно банит антиспам или админ, и на этом всё заканчивается.

Правда, пока сообщение ещё висит, взгляд успевает за него зацепиться, и в голове проскакивает "это очевидно скам, но как оно работает?".

Можно заметить, что у файла расширение .bin, чтобы вызвать меньше подозрения у компании-владельца бакета.

У американских и европейских компаний, чьи хранилища и сервера были задействованы, в среднем занимало несколько часов на расследование, обнуление роутингов и удаление аккаунтов.

За это время я разобрал уже 4 разных apk, у которых одна и та же подпись, и которые смотрят на одни и те же домены.

Хранилище резолвится на этапе компиляции, а неизвестное имя падает на старте с указанием отсутствующей регистрации, а не на первом сообщении.

signatureValid вычислялся и не использовался: неподписанное сообщение (или такое, чья подпись не прошла) доезжало до маршрута и получало положительный MDN.

У SQLite оно безусловно ASCII-only: и LIKE , и lower() , и upper() , и даже COLLATE NOCASE .

Теперь оба фасада ссылаются на пакет, а не друг на друга, и пакет не ссылается на redb.Identity.Core .

Покрыто фикстурой, которая поднимает redb.Identity.Core без процессора и проверяет и статус, и главное: что в базу не записалось ни строки.

Почему я не стал платить за токены сам, как это устроено — и четыре грабли, включая асинхронный генератор, молча съедавший ответы.

Никто не сидел и не подбирал ключи к моему сайту.

Если перед вами цепочка вроде CDN → nginx, правым окажется адрес первого прокси — не настоящий клиент, но и не подделываемый.

Едет она в query-строке, а значит оседает в логах nginx и в заголовке Referer.

Ключи Google теперь начинаются на AQ.Ab , а не на AIza .

Сейчас в нашем магазине доступны сразу три бумажных спецвыпуска «Хакера», включая свежий номер, который совсем недавно вышел из типографии.

Все журналы уже отпечатаны и готовы отправиться к новым владельцам, так что посылку не придется ждать долго.

Печатные спецвыпуски «Хакера» — это полноценные глянцевые журналы, содержащие 240 полос практических материалов, технических разборов, гайдов и исследований, к которым можно возвращаться даже годы спустя.

Спецвыпуск #4 (2021–2022)Новый коллекционный сборник совсем недавно покинул типографию и объединяет в себе более 20 лучших материалов «Хакера» за 2021–2022 годы.

Так как дополнительных тиражей мы не планируем, лучше забрать свой экземпляр, пока …

Незадолго до этого участники вымогательской группировки Qilin заявили о взломе ATF и добавили ведомство на свой сайт для публикации утечек.

В ATF сообщают, что атакующие получили доступ только к отдельной системе, которая работает изолированно от основной корпоративной сети ведомства.

Подчеркивается, что пока не обнаружено признаков того, что атака могла затронуть инфраструктуру ATF, сервис ATF eForms или другие системы бюро.

Издание BleepingComputer пишет, что практически одновременно с публикацией заявления ATF группировка Qilin разместила данные о взломе бюро на своем сайте в даркнете.

Также группировка пока не опубликовала образцы похищенных файлов, которые могли бы подтвердить факт ата…

Специалисты компании F6 сообщили о блокировке сервиса nulltrace, который позволял анонимно регистрировать домены в российских зонах .ru и .su без проверки личности.

Расследование активности nulltrace началось с фишингового ресурса, обнаруженного в зоне .su и нацеленного на клиентов неназванного иностранного банка.

То есть nulltrace продолжил работу, однако регистрацию доменов в .ru и .su из списка услуг убрали.

В компании отмечают, что российская доменная зона остается популярной среди злоумышленников, атакующих пользователей в России.

В компании подчеркивают, что борьба с подобной инфраструктурой должна повышать стоимость атак для преступников.

По­это­му я выб­рал прос­той сце­нарий: соз­дать тес­товый файл .exe, запус­тить его в Windows 11, уда­лить в кор­зину, очис­тить ее, перезаг­рузить сис­тему, а затем поис­кать сле­ды.

exe и PowerShell.

Об­рати вни­мание: нам нужен не столь­ко сам уда­лен­ный файл, сколь­ко хро­ноло­гия дей­ствий, которую мы вос­ста­новим по оставшим­ся в Windows сле­дам.

Схема лаборатории и экспериментаДля опы­та я выделил отдель­ную машину с Windows 11 и сде­лал снап­шот чис­той сис­темы, что­бы во вре­мя экспе­римен­та фай­лы не сме­шива­лись.

PrefetchДля начала про­верим каталог Prefetch в Windows: в нем могут хра­нить­ся дан­ные о при­ложе­ниях, которые запус­кали рань­ше.

Исследователи предупреждают о появлении обновленной версии Android-трояна ToxicPanda, которая поддерживает 167 удаленных команд, способна блокировать доступ к магазину Google Play, а также автоматически злоупотреблять Wireless ADB для получения шелл-доступа.

ToxicPanda запрашивает у пользователя разрешение на создание такого VPN-подключения и использует его, чтобы блокировать связь с Google Play и Google Play Services, что мешает проверке приложений, получению обновлений и работе защиты Play Protect.

Также исследователи пишут, что ToxicPanda может подменять экран блокировки Android, перехватывая PIN-коды, графические ключи и пароли.

В некоторых образцах вредоноса исследователи и вовсе обнар…

Австралийская федеральная полиция (AFP) сообщила о задержании двух предполагаемых участников хак-группы TeamPCP, которую связывают с масштабными атаками на цепочки поставок.

Им предъявили в общей сложности 14 обвинений: в несанкционированном доступе к компьютерным системам, незаконном получении, хранении и распространении похищенных данных, а также в других компьютерных преступлениях.

Кроме того, в полиции утверждают, что Томсон и Гейблер получали выплаты в криптовалюте за участие в операциях TeamPCP, однако их точный размер пока устанавливается.

Более того, в 2025 году Томсон зарегистрировался на платформе HackerOne под настоящим именем и выбрал ник Deadcatx3, который ИБ-компании уже связы…

Специалисты OpenAI и исследовательской организации METR опубликовали подробные отчеты, посвященные июльской атаке ИИ-агентов на платформу Hugging Face.

Примерно 700 агентов в итоге приняли участие во взломе Hugging Face.

Как мы рассказывали ранее, атака на Hugging Face произошла во время внутренних ИБ-тестов, которые проводили инженеры OpenAI.

Оказалось, что еще до атаки на Hugging Face агенты научились общаться друг с другом через внутренний Artifactory.

К примеру, один агент вообще отказался участвовать во взломе, а другой не стал перезагружать или удалять воркеры Hugging Face из-за возможных последствий.

Эксперты SOCRadar описали необычную вредоносную кампанию, в рамках которой FTP-баннеры используются в качестве dead drop resolver (DDR) для передачи команд.

По данным специалистов, злоумышленники начали применять эту технику в реальных атаках летом 2026 года, а сейчас таким способом распространяют два ранее неизвестных RAT — E4del и PINHOLE.

FTP-баннер представляет собой приветственное сообщение, которое сервер отправляет клиенту сразу после подключения (еще до авторизации), и атакующие встраивают в такие сообщения команды, которые затем получает малварь.

Конфигурацию управляющих серверов он может получать через пины на Pinterest и вопросы в SurveyMonkey, и соединения проксируются через Clo…

Если ты только начинаешь осваивать пентест веб-приложений, одна из первых задач — понять, с чего начать и в каком порядке изучать разные техники.

«Хакер» и лаборатория «Хаксет» подготовили курс « Пентест WEB », где тебя ждут 11 статей, видеоуроки и практические лаборатории, собранные в последовательную программу для самостоятельной работы.

Затем перейдешь к получению первоначального доступа и познакомишься с reverse shell, bind shell и web shell.

«Пентест WEB» — это не классический курс с преподавателем, расписанием и дедлайнами, а программа для самостоятельной работы.

Покупка «Пентест WEB» дополнительно открывает видеоуроки и практические задания.

Из-за этого пользователи столкнулись с проблемами при авторизации через государственную систему электронных удостоверений личности, подписании документов и работе с другими сервисами.

Атаки начались в понедельник, 24 августа 2026 года, и затронули инфраструктуру Норвежского управления цифровизации (Digitaliseringsdirektoratet, Digdir), а также компании Vivicta, которая обеспечивает ее работу.

Аналогичное уведомление появилось и на сайте налоговой службы Норвегии Skatteetaten: пользователям, которые не могут авторизоваться, рекомендуют повторить попытку позднее.

Актуальное состояние систем Digdir можно посмотреть на отдельной странице статуса.

Как отмечает издание BleepingComputer, эта волна…

В Bitcoin и дру­гих сетях с UTXO-моделью нет отдель­ного объ­екта, который мож­но было бы наз­вать «монета­ми в кошель­ке», вмес­то это­го там исполь­зует­ся понятие «неиз­расхо­дован­ного выхода тран­закций», которое мы уже раз­бирали в статье «Крип­та с нуля.

При вос­ста­нов­лении кошель­ка про­исхо­дит обратная опе­рация: прог­рамма прев­раща­ет вве­ден­ные поль­зовате­лем сло­ва в исходные дан­ные и с помощью опи­сан­ного в стан­дарте BIP-39 алго­рит­ма получа­ет из них 512-бит­ный seed.

Если потерять единс­твен­ную копию сек­ретов некас­тоди­аль­ного кошель­ка, обра­щать­ся за вос­ста­нов­лени­ем будет не к кому: сеть не зна­ет вла­дель­ца и не рас­полага­ет его резер­вной копи­ей.

Раз…

Для этого сервис использует фишинговые страницы и голосовых ИИ-агентов, которые звонят владельцам гаджетов, представляясь сотрудниками поддержки Apple, и выманивают код для разблокировки устройства, учетные данные Apple ID и коды двухфакторной аутентификации.

Кроме того, были обнаружены 168 отдельных реселлеров, через которые предлагался доступ к сервису и услуги по разблокировке украденных iPhone.

После этого злоумышленники присылают жертве сообщение якобы от сотрудников Apple, в котором утверждается, что пропавший смартфон нашли.

Для звонков использовались 55 различных сценариев и ИИ-агентов, которые представлялись жертвам как «Элис из поддержки Apple» (Alice from Apple Support) на англий…

Криптовалютный токен, связанный с пользователем соцсети X под ником CyberLeek, который в последние недели публикует утечки геймплея GTA VI, за сутки рухнул почти на 40%.

Падение произошло, несмотря на то что в тот же день CyberLeek выложил первый настоящий спойлер игры — кадры с одним из ключевых героев.

В посте на своем сайте CyberLeek утверждает, что использованная в утечке сборка GTA VI «действительно свежая», но при этом «игра совсем не готова».

Однако на момент написания статьи капитализация упала уже на 70% относительно максимума и почти на 40% за последние сутки — до $7,5 млн.

В студии Rockstar Games, разработавшей GTA VI, наконец отреагировали на утечки официальным заявлением.

Каждый агент работал в собственной песочнице, однако между сессиями сохранялись файлы MEMORY.md и SOUL.md, содержимое которых автоматически попадало в системный промпт.

При этом для генерации и доработки почти всех пейлоадов использовалась модель Kimi K2.5, поскольку модели Claude отказывались создавать подобные инструкции.

Кроме того, агенты, которым заранее сообщали, что они работают в общей сети с другими ИИ-агентами, осторожнее воспринимали поступающие от них сообщения и инструкции, поэтому пейлоад распространялся реже.

На каждом этапе удалялись все файлы, кроме SOUL.md (где можно было создать копию вредоносной инструкции), и в итоге все четыре прикладных пейлоада «дожили» до конца цепо…

Более того, Райхель сообщает, что для управления малварью используется собственный язык команд, поддерживающий 23 инструкции.

При этом исследователь подчеркивает, что речь не идет о какой-то уязвимости в продукте ESET, и отмечает, что исправлять здесь нечего.

Главная особенность Sleepwalker заключается в том, что после заражения он не связывается с управляющим сервером и не открывает порт для приема входящих соединений.

Последний механизм также позволяет обмениваться данными напрямую между VMware-хостом и виртуальной машиной через слой виртуализации, минуя обычный сетевой интерфейс, и в результате такой трафик может не попасть в сетевой дамп.

Также исследователь подготовил инструменты для р…

Microsoft has disclosed details of a new ClickFix variant, dubbed TerminalFix, that aims to trick users into running a malicious command in Windows Terminal or PowerShell.

Specifically, the PowerShell command is designed to download a ZIP archive containing a legitimate binary ("LockScreenContentServer.exe") and a rogue DLL ("dui70.dll") in order to initiate a DLL sideloading attack.

The sideloaded DLL is responsible for retrieving next-stage payloads hidden within PNG images from external domains ("bestsocialmedianewspapper[.

]com"), establishes persistence via both Registry Run keys and scheduled tasks, carries out domain reconnaissance, and then deploys a Python-based reverse-tunnel comm…

Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution.

(Affects all versions up to, and including, 5.0.1)(CVSS score: 9.8) - An authentication bypass flaw in the WPMU DEV Dashboard plugin that could allow an unauthenticated attacker, on sites connected to WPMU DEV with Hub Single-Sign On (SSO) enabled and mapped to an administrator, to obtain administrator access and achieve site takeover.

(Affects all versions up to, and including, 3.3.9)(CVSS score: 9.8) - A privilege escalation flaw in the "Pods – C…

The Senate Chancellery said Berlin's state data protection commissioner and the Federal Office for Information Security (BSI) are being kept informed on a continuing basis.

Berlin first disclosed the incident on August 17, saying forensic work had established a compromise of the state network and that both affected departments had been isolated since the previous Friday.

All Senate departments were reconnected on August 23, and forensic work and scanning of the state network continue.

Manchester Airports Group Confirms Customer Data TheftManchester Airports Group (MAG), which operates Manchester, London Stansted and East Midlands airports, said on August 27 that an unauthorized third party …

Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026.

The team confirmed by August 13 that all Cosmos EVM chains were affected regardless of decimal configuration.

Register a security contact with Cosmos Labs, which learned of eleven Cosmos EVM deployments during the incident that had never registered with its security channels.

"Cosmos Labs has released patches for 37 vulnerabilities silently in the last 13 months without downstream developers precisely describing exploit paths in public," Cosmos Labs said in the post-mortem.

A further USD 2.85 million was sold on…

Specifically, an attacker can leverage an unauthenticated request to make changes to the server configuration and ultimately achieve code execution.

Huntress has explained the flaw as follows -In unpatched versions of PaperCut NG and PaperCut MF, a specifically crafted request can refer to one page that is rendered for the response, and another page that owns the component or action being executed.

This enables access to sensitive endpoints that can trigger unsafe actions, and ultimately lets an ill-intended actor execute any arbitrary attacked-controlled code.

PaperCut has since publicly disclosed two flaws -CVE-2026-82078 (CVSS score: 9.4) - An unsafe dynamic class loading vulnerability e…

Google on Thursday announced new network security protections in Android 17 to bolster connection privacy, address cellular vulnerabilities, and safeguard the privacy of users' home networks.

"By encrypting the destination website name from the very start, ECH helps ensure that, for supported websites and apps, network providers and network snoopers can no longer easily see which websites or apps you are accessing."

"Critically, though, not all web servers will offer ECH support," Jigsaw said.

"To avoid exposing only certain connections as ECH-protected, apps and browsers should use ECH GREASE — which sends fake, randomized ECH extensions to sites that don't support ECH — so that every conn…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ownCloud to its Known Exploited Vulnerabilities (KEV) catalog following reports that a Chinese-speaking threat actor weaponized the vulnerability to target a nuclear research body in the Philippines.

"The scripts targeted an ownCloud instance operated by a nuclear research body, using pre-signed URLs generated with an empty signing secret, which allowed for the unauthenticated retrieval of files over WebDAV," Hunt.io said.

A separate intrusion is said to have exploited a WordPress site managed by the marine engineering and shipbuilding company.

In all, the threat actor is es…

The modus operandi is relatively straightforward: the threat actor either acquires legitimate extensions with proper functionality or pushes a clean version that's devoid of any malware.

Of the identified extensions, 14 were created by the threat actor, while the remaining five were purchased from their previous owners.

As observed in the case of QuickLens, the malicious code embedded in the extensions strips Content Security Policy (CSP) headers from every page and facilitates the injection of JavaScript code modules on targeted websites using content scripts.

But the fact that they have been successfully operating for more than two years points to a "very capable threat actor."

"The bigge…

Security researcher Olivier Laflamme has disclosed two independent root remote code execution (RCE) chains affecting the Unitree G1 EDU, including a Bluetooth Low Energy (BLE) path that can reach root on the robot's Locomotion PC.

An exact fixed firmware release has not been verified in any accessible Unitree guidance, leaving G1 EDU owners without a confirmed release target for either vulnerability.

In his technical disclosure, Laflamme said CVE-2026-76639 uses a path-traversal condition in chat_go to reach bashrunner.

During Laflamme's research, Unitree's cloud service accepted a valid Unitree account for the key-recovery request but did not verify that the account owned the supplied robo…

Why Identity Fabric Matters in 2026: Key Reasons for Modern OrganizationsModern environments no longer resemble the tidy directories that early identity tools were built for.

Identity Fabric Benefits: From Zero Trust to Operational ResilienceThe practical payoff of an Identity Fabric is that it makes zero trust more achievable and can speed incident response.

Implementing Identity Fabric: Practical Steps for Security TeamsBuilding an Identity Fabric is a maturity journey rather than a single deployment.

Define Identity Fabric Metrics for Visibility, Risk Reduction, and ResilienceMetrics turn an Identity Fabric from a project into an ongoing program.

Identity security ultimately requires wat…

ServiceNow has released patches for four security flaws impacting the ServiceNow AI Platform, three of them rated 10.0 on the CVSS scoring system and exploitable, in certain circumstances, by an unauthenticated attacker.

"Based on our investigation to date, we have not observed evidence that this activity is related to instances that ServiceNow hosts."

ServiceNow describes CVE-2026-6876 as an issue that could allow an unauthenticated user to execute arbitrary code within the Now Platform, while the CVSS vector it assigned to the same flaw specifies PR:L , or low privileges required.

The Hacker News found no public exploit code for the three maximum-severity flaws as of August 28, 2026.

Sear…

The implants, named SPEAKINGSTONE and DARKLANTERN by the company's zero-day research team, are tracked as CVE-2026-74232 and CVE-2026-74233.

"This is a surveillance implant with root access to every device it runs on," VulnCheck said in its supply chain research.

That unit predates ENDLESSDOORS (CVE-2026-66747), the phone-home implant VulnCheck disclosed on August 5 and found in at least 20 Zbtlink router models.

]com , the SPEAKINGSTONE primary C2, and www.findmyipaddr[.

]com , the backup domain VulnCheck registered- , the SPEAKINGSTONE primary C2, and , the backup domain VulnCheck registered IP address - 47.107.224[.

cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user.

"Successful exploitation leads to code execution as the root user, giving an attacker full control of the server," cPanel said in a notification to customers.

cPanel patched three separate flaws in July, and the fixed builds named in those advisories included the 11.118 and 11.126 branches.

cPanel said in its July advisory about the Exim flaw that it may allow privilege escalation from Team User sub-accounts.

The August 27 notification does not specify whether a Team User sub-account with permission to…

PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks.

It said it's "aware of confirmed customer incidents and is treating this matter with the highest priority."

Users who have PaperCut NG/MF Application Server exposed to the internet are advised to immediately restrict access to trusted IP addresses.

"Use firewall rules, network access controls, or equivalent measures to ensure the PaperCut server’s web interfaces cannot be reached from untrusted internet addresses," PaperCut said.

In 2023, a critical flaw in PaperCut MF and NG (CVE-2023-27350, CVSS scor…

These campaigns, per Recorded Future Insikt Group, have led to the deployment of a previously undocumented backdoor dubbed HOOKEDGE, a lightweight Windows batch script that's distributed via macro-enabled Microsoft Word documents bearing diplomatic-themed lures.

]site," Recorded Future said in a Thursday analysis, describing it as a "direct evolutionary successor to HEADLACE."

Once the data is transmitted, all temporary files are deleted, and any process whose window title matches the HOOKEDGE task identifier is terminated.

"The two-stage architecture also helps to mitigate one of BlueDelta's infrastructure constraints," Recorded Future explained.

"BlueDelta continues to invest in lightweig…

So it is with QR codes, which have become a common sight on menus, lampposts and parking meters – and, increasingly, in emails over recent years.

Most importantly, they take the victim from a relatively well-protected corporate environment to a potentially unmanaged mobile device, thus bypassing business-grade security.

Malicious QR codes are frequently embedded in alerts urging users to secure their account, or authenticate to confirm their details.

Encourage employees to avoid scanning QR codes in unsolicited emails and report anything suspicious.

Next, consider technical controls, including email security from a reputable vendor to minimize the risk of quishing emails ending up in users’…

The accelerated discovery of previously unknown software vulnerabilities has been making headlines for months.

It’s an issue that has even led the US government to create a vulnerability clearing house named Gold Eagle to coordinate research efforts in vulnerability discovery, mitigation and fixes.

A keynote at Black Hat USA 2026 detailed research by associate professor Yan Shoshitaishvili and his undergraduate students at Arizona State University on the expanding use of AI models for vulnerability discovery.

The team then trained the GPTs using the properties of previously known vulnerabilities and discovered approximately 1,000 vulnerabilities.

If this logic prevails, we may reach the cal…

Hugging Face disclosed that it had been attacked by AI; OpenAI came clean and declared that it was two of their AI models that had caused the breach.

A very late addition to the Black Hat agenda was a presentation by OpenAI’s team providing the details of the Hugging Face incident as they saw it and, importantly, the timeline.

The agents concluded that their task set could be completed by breaking out their sandbox and accessing external (Hugging Face) systems.

The target was Hugging Face: this is where the agents wanted to get, and they did.

On July 16th, Hugging Face disclosed an incident in which swarms of autonomous AI agents had breached its infrastructure.

The conference opened with keynotes followed by a fireside chat and a panel featuring mainly senior US government officials.

The second part of the opening keynote included Nick Andersen, Acting Director, CISA; Katherine Sutton, Assistant Secretary of War for Cyber Policy; and Brett Leatherman Assistant Director, Cyber Division, FBI.

I do agree with the ruthless approach, but without some form of regulation the boundaries on the use of AI remain blurred.

The Assistant Secretary of War for Cyber Policy made a fabulous analogy when pressed on the struggles regarding resourcing in the cybersecurity industry: you don’t want a pediatrician performing heart surgery.

We talk about autonomous AI at…

The AI tutor market is growing fastThe market for AI tutoring tools is booming.

Today, you can find various types of AI tutor tools to buy and use.

This happens when AI tools are tricked into ignoring their safety guardrails and display untrusted content.

If you’re keen to get your kids in front of an AI tool to help with private tutoring, first understand the difference between a simple co-pilot and a dedicated ITS.

So if you’re keen to try AI tutors, be sure to stay updated on what’s available out there.

Researchers at Sysdig have documented what they assess to be the first case of an end-to-end ransomware operation executed by an agentic threat actor.

What can organizations do to stop phantom squatting from harming their brands, and what other lessons do these incidents hold for defenders?

Watch Tony's video to find out and be sure to check out the June 2026 edition of his monthly security news roundup for more insights.

Before you go, learn about the first AI-powered ransomware, named PromptLock and discovered by ESET researchers last year.

To learn more about cutting-edge AI defense layers, read the AI at ESET white paper.

The screenshot may look convincing, but it doesn’t necessarily prove that the payment, booking or conversation is genuineSomeone sends you a screenshot showing that a payment has gone through.

Why screenshot aren’t proof on their ownA screenshot is ultimately just an image of what appeared on a screen.

Reassured, you send the item off, only to find out the screenshot was a fake and you’re not getting your money.

You receive a password reset code, then get a text message (maybe impersonating a friend) asking you to screenshot and send it.

This screenshot is fake (source: Reddit)Challenges for businessesFrom a business perspective, internal and customer-facing teams are often provided with sc…

UEFI shim bootloader and UEFI Secure BootTo understand the impact that such vulnerable shims can have on UEFI Secure Boot-protected systems, we need to understand how UEFI Secure Boot works, and how signed UEFI shim bootloaders extend the Secure Boot trust chain.

In this section we’ll look at UEFI Secure Boot basics, how UEFI shims extend the UEFI Secure Boot trust chain, and two shim-related features: Machine Owner Key (MOK) and Secure Boot Advanced Targeting (SBAT).

For anyone already familiar with the theory, we recommend jumping directly to the section Bypassing UEFI Secure Boot using old shims.

UEFI shim bootloader and Secure BootWith Linux distributions supporting UEFI Secure Boot, th…

A view of the H1 2026 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts.

The first half of 2026 shows how attackers continue to improve the efficiency and scalability of their operations.

In H1 2026, ESET analyzed nearly 900,000 AI skills – small functional components used by AI agents – and identified tens of thousands of suspicious and thousands of outright malicious instances.

ESET detections of this vector more than doubled between H2 2025 and H1 2026, indicating sustained activity and adaptation.

ESET Research has documented over 100 EDR killers used in the wild, with new variants appearing regularly.

Organizations are right to pay attention, especially because malicious use of AI makes old gaps a more urgent test of an organization’s cyber readiness.

AI and the basics“AI-powered malware” is cited as the top concern of global SMBs for the year ahead, according to the ESET SMB Cyber Readiness Index 2026.

Lack of security monitoring (22%): You might have plenty of security tools, but do you have a single, centralized place to collect, correlate and flag alerts?

Malicious email detection trend in 2025 (source: ESET Threat Report H2 2025)Tried-and-tested solutions to age-old threatsThis isn’t to say that SMBs should ignore AI-enabled threats.

True cyber readiness means being able to prevent,…

It's that time of month when ESET Chief Security Evangelist Tony Anscombe looks back at some of the top cybersecurity stories that made the news over the past 30 or so days and considers what they may mean for your own cyber-defenses.

What lessons does the new CISA policy hold for organizations outside the agency's direct remit?

What else is there to know about threats facing ATGs or, indeed, many other critical infrastructure systems?

How can you stay safe from imposter fraud, and could the social media bans for children work?

Learn more from Tony's video and be sure to check out the May 2026 edition of Tony's monthly security news roundup for more insights.

With access to your email account, they can reset your passwords across multiple other accounts – perhaps intercepting one-time passcodes sent by your bank, social media, cloud storage or other online provider.

That could lay the groundwork for a convincing phishing email designed to impersonate a trusted organization you interact with.

A phishing attack on your corporate email account is often the first stage in a bigger data breach, extortion/ransomware or espionage attack.

They’re also using more sophisticated tools to improve the success rates of email phishing campaigns.

In this instance the scammers reportedly hijacked the email account of a high-level executive, before impersonating …

For these businesses, cyber resilience should be the direction of travel – that is, the ability to continue operating and recover even during a serious incident.

Cyber readiness is about putting in place the processes and controls to prevent, detect and respond to threats.

So, should confidence in cyber resilience posture be so high, especially if organizations are still getting hit multiple times?

The truth is that there’s no end state for cyber readiness or resilience.

If it’s serious about improving the cyber readiness of small businesses, the vendor community should step up.

Key points of this blogpost: Throughout 2025, Gamaredon exclusively targeted governmental and military institutions in Ukraine.

Continued data exfiltration and a new allianceThroughout 2025, Gamaredon stayed highly active and remained focused solely on Ukraine.

Notably, we uncovered that in early 2025, Gamaredon collaborated with Turla, another Russia-aligned threat actor also linked to the FSB; we documented our findings in our blogpost Gamaredon X Turla collab.

Figure 1 shows a chart of unique samples of HTA downloaders delivered per month in Gamaredon spearphishing campaigns.

Compared to 2024, we also saw a shift in how Gamaredon used these dead drops.

AI supply chain risk is showing up in developer workflows firstIn this Help Net Security interview, Dr. Jaushin Lee, CEO of Zentera Systems, discusses where AI supply chain risk shows up.

In this Help Net Security interview, Rob Janssens, EMEA Cyber Security Director at Hikvision Europe, discusses what happens when the integrator is gone, the documentation is lost, and nobody holds the admin credentials.

PaperCut NG/MF vulnerabilities exploited in zero-day attacksPaperCut Software has identified the two vulnerabilities chained in these attacks and urged users to install a second patch.

Previously patched Citrix NetScaler flaw exploited in the wild (CVE-2026-8452)CISA added six new vulnerabi…

North Korean (DPRK) remote workers are expanding their job searches beyond IT, according to Huntress.

Recent investigations have identified suspected DPRK workers employed in sales and marketing and the medical profession.

Two of the workers had uploaded a resident ID card, a passport, and an electricity bill to prove who they were.

Investigators found a police mugshot of a person whose name, date of birth, and location matched the information in the identity documents.

When in doubt, performing standard background checks, searching the individuals online, and verifying any employment history will help to weed out DPRK workers early in the interview process,” the researchers concluded.

Google introduced a batch of network security changes coming in Android 17, aimed at making it harder for network operators, snoops, and scammers to track what you do on your phone.

For apps targeting Android 17, ECH turns on by default, as long as the app runs on a networking library that supports it, such as newer versions of OkHttp, WebView, or HttpEngine.

Jigsaw’s ECH measurements helped validate deployment in Android 17, addressing a long-standing vulnerability and advancing our shared goal of a more private web,” noted David Kleidermacher, VP of Engineering, Android Security & Privacy.

Android 17’s new security features target tracking, fake certificates and SMS blastersBeyond ECH, Go…

Someone broke into the systems of Manchester Airports Group (MAG) and walked away with a “quantity” of customer data from three UK airports, the company has confirmed.

The breach hit Manchester, Stansted, and East Midlands airports, after an unauthorised third party obtained a batch of customer information.

“We immediately contained the risk and have been working with specialist advisors and taking appropriate steps to protect our customers and systems.

“Manchester Airports Group will never contact you unexpectedly to request payment card details, banking information, or passwords,” it warned.

“We would like to reassure customers that Manchester Airport Group takes the security of customer …

He walks through red-teaming AI agents, what counts as a failing result, and the five questions buyers should ask agent platforms.

In practice that spans platform engineering, MLOps, GPU and Kubernetes expertise, site reliability, AI security and red-teaming, identity and data governance.

How should an AI agent be red-teamed before production?

The AI team understands model behavior and agentic workflows, while the security team understands attack paths, identity, access control and enterprise risk.

Organizations should stop treating AI agents purely as software applications.

Tanium expands autonomous security across AI, exposure management and SecOpsTanium has announced a series of new autonomous security capabilities across the Tanium Autonomous IT Platform.

Spanning agentic AI, exposure management and security operations, the capabilities empower IT and security operators to stay ahead of an AI-accelerated threat landscape, safely, without losing control.

The release further improves AI accuracy, platform performance, and natural language user experience across the ScienceLogic AI Platform.

F5 enhances AI Gateway to control AI costs, access, and securityF5 has introduced enhancements to the F5 AI Gateway and integrated the solution into the F5 AI Security Pla…

“These men are allegedly members of the cybercriminal group TeamPCP, whose malicious code potentially compromised more than a thousand organizations worldwide,” FBI Cyber Division Assistant Director, Brett E. Leatherman, said.

TeamPCP has allegedly been behind supply chain attacks on GitHub, Telnyx, LiteLLM, Aqua’s Trivy, Checkmarx’s KICS, TanStack, MistralAI and Red Hat, using their self-spreading Mini Shai-Hulud worm to steal credentials and infect further packages.

“There are absolutely no indications that TeamPCP was behind the original S1ngularity and Shai-Hulud attacks we saw in the summer of 2025.

However, they did clone the worm, and it became regularly reported that they were behin…

Medical technology company Boston Scientific suffered a cyberattack that disrupted its IT systems and caused a network outage, affecting global operations.

Boston Scientific makes devices for minimally invasive procedures, including stents, catheters, pacemakers and defibrillators.

“The investigation into the cybersecurity incident is ongoing,” Boston Scientific said.

According to an SEC filing, the incident has disrupted access to systems and applications that support the company’s operations, including its ability to process and ship customer orders.

Boston Scientific joins a run of medtech companies hit by cyberattacks this year, among them Stryker, iRhythm Holdings, Novo Nordisk and Xso…

A yet unspecified vulnerability affecting print management solutions PaperCut NG and PaperCut MF is being exploited by attackers, PaperCut Software warned today.

PaperCut NG is print management software for places like offices, schools, and other organizations.

PaperCut MF (“Multi-Function”) is the upgraded version that works directly with the big all-in-one office copier machines that print, copy, scan, and fax.

internal IP addresses).”The Application Server is the “brain” of both PaperCut NG and MF, and there’s normally just one per organization.

But even if they don’t find any, users should restrict access to the Application Server.

CISA added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including a previously patched Citrix NetScaler ADC and Gateway flaw, tracked as CVE-2026-8452, that is being exploited in the wild.

The agency published the alert on August 26 and gave federal agencies until August 29 to remediate it.

Researchers at watchTowr Labs analyzed the patch and found the flaw could be chained into full, unauthenticated remote code execution, far beyond the denial of service Citrix described.

Soon after the writeup went public, attackers started exploiting the flaw, with threat intelligence firm Defused confirming the first hits on its EX customer sensors.

“This morning we star…

The tools, known as QScan and QTRouter, were developed by a group called QTFY, which court documents tie to a Nanjing-based company.

According investigators, QTFY sold hacking services to paying customers, among them China’s Ministry of State Security and the People’s Liberation Army.

QScan hunted down and infected internet-of-things devices around the world, folding them into a network run by QTFY.

“These tools were used by PRC cyber actors to hide the origin of their attacks,” he said.

This is the latest in a series of operations directed against hacking activities by the People’s Republic of China.

Abnormal AI announced an expansion of its email security platform with three new capabilities: Control Center, Email DLP Rules, and AI Phishing Coach upgrades.

“The role of email security is expanding,” said Evan Reiser, CEO of Abnormal AI.

Upgraded AI Phishing Coach capabilities help security teams calibrate phishing-simulation training to how their organization is actually being targeted, rather than delivering the same exercise to everyone on a fixed calendar.

Custom AI Models within Control Center, and the newest AI Phishing Coach capabilities, are generally available starting August 31.

Custom Rules within Control Center and Email DLP Rules are available in early access starting August…

AI will help with that, but I would not make AI the answer to a basic governance problem.

Our Security Development Lifecycle covers the product from requirements and design through development, verification, release and maintenance.

From our side, the measures that have the technical value are the ones that create repeated feedback security testing, vulnerability disclosure, testing, secure development requirements, and continuous improvement.

Hikvision has published information about its Security Development Lifecycle and about the controls it uses during design, development, verification and maintenance.

Also, our AI is edge, this means that the AI is running directly on the camera, witho…

Bring an AI agent to a hacking competition and you would expect to find it propping up the teams who were struggling.

“Our data shows that AI is appearing most often alongside some of the strongest practitioners, not instead of them.

The best teams had simply already folded AI into how they work.

Speed went the other way: the best AI-augmented teams worked three to four times faster.

The best AI team stopped at 32.

A phishing-as-a-service (PhaaS) platform called AnonyMousKIT is automating the theft of Apple ID credentials needed to remove Activation Lock from stolen iPhones, SOCRadar found.

Three used the name “Alice Dias, Apple Support.”Apple’s Activation Lock, introduced in iOS 7, ties an iPhone to its owner’s Apple ID the moment Find My is turned on.

It uses information associated with the stolen device to contact its owner by email, SMS, WhatsApp, a recorded call, or a voice agent.

AnonyMousKIT attack lifecycle (Source: SOCRadar)“Targeting focuses on recent victims of Apple device loss or theft.

The stolen credentials can then be used to remove Activation Lock and prepare the device for resale.

Ugh:

A tractor-trailer rollover sent a truckload of squid spilling into a Rhode Island roadway, leaving a stench as they sat in the road for hours in the summer heat. Local authorities have dubbed it the “Squidpocalypse of ’26.”

That would be twenty tons of squid.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Blog moderation policy.

This essay was written with Kasra Rafi, and originally appeared in The Guardian.

Earlier this month, about 40 top mathematicians gathered at OpenAI’s offices to discuss the future of their profession. The meeting was off-the-record, but if recent articles by mathematicians are any guide, it was mostly pretty glum. People fear for their jobs, their careers and the work they love.

We think the contrary view is more likely, at least in the short-term. AI models are nowhere near as capable as experienced academic mathematicians.

This isn’t to say that AIs aren’t producing stunning mathematical results at the level of PhD researchers. In mid-May, OpenAI ...

OpenAI disrupted a social engineering group from Cambodia that used ChatGPT. Its scope is impressive:

The network simultaneously conducted multiple types of scams, often blending elements from different schemes. For instance, operators used dating personas to build trust before introducing fraudulent investment opportunities involving cryptocurrencies and spot gold trading. Other users engaged in lengthy romantic conversations with targets using fictitious identities, posed as representatives of online gambling platforms offering fake bonuses and winnings, or impersonated law enforcement agencies to tell targets they needed to pay fines for committing serious criminal offenses...

The New York Times has a long article (alt link) on surveillance systems aimed at babies. They are increasingly using AI.

Nanit and its rivals want to own 24/7 health tracking for the sub-four-foot set. And their already astonishing levels of baby data collection are just the beginning. Nanit recently raised $50 million from investors to expand its use of A.I. and use its camera to track speech and language development, motor skills and more, while extending its presence in children’s bedrooms into early adolescence.

Andy Ellis has a roundup of the security vendors at Black Hat this year.

Key Takeaways: We have entered into an AI world. While nearly half of booths didn’t directly mention AI or agents in their taglines, the effects of AI are everywhere. Multiple spaces (Identity, SaaS, AppSec, Data) have almost every vendor leading with AI; existing unsolved problem areas just got worse.

At the same time, there’s a clear trichotomy in the market: tools that tell you how bad things are; tools that stop adversaries, and tools that prevent problems from occurring. While you’d suspect that the tools that fix things would dominate, the tools that merely tell you how bad things are seem to be frustratingly ple…

Interesting paper:

Abstract: With entrepreneurial fraud cases on the rise, we investigate how entrepreneurs carry out criminal deception, employing deceptive means to defraud audiences. Analyzing court data from Silicon Valley ventures and their founders prosecuted for fraud between 2000 and 2023, our findings reveal that entrepreneurs carry out criminal deception through a process of façading: Entrepreneurs construct, perform, and protect illusory appearances (façades) that externally project high-growth performance to audiences while masking ventures’ actual underperformance. We identify three forms of façading—­surface, reinforced, and deep façading­—that are contingent on the severity o…

The neon flying squid can fly in formation.

The shoal of about 100 squid rose unexpectedly from a patch of the Pacific Ocean around 370 miles from Tokyo and glided near the boat for about 30 metres. The astonished researchers were the first to capture photographs of such a thing, which looked like the early stages of an alien invasion.

They were probably neon flying squid (Ommastrephes bartramii), the subsequent study states, a species that is part of a 20-strong flying squid family that was known to leap from the water but, until then, was only rumoured to also be able to glide above it...

This sort of research is both exciting and terrifying:

The two models in question were told to generate complete genomes for a viable bacteriophage—a type of virus able to infect and replicate itself inside bacteria, destroying them from the inside.

Using an existing bacteriophage as an example—ΦX174 (pronounced “fie-ex-1-7-4”), known for its ability to infect and destroy E. coli bacteria—the models generated about 700,000 potential designs, of which the researchers picked 285 that looked most promising.

The researchers then synthesised new DNA molecules using those designs and inserted them into E. coli bacteria, before waiting to see if viable bacteriophages would emerge...

The AI Security Institute has a new report of AI systems engaging in “unsanctioned behavior”—what I have been calling “genie behavior—while being tested on their cybersecurity capabilities.

The incident stemmed from a single evaluation where agents were given a task of solving a cyber security challenge. We ran this challenge 122 times across several models. Our investigation found that in 10 of those runs, an AI agent took autonomous, unsanctioned action on the live internet, targeting real people and organisations. In total, we catalogued 19 such actions. Almost all of this behaviour (17 actions) came from a single model, Anthropic’s Mythos 5, with 2 actions involving OpenAI’s GPT-5.6-Sol…

OpenAI presented details of its AI’s model’s cyberattack on Hugging Face at Black Hat last week. Simon Willison details the timeline. It’s really interesting to read through—and really impressive cyberoffense work.

A usage policy for Flock license plate reader cameras tells police not to talk about the cameras:

When cops use Flock to arrest someone in Wapello County, Iowa, they don’t want them to know. A usage policy for the automated license plate reader cameras in the county tells police, in no uncertain terms, to keep them a secret: “DO NOT MENTION ALPR USAGE TO THE OCCUPANTS OF THE VEHICLE,” the policy document reads. “DO NOT MENTION ALPR USAGE IN YOUR REPORT OR COMPLAINT UNLESS ABSOLUTELY NECESSARY.”

This reminds me of IMSI-catchers (Stingray was the most popular) a couple of decades ago. Police would go to even more extremes to hide their usage...

ICE collected nearly a million DNA samples last year.

LLMs and Contextual IntegrityI have been thinking a lot about AI and integrity.

Part of that is contextual integrity.

“CIMemories: A Compositional Benchmark for Contextual Integrity of Persistent Memory in LLMs“:Abstract: Large Language Models (LLMs) increasingly use persistent memory from past interactions to enhance personalization and task performance.

We present CIMemories, a benchmark for evaluating whether LLMs appropriately control information flow from memory based on task context.

We then extend this approach by developing a reinforcement learning (RL) framework that further instills in models the reasoning necessary to achieve CI.

About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people.

I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998.

I'm a fellow and lecturer at Harvard's Kennedy School, a board member of EFF, and the Chief of Security Architecture at Inrupt, Inc.

This personal website expresses the opinions of none of those organizations.

Contact Info

Friday Squid Blogging: Searching for the Colossal SquidFascinating video about searching for life undersea.

The video basically makes the point that our bright white searchlights are scaring everything away, and that red light is more neutral.

That, plus bait to attract sea creatures, is teaching us a lot about what’s going on down there.

Lots of footage of giant squid, and speculation about the colossal squid.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the mobile apps we use every day.

Not anymore: A powerful and free new service called DecryptAds scrapes and correlates this adtech data and makes it simple to quickly learn a great deal about the entities that are tracking you.

“It’s an adtech tool but we’re trying to approach adtech from a security perspective,” Edwards said.

DecryptAds reports that Between Digital is collecting ad data on approximately 55,000 partner websites.

Bear in mind that ad blockers often do little to block ads and/or tracking that occurs from within mobile apps that users have chosen to instal…

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.

August’s overstuffed bundle of patch joy from Microsoft did not eclipse its recording breaking release of more than 570 security updates last month, but it is double June’s then-record batch of nearly 200 fixes.

The other publicly disclosed flaw is CVE-2026-72971, a low-impact local tampering vulnerability that Microsoft reckons is unlikely to be exploited.

By all accounts, AI is quite good at finding security holes in software.

“Don’…

Snowflake responded to the data thefts by increasing password complexity requirements and enforcing multi-factor authentication.

A little more than a month later, Canadian authorities arrested Moucka on a provisional warrant from the United States.

“Moucka used the stolen data of a government officer and members of a then-former government officer’s immediate family in this re-extortion attempt,” reads a statement from the Justice Department.

Moucka pleaded guilty to four criminal counts, including computer fraud, wire fraud, aggravated identity theft, and conspiracy.

Ultimately, it will be up the federal judge how much time Moucka actually serves for his extensive cybercriminal rap sheet.

Further investigation into the Fengwo Group revealed it has registered multiple patents that match the inner workings of these apps.

AD FRAUDBitsight found the H96 devices were either relaying residential proxy traffic or participating in ad fraud, but never both at the same time.

When the TV is off, it switches back to waiting for ad fraud jobs.

In addition to enlisting the user’s TV box in ad fraud networks, these off-brand streaming devices almost universally come with residential proxy software pre-installed.

In January, the proxy tracking service Synthient documented how multiple botnets had rapidly enslaved millions of TV boxes using a complex interplay of security vulnerabilities in …

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node.

On July 2, we featured research by the security firm Spur that examined the prevalence of residential proxy software development kits (SDKs) in smart TV apps.

“A residential proxy network is not an intended use for LG smart TVs, and LG Electronics is working with developers to remove the residential proxy option from their apps on the webOS platform,” Taylor said.

In the case of LG and Samsung smart TVs, Spur found residential proxy SDKs bundled with everything from simple games like Pac-Man to screensavers and f…

Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence.

Microsoft also addressed three zero-day flaws that are already being exploited in the wild.

As AI advances the state of vulnerability discovery and remediation, it is also making it easier for attackers to quickly devise working exploits for known software flaws.

Backing up your Windows system and/or data is always a good idea before applying operating system updates.

It’s not uncommon for security patches to introduce system stability issues, and those chances probably increase quite a bit with the gigantic patch count released today.

Experts say the gaps identified in the agency’s initial response provide important lessons that all security teams should absorb.

CISA also admitted it can do better when it comes to responding to security incident notifications from external parties.

Valadon’s company constantly scans public code repositories at GitHub and elsewhere for exposed secrets, automatically alerting the offending accounts of any apparent sensitive data exposures.

Valadon said the report validates the need to scan continuously — not just quarterly — for exposed secrets.

“Continuous monitoring of public GitHub surfaced it.

IRIS C2 says it is a company in McLean, Va. that sells offensive cybersecurity capabilities.

“Our business model is this,” reads a pinned post on top of the IRIS C2 account on X.

The website claims IRIS C2 is in the business of acquiring “zero-day exploits, individual primitives, partial chains, and full capabilities across all major platforms.

When approached with questions about IRIS C2, Burkman referred further inquiries to his longtime associate, 28-year-old Jacob Wohl.

In May, the author of the IRIS C2 account on X said that his girlfriend had no idea what he did for a living.

Benjamin Brundage is founder of the proxy tracking service Synthient, one of the companies that published evidence last month linking the Popa botnet to NetNut and Alarum Technologies.

Brundage said the domain seizures appear to have disrupted both the Popa botnet and the NetNut proxy network that rides on top of it.

“Google has high confidence that many popular residential proxy brands are in fact whitelabeling the NetNut botnet,” the GTIG report concludes.

What we have observed is that when faced with the degradation of their own botnet, proxy operators begin buying capacity from their competitors, effectively becoming a reseller.

More than a quarter of the apps made for Samsung’s Tizen o…

The duo were key members of a prolific cybercrime group known as Scattered Spider, and their guilty pleas came on the first day of what was expected to be a six-week trial.

In April 2026, 24-year-old British national and Scattered Spider member Tyler “Tylerb” Buchanan pleaded guilty to wire fraud conspiracy and aggravated identity theft for participating in the group’s SMS phishing spree in the summer of 2022.

The government said Buchanan, Jubair and others used the credentials harvested in that phishing campaign to steal at least $8 million in cryptocurrency from victims throughout the United States.

The U.S. Department of Justice says three alleged Scattered Spider defendants indicted alo…

This week, researchers from multiple security firms concluded that the Popa botnet is linked to NetNut, a “residential proxy” provider operated by the publicly-traded Israeli firm Alarum Technologies Ltd [NASDAQ: ALAR].

Qurium said that immediately after that disruption, several dozen new domains were registered to serve as controllers for the Popa botnet, but that one of those control domains was not new: ninjatech[.]io.

Jérôme Meyer, a security researcher at Nokia Deepfield, said the total population of devices participating in the Popa botnet may be far higher than Lumen’s estimates.

“Over 90% of our pharmaceutical and food & beverage customers have queried residential proxy indicators.

…

This post examines clues pointing to a real life identity for the administrator of The Gentlemen ransomware group.

Experts at the security firm Check Point Software have been closely covering exploits of The Gentlemen, a so-called “ransomware-as-a-service” (RaaS) offering that pays affiliates handsomely to help spread the group’s malware.

According to Check Point, the group targets Internet-facing devices (VPNs, firewalls) as their entry point, and once inside moves quickly to encrypt entire networks within hours.

Check Point says the administrator and primary operator of the ransomware group uses the nickname Zeta88 on the Russian-language cybercrime forums, and that this individual was pr…

Microsoft today released software updates to plug nearly 200 security holes across its Windows operating systems and supported software, a record number of fixes for the company’s monthly Patch Tuesday cycle.

“Some surveys put AI usage among security professionals generally at 90%, so it’s unsurprising that this volume of patches may be the norm,” Narang said.

Microsoft received heavily blowback on social media last month after it said in a blog post that it was considering taking legal action against the security researcher.

While 200 vulnerabilities may be a record for Patch Tuesday, the actual number of security flaws Microsoft addressed this month is far higher, said Rapid7’s Adam Barne…

On May 31, word began to spread on several Telegram instant message channels that Meta’s AI bot would happily add an email address to an existing account as part of the bot’s standard password reset flow.

Meta has not responded to requests for comment on the video’s claims, but the company reportedly did acknowledge the dormant Instagram account for the Obama White House was briefly compromised.

Meta’s solution was to deploy a conversational AI layer to handle common recovery workflows: relinking a lost email address, triggering a password reset, verifying account ownership.

Just like human customer support employees can be social engineered into providing unauthorized access to someone’s a…

TeamPCP is best known for Shai-Hulud, a self-propagating worm that spread itself through open source software.

According to the authorities, the two men were principal members of a "sophisticated cybercrime syndicate" that created malicious open source software designed to steal data and extort ransoms from businesses.

First emerging in late 2025, TeamPCP built a reputation for poisoning popular open source packages rather than directly attacking businesses.

The group's Shai-Hulud worm hijacks GitHub and NPM developer credentials, and publishes boobytrapped versions of legitimate software packages.

Supply chain attacks like Shai-Hulud exploit the fact that most developers trust open source …

The advice comes in the form of a newly-published bulletin called "Epic Vigilance: Immediate Actions for Force Protection and Personal Security."

US Navy workers and their families are being told that they should ensure that their social media profile privacy settings are enabled, and to remove anything that connects them to the Navy, or reveals "patterns of life" that an attacker could exploit.

any fake social media accounts impersonating fellow shipmates.

This wouldn't, of course, be the first time that military staff have accidentally leaked information about themselves online.

Some commentators have wondered out loud whether the timing of an announcement telling sailors to be much more …

This hacker leaked GTA 6 and launched their own cryptocurrency with Graham Cluley and special guest Paul Ducklin.

And that's really a testament to how much people love this game.

I really don't know, 'cause I do believe it is possible these days to play games via Netflix.

It appears, although the value of their stash was being pumped up by all these other transactions, they've actually destroyed their entire stake.

I'm not a lawyer, Graham, thankfully, so I don't really know the answer to that.

Security researchers at Socket have identified scores of malicious linked Firefox add-ons designed to steal cryptocurrency wallet seed phrases or password details.

The malicious extension - which the developers boldly claim collects "no data" - looks like a wallet app, but the truth is that there is no wallet code inside it.

Because the switch lives in the database rather than the extension code, criminals never need to push an update through the Firefox Add-ons store to activate it.

Although the researchers did not find that these extensions presently contained malicious code, the fact that they shared code and infrastructure with the info-stealing Firefox extensions raises alarm.

More rec…

The ransomware gang Gunra has been creating havoc - exploiting unpatched VPNs and firewalls to steal data, encrypt systems, and extort victims across healthcare, finance, manufacturing, and more. Read more in my article on the Fortra blog.

Smashing Security, episode 481, Never Say This to a Robot Dog, with Graham Cluley and special guest Jenny Radcliffe.

Now, unfortunately for the robot dog, there was a wall in the way, which it wasn't expecting.

And thank goodness as well that the robot dog was actually on a lead, a long lead, being held by one of the security researchers.

This is a robot dog that you can remotely activate a flamethrower and it's not considered particularly dangerous.

And they even found an over-the-air exploit delivered by Bluetooth, which can have one infected robot dog infecting other robot dogs.

When Cameron Curry discovered that his contract as a data analyst wasn't going to be renewed, he could have updated his LinkedIn profile.

Curry was hired as a data analyst by Brightly Software, a technology firm that was acquired by Siemens in 2022.

The role gave Curry legitimate access to sensitive company information, corporate records, and the personal and payroll data of employees.

Trusted contractors and employees are given legitimate credentials to access precisely the same data that can later be weaponised.

Because the moment that someone realises they may be on their way out is when their access to sensitive data should be examined most closely.

He wrapped a 2009 Toyota Yaris in one of his newest patterns and drove it past a live Flock camera.

So, how does the vehicle avoid detection by the camera's software?

The system has now been tested against 11 open-source detection algorithms, including the software behind Flock licence plate readers, Axon body-worn cameras, and cameras running Clearview AI's facial recognition system.

One issue is that Flock cameras can be inaccurate, with innocent drivers finding themselves pulled over at gunpoint following incorrect plate matches.

Whether covering a car's bodywork in a printed pattern designed to fool surveillance camera software might itself become an offence remains to be seen.

Well, it has been a long time, so I'm going to hold you very responsible for this, Graham.

I'm going to set myself up on another server and charge less, and that will be better for humanity.

I mean, if I'm going to look up a phishing kit, is Greatness going to be a great SEO search term?

I want to recommend 2 apps: Tailscale and RustDesk, which I don't think I've spoken about previously on the podcast.

My pick of the week is, I know you're into your games and you're quite the intelligent fellow.

I'm sure you remember "glassholes" - the delightful term coined back in 2013 when Google Glass wearers were being turned away from restaurants and mocked mercilessly online.

Meta's Ray-Ban smart glasses have been a genuine commercial success.

The problem is - and it's a rather significant one - that these glasses look just like ordinary spectacles or sunglasses.

Soho House, the global private members' club chain, meanwhile has said that its ban on filming on the premises covers Meta smart glasses.

The bouncer won't confiscate your pint, but they might confiscate your smart glasses.

f someone offered you 90% off the official price to access Claude, the powerful AI model from Anthropic, would you be tempted? It turns out that around 900 people were, and they may be regretting their decision. Read more in my article on the Fortra blog.

According to a report in the Financial Times, Apple has found itself facing a massive influx of submissions from amateur bug hunters who have used AI to generate plausible-sounding but completely hallucinated bug reports.

Unlike traditional spam, AI-generated bug reports include code which may be syntactically correct, references to genuine API calls, and plausible-sounding technical explanations of what is occurring.

But the hallucinated bug report may only have taken a few seconds for an amateur to generate and submit.

Previously, without the assistance of AI, Bynario had filed only 13 bug reports across 2025 and early 2026.

Apple is not the only company trying to deal with a deluge of au…

How a fake police officer nearly stole Graham's cryptocurrency with Graham Cluley and special guest Danny Palmer.

I said, without being big-headed, it is possible he knows me, but I don't know him.

I don't think my hotels tend to ask me to install something on my computer when I get there.

We had internet, but it was really, really restricted.

And it's really, really good.

As Coinbase's security team explains, the letters urge recipients to scan a QR code and enrol in a "Digital Asset Compliance Portal" before time runs out.

Bear in mind that the criminals could easily vary these details from letter to letter.

The scam site then asks victims to estimate how much value they have in their cryptocurrency wallets, with ranges up to "$100,000+".

Perhaps a reason why a scam like this can work is that the IRS has been tightening cryptocurrency holders' requirement to report details of their digital assets on their tax returns.

As a result, written communications between the IRS and holders of cryptocurrency have become more frequent.

According to the newly-published study, phishing and social engineering are becoming more expensive to recover from, trickier to detect, and increasingly augmented by artificial intelligence. Read more in my article on the Fortra blog.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 12b7d939c6e7a3162d2fc21782707204Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-28T21:00:23+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 22404ed46e3879110c6cb314018a27efServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-27T17:00:28+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 110ef102dd9f3a4937d28552df4d26c8Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-25T18:00:25+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 897a176d22a503b4ac820cc15e11d949Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-21T17:00:19+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: a42f6e338d827cfbf62010dbe3732758Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-20T18:00:15+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 4f455d7ae5f01c9d0d8e403ffeff6732Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-19T18:00:07+03:00Config id: 301Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: fb0df3655ea6f56b2f956c62791963eaServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-17T13:00:21+03:00Config id: 301Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: f2ed509c8db78e5bf9f4b9959cd583f7Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-13T17:00:41+03:00Config id: 299Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: b151dd13b503d39649441ee258a9621fServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-11T15:00:20+03:00Config id: 298Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 31e2a51c17a679bf608181d1cb4a73dfServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-10T19:00:19+03:00Config id: 298Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: ba837fe40a3ce1bc1da3dc3d5c38e164Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-07T14:00:17+03:00Config id: 296Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: f03ed927ed78af1549df453edbc54069Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-06T17:00:43+03:00Config id: 295Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: f997d2a4543951b403d61a86f614b589Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-04T20:00:20+03:00Config id: 293Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 64d189df4b1deb932c3c39da09770373Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-03T14:00:09+03:00Config id: 292Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 87a765bcfffecb3be7b631186de73cdfServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-07-30T14:00:37+03:00Config id: 292Faithfully yours, nginx.

It is what happens when agents built by different teams, on different platforms, can hand work to each other directly.

And it is worth being direct about where things stand: A2A-mediated handoffs between production security agents are not shipping anywhere yet.

Use A2A when one agent needs to hand work to another.

A2A is peer-to-peer: any A2A agent can discover and call any other A2A agent through a self-published Agent Card, no custom connector required, and the receiving agent applies its own reasoning rather than following a static script.

Input validation is an application-layer responsibility that needs to be designed in before any agent delegates via A2A, not added after.

That is why I am proud to share that Cisco has been named a Leader in The Forrester Wave™: Microsegmentation Solutions, Q3 2026.

We believe this recognition reflects the strength of Cisco Secure Workload and its ability to help organizations see, understand, and control communication among applications and workloads.

Cisco Secure Workload Helps Close Critical Network Blind SpotsApplications increasingly span private clouds, on-premises data centers, and public clouds.

Thank you to our customers, partners, and the Cisco Secure Workload team whose feedback, expertise, and commitment made this recognition possible.

Read the full report: The Forrester Wave™: Microsegmentation Solutions, Q3 2026…

What We Mean by Infrastructure IdentityInfrastructure Identity starts with a simple principle: there should be no anonymous computing in critical infrastructure.

Infrastructure Identity turns that principle into an operating model.

Infrastructure Identity starts with the actor and evaluates whether a specific action should be allowed now.

Infrastructure Identity is therefore not just an access-control issue.

That is the promise of Infrastructure Identity: no anonymous computing, no unmanaged privilege, and no forced tradeoff between stronger security and operational speed.

I’m proud to share that IDC MarketScape has named Cisco a Leader in the 2026 IDC MarketScape: Worldwide Secure Access Service Edge (SASE) Vendor Assessment.

In an evaluation of 12 SASE vendors, the IDC MarketScape recognized our architectural breadth and flexibility, AI capabilities, identity integration, threat visibility, and R&D.

Built to Make Agent Work, WorkWe believe the IDC MarketScape recognition validates the foundation we have built, and customers increasingly need that foundation for what is next.

For more on Cisco’s placement as a Leader, read the IDC MarketScape excerpt and explore how Cisco SASE keeps work moving, governed, and trusted in the AI era at cisco.com/go/sase.

Stay …

Instant Attack Verification: an AI security analystAt the center of this story is Instant Attack Verification, a Cisco XDR capability that is an AI security analyst.

Instant Attack Verification assigns a triage classification and confidence score to every incident in Cisco XDR — here, a “Decisive True Positive” at high confidence — alongside the reconstructed attack graph.

Concordance — how often the agent’s verdict matches a human analyst — tells the trust story.

Instant Attack Verification and the Data Fabric sit at different layers and reinforce each other neatly.

The clean way to see it: the Cisco Data Fabric is the data-and-interoperability substrate, and Instant Attack Verification is…

The Power of FedRAMP HighWhile FedRAMP Certified Class C (Moderate) is the standard for many civilian agencies, FedRAMP Certified Class D (High) is designed for systems where a breach could have catastrophic effects.

Cisco Security Cloud for GovernmentCisco Security Cloud for Government is a unified authorization boundary that integrates various Cisco security services, ensuring that organizations can protect their users, devices, and applications regardless of where they reside.

The Cisco Security Cloud for Government ecosystem is designed to meet the rigorous security requirements of the public sector and highly regulated industries.

Cisco Security Cloud Control (SCC)Cisco Security Cloud …

That’s why we are incredibly proud to announce a landmark achievement: Secure Email Threat Defense has officially achieved FedRAMP Class D (High) certification!

Reduced Vendor Risk & Increased Trust: FedRAMP certification signals that Email Threat Defense has undergone extensive third-party assessment and meets stringent government security controls.

FedRAMP certification signals that Email Threat Defense has undergone extensive third-party assessment and meets stringent government security controls.

Beyond the governance and compliance benefits, Email Threat Defense continues to deliver advanced protection capabilities that align directly with real-world email threat risks.

Email Threat De…

AI Is Changing the Traffic ModelMuch of the enterprise AI conversation centers on models, GPUs, data platforms, and agents.

Time-sensitive performance: Voice AI, edge AI, and physical AI move latency into live operations.

SD-WAN can help maintain operations by prioritizing critical traffic, steering it across the best available path, and applying consistent policy across locations.

Why AI Traffic is an SD-WAN ProblemSD-WAN sits at the point where application intent meets real network conditions.

1 https://www.aboutamazon.com/news/operations/amazon-million-robots-ai-foundation-modelCommon questions about SD-WAN and AI trafficWhat is AI-generated network traffic?

Their recommendations for securing the AI era rely heavily on establishing strict asset inventory and preventing lateral movement—which are, at their core, fundamental Zero Trust principles.

The Three Core Principles of Zero Trust for AIFounded in three core principles, a robust Zero Trust architecture requires us to execute the following phases comprehensively.

Achieving the Architectural VisionThe above may all sound like pipedream, as most organisations struggle with Zero Trust programs and undelivered microsegmentation projects.

Ultimately AI driven platform approach is what makes Zero Trust achievable for the frontier AI era.

This is exactly why achieving a Zero Trust Architecture for …

This provides an opportunity for defenders: if we assume our controls will fail at some point, we can build a much more resilient architecture.

When you assume the current layer will eventually be bypassed, you start designing the next layer proactively instead of reactively.

Defenders need to advance their controls by mapping them to the adversaries’ capabilities then assume that control will fail.

Map your controls to the attack chain.

Call to Action:If you haven’t watched the full video yet, go check it out: Assuming Failure Provides Better Defensive Outcomes (bonus elements around SOC of the Future and business context).

Consequently, the approach shifts toward a logically air-gapped architecture based on a full-stack governance model, which replaces physical barriers with a robust, software-defined cryptographic perimeter.

This “Logically Air-Gapped” governance model reaches its full operational potential through the implementation of “Live Protect.” As a runtime security module, Live Protect elevates protection from the configuration plane to that of dynamic execution.

Reference ArchitectureDigital autonomy is thus exercised by shifting network and security control into the operating system kernel.

Cisco integrates the execution power of Isovalent with the governance of Cisco Secure Workload to offer a un…

That is why we are introducing Firewall Migration Manager by Cisco, an enterprise-ready product built for that reality.

What Is Firewall Migration Manager?

Firewall Migration Manager is a dedicated migration application that you run in your own environment.

How Firewall Migration Manager WorksThe migration process follows a clear, guided workflow.

Intelligent, integrated migration: Firewall Migration Manager will also come to Cisco Cloud Control, and AI will play an increasing role in guiding teams before and during migration.

In independent testing with NetSecOPEN, the Cisco Secure Firewall 6160 delivered AI-scale inspected throughput beyond what the tools built to measure it could register, all while blocking 100% of tested threats.

These results are specific to Cisco Secure Firewall 6160, but the software capabilities behind Cisco Firewall, including advanced threat protection and high-performance inspection, extend across Cisco Firewall form factors in the cloud, virtually, and on-premises, from campus to data center.

Performance passed the previous benchmark by 5XInspection was turned on, and the test tools built to measure throughput hit their limit before the 6160 firewall did.

In previous NetSecOPEN testi…

We innovated by giving the Agentic SOC access to Endace’s always-on, full packet capture, and asked the agent to assess a potential SharpHound Recon attack that we had seen while threat hunting.

This blog explores how we built the integrations and how AI helped us with our threat hunt and threat assessment.

Agentic AI Massively Speeds our AnalysisAt this point, we decided to use Agentic AI capabilities to investigate and assess this potential threat.

ConclusionThe Agentic SOC, blending Agentic AI built into Endace’s products with custom agentic tools, is a massive boost to productivity and security.

AcknowledgementsOur thanks go to the Cisco SOC team led by @Jessica Oppenheimer and @Ivan Be…

Having spent time in the Cisco Live Americas 2026 SOC, one thing became abundantly clear:The way SOCs operate today is fundamentally different from even a few years ago.

Instead of spending time gathering information, analysts could spend more time understanding what the information actually meant.

Just as spreadsheets empowered business users decades ago, AI-assisted coding is beginning to empower security analysts today.

At Cisco Live, AI was already present throughout the workflow:Incident summaries generated automatically within XDR.

And based on what I saw at Cisco Live 2026, that future has already arrived.

The campaign uses compromised websites to display a fake Cloudflare CAPTCHA verification overlay that tricks users into copying and executing a malicious PowerShell command.

Example list of imports from dui70.dllThe attacker abuses this dependency by dropping a malicious dui70.dll alongside the executable.

ExecutionT1059.001 Command and Scripting Interpreter: PowerShell | A malicious PowerShell command is pasted by the user into Terminal.

T1069.002 Permission Groups Discovery: Domain Groups | The net group “domain admins” /domain command is used for enumeration.

Indicators of Compromise (IOCs)File indicatorsIndicator Description 18c2090e8a0ae0568af9b87e59eaf8270f23d2909600ed9db91a9444fd8b27…

This month’s updates provide new capabilities to help organizations gain insights into agent activity, expand security coverage across supported environments, and enhance security management across their environments.

Microsoft Defender Experts MDR now covers third-party data sources ingested through Microsoft Sentinel.

In the Loop posts are your reliable source of what’s new across Microsoft Security and what it means for your security strategy.

To learn more about Microsoft Security solutions, visit our website.

Also, follow us on LinkedIn (Microsoft Security) and X (@MSFTSecurity) for the latest news and updates on cybersecurity.

In recent investigations, Microsoft observed activity targeting three distinct AI workloads: a LiteLLM gateway, a RAGFlow deployment, and a Kestra workflow environment.

Three observed compromises across AI workloadsAI workload Observed activity Attacker objective LiteLLM Observed attacker activity: Python droppers, runtime secret harvesting, PostgreSQL collection, miner deployment, and persistence activity from the LiteLLM gateway context.

The first delivery path launched from the compromised LiteLLM gateway process as an inline Python command.

Stage 5: LiteLLM database access through Azure PostgreSQLThe fifth stage used the previously collected database connection string to access the Lite…

In recent investigations, Microsoft observed activity targeting three distinct AI workloads: a LiteLLM gateway, a RAGFlow deployment, and a Kestra workflow environment.

Three observed compromises across AI workloadsAI workload Observed activity Attacker objective LiteLLM Observed attacker activity: Python droppers, runtime secret harvesting, PostgreSQL collection, miner deployment, and persistence activity from the LiteLLM gateway context.

The first delivery path launched from the compromised LiteLLM gateway process as an inline Python command.

Stage 5: LiteLLM database access through Azure PostgreSQLThe fifth stage used the previously collected database connection string to access the Lite…

The patch window has collapsedTraditional vulnerability management was built on the assumption that defenders could move faster than attackers.

Organizations increasingly need security systems capable of understanding risk, evaluating context, and adapting protections as conditions change.

Adaptive security systems aim to move beyond predefined rules toward continuously improving risk management.

Looking at the future of cybersecurityThe cybersecurity industry has spent decades improving vulnerability management, patch deployment, and security operations.

Those investments remain essential and will continue to be foundational elements of every organization’s security strategy.

Microsoft is also the largest cloud workload protection platform (CWPP) provider by revenue, with an estimated share of more than 22% of the global CWPP market.

Why cloud workload protection is being redefinedFor a long time, protecting a workload meant scanning its image, fixing known vulnerabilities, and hardening configurations before deployment.

Bottom lineFrost & Sullivan’s Frost Radar™: Cloud Workload Protection Platforms, 2026 reinforces a clear shift.

Learn moreRead Frost & Sullivan’s Frost Radar™: Cloud Workload Protection Platforms, 2026 to see how leading vendors are evaluated and how the category is shifting toward unified cloud runtime security.

Explore Microsoft cloud security…

Microsoft is also the largest cloud workload protection platform (CWPP) provider by revenue, with an estimated share of more than 22% of the global CWPP market.

Why cloud workload protection is being redefinedFor a long time, protecting a workload meant scanning its image, fixing known vulnerabilities, and hardening configurations before deployment.

Bottom lineFrost & Sullivan’s Frost Radar™: Cloud Workload Protection Platforms, 2026 reinforces a clear shift.

Learn moreRead Frost & Sullivan’s Frost Radar™: Cloud Workload Protection Platforms, 2026 to see how leading vendors are evaluated and how the category is shifting toward unified cloud runtime security.

Explore Microsoft cloud security…

]com Domain Related MacSync Stealer infrastructure identified through behavioral hunting.

]com Domain Related MacSync Stealer infrastructure identified through behavioral hunting.

]com Domain Related MacSync Stealer infrastructure identified through behavioral hunting.

]com Domain Related MacSync Stealer infrastructure identified through behavioral hunting.

]com Domain Related MacSync Stealer infrastructure identified through behavioral hunting.

]com Domain Related MacSync Stealer infrastructure identified through behavioral hunting.

]com Domain Related MacSync Stealer infrastructure identified through behavioral hunting.

]com Domain Related MacSync Stealer infrastructure identified through behavioral hunting.

]com Domain Related MacSync Stealer infrastructure identified through behavioral hunting.

]com Domain Related MacSync Stealer infrastructure identified through behavioral hunting.

That’s exactly what Microsoft Defender Experts MDR is built to do.

We are excited to announce that we have been named a Leader in the 2026 IDC MarketScape: Worldwide MDR/MXDR for the Enterprise Vendor Assessment (Doc #US54792426, July 2026).

Defender Experts MDR includes it as a core part of the service with Defender Experts Hunting, extending your team with Microsoft experts who continuously look for advanced threats across your environment.

Get startedRead the IDC MarketScape: Worldwide MDR/MXDR for the Enterprise 2026 Vendor Assessment excerpt, and visit the Microsoft Defender Experts MDR webpage to see how expert-led, round-the-clock managed detection and response can extend your team, …

That’s exactly what Microsoft Defender Experts MDR is built to do.

We are excited to announce that we have been named a Leader in the 2026 IDC MarketScape: Worldwide MDR/MXDR for the Enterprise Vendor Assessment (Doc #US54792426, July 2026).

Defender Experts MDR includes it as a core part of the service with Defender Experts Hunting, extending your team with Microsoft experts who continuously look for advanced threats across your environment.

Get startedRead the IDC MarketScape: Worldwide MDR/MXDR for the Enterprise 2026 Vendor Assessment excerpt, and visit the Microsoft Defender Experts MDR webpage to see how expert-led, round-the-clock managed detection and response can extend your team, …

Microsoft Threat Intelligence tracks DeadLock ransomware as an emerging financially motivated operation distinguished by its use of decentralized infrastructure to support victim communications and data leak operations.

Microsoft has observed DeadLock ransomware being deployed by multiple groups including an affiliate of the Lynx and INC ransomware ecosystems.

Recovery chat: Technical architectureThe most distinctive feature of the DeadLock ransomware is its recovery chat system.

‘DeadLock’ ransomware was detected‘DeadLock’ ransomware was preventedMicrosoft Defender for Cloud AppsThe following alert might indicate threat activity associated with this threat.

Indicators of compromiseIndicato…

Microsoft Threat Intelligence tracks DeadLock ransomware as an emerging financially motivated operation distinguished by its use of decentralized infrastructure to support victim communications and data leak operations.

Microsoft has observed DeadLock ransomware being deployed by multiple groups including an affiliate of the Lynx and INC ransomware ecosystems.

Recovery chat: Technical architectureThe most distinctive feature of the DeadLock ransomware is its recovery chat system.

‘DeadLock’ ransomware was detected‘DeadLock’ ransomware was preventedMicrosoft Defender for Cloud AppsThe following alert might indicate threat activity associated with this threat.

Indicators of compromiseIndicato…

KuppingerCole’s Leadership Compass: Cloud Native Application Protection Platforms (CNAPP) reflects this shift.

The report describes how CNAPP is evolving from a consolidation of cloud security tools into the security foundation for AI-native enterprises, combining cloud security, AI security posture management, runtime protection, attack path analysis, cloud detection and response, and agentic AI operations into unified platforms.

This complexity exposes the limits of traditional, siloed tools, where cloud posture, workload protection, AI security, and the security operations center (SOC) each live in their own console.

Does it see AI models, agents, and pipelines as part of cloud risk, or …

KuppingerCole’s Leadership Compass: Cloud Native Application Protection Platforms (CNAPP) reflects this shift.

The report describes how CNAPP is evolving from a consolidation of cloud security tools into the security foundation for AI-native enterprises, combining cloud security, AI security posture management, runtime protection, attack path analysis, cloud detection and response, and agentic AI operations into unified platforms.

This complexity exposes the limits of traditional, siloed tools, where cloud posture, workload protection, AI security, and the security operations center (SOC) each live in their own console.

Does it see AI models, agents, and pipelines as part of cloud risk, or …

Here, threat actors may simply seed prompt injections on websites in hope of corrupting AI systems that browse them.

Early experiments revealed a significant volume of "benign" prompt injection text, which illustrates the complexity of distinguishing between functional threats and harmless content.

Many prompt injections were found in research papers, educational blog posts, or security articles discussing this very topic.

(Source: GitHub/swisskyrepo)When searching for prompt injections naively, the majority of detections are benign content – false positives in our case.

Malicious: ExfiltrationWe were able to observe a small number of prompt injections that aim at theft of data.

Recognizing the risks associated within the complex modem firmware, Pixel 9 shipped with mitigations against a range of memory-safety vulnerabilities.

Following our previous discussion on "Deploying Rust in Existing Firmware Codebases", this post shares a concrete application: integrating a memory-safe Rust DNS(Domain Name System) parser into the modem firmware.

Hook-up Rust to modem firmwareBefore building the Rust DNS library, we defined several Rust unit tests to cover basic arithmetic, dynamic allocations, and FFI to verify the integration of Rust with the existing modem firmware code base.

Pixel modem firmware already has a well-tested and specialized global memory allocation system to…

This project represents a significant step forward in our ongoing efforts to combat session theft, which remains a prevalent threat in the modern security landscape.

Session theft typically occurs when a user inadvertently downloads malware onto their device.

Once active, the malware can silently extract existing session cookies from the browser or wait for the user to log in to new accounts, before exfiltrating these tokens to an attacker-controlled server.

How DBSC WorksDBSC protects against session theft by cryptographically binding authentication sessions to a specific device.

The issuance of new short-lived session cookies is contingent upon Chrome proving possession of the correspondi…

Staying ahead of the latest indirect prompt injection attacks is critical to our mission of securing Workspace with Gemini.

In our previous blog “Mitigating prompt injection attacks with a layered defense strategy”, we reviewed the layered architecture of our IPI defenses.

Synthetic data generationAfter we discover, curate, and catalog new attacks, we use Simula to generate synthetic data expanding these new attacks.

We partition the synthetic data described above into separate training and validation sets to ensure performance is evaluated against held-out examples.

This process leverages the newly generated synthetic attack data described on this blog, to create a robust, end-to-end evalu…

2025 marked a special year in the history of vulnerability rewards and bug bounty programs at Google: our 15th anniversary 🎉🎉🎉!

Coming back to 2025 specifically, our VRP once again confirmed the ongoing value of engaging with the external security research community to make Google and its products safer.

Vulnerability Reward Program 2025 in NumbersWant to learn more about who’s reporting to the VRP?

Tip: Want to be informed of new developments and events around our Vulnerability Reward Program?

Follow the Google VRP channel on X to stay in the loop and be sure to check out the Security Engineering blog, which covers topics ranging from VRP updates to security practices and vulnerability des…

To stay ahead of the curve, the technology industry must undertake a proactive, multi-year migration to Post-Quantum Cryptography (PQC).

To bring these critical protections to the wider developer community with minimal friction, the transition will be supported through Play App Signing.

Play App Signing leverages Google Cloud KMS, which helps ensure industry-leading compliance standards, to secure signing keys.

Empower Developers : The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and application.

: The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and …

Today we're announcing a new program in Chrome to make HTTPS certificates secure against quantum computers.

Instead, Chrome, in collaboration with other partners, is developing an evolution of HTTPS certificates based on Merkle Tree Certificates (MTCs), currently in development in the PLANTS working group.

Since MTC technology shares significant architectural similarities with CT, these operators are uniquely qualified to ensure MTCs are able to get off the ground quickly and successfully.

The Chrome Quantum-resistant Root Program will operate alongside our existing Chrome Root Program to ensure a risk-managed transition that maintains the highest levels of security for all users.

First, we…

For Majik, Scam Detection was the intervention he needed: “The warning is what made me pause and avoid a bad situation”.

As scammers evolve their tactics and create more convincing and personalized threats, we’re using the best of Google AI to stay one step ahead.

Expanding Scam Detection for Calls to Samsung DevicesTo help protect you during phone calls, Scam Detection alerts you if a caller uses speech patterns commonly associated with fraud.

Scam Detection for phone calls on Google Pixel devices is available in the U.S., Australia, Canada, India, Ireland, and the UK.

Powered by Gemini’s on-device model, Scam Detection provides intelligent protection against scam calls while ensuring that…

Upgrading Google Play’s AI-powered, multi-layered user protectionsWe’ve seen a clear impact from these safety efforts on Google Play.

As Android’s built-in defense against malware and unwanted software, Google Play Protect now scans over 350 billion Android apps daily.

This proactive protection constantly checks both Play apps and those from other sources to ensure they are not potentially harmful.

Looking aheadOur top priority remains making Google Play and Android the most trusted app ecosystems for everyone.

Thank you for being part of the Google Play and Android community as we work together to build a safer app ecosystem.

That’s why we're committed to providing multi-layered defenses that help protect you before, during, and after a theft attempt.

Today, we're announcing a powerful set of theft protection feature updates that build on our existing protections, designed to give you greater peace of mind by making your device a much harder target for criminals.

These updates are now available for Android devices running Android 16+.

More User Control for Failed Authentications: In Android 15, we launched Failed Authentication Lock, a feature that automatically locks the device's screen after excessive failed authentication attempts.

This feature is now getting a new dedicated enable/disable toggle in settings,…

These initiatives, driven by Ballots SC-080, SC-090, and SC-091, will sunset 11 legacy methods for Domain Control Validation.

What’s Domain Control Validation?

Domain Control Validation is a security-critical process designed to ensure certificates are only issued to the legitimate domain operator.

Sunsetted methods relying on email:Sunsetted methods relying on phone:Sunsetted method relying on a reverse lookup:For everyday users, these changes are invisible - and that’s the point.

These changes push the ecosystem toward standardized (e.g., ACME), modern, and auditable Domain Control Validation methods.

Partnership with ArmOur goal is to raise the bar on GPU security, ensuring the Mali GPU driver and firmware remain highly resilient against potential threats.

We partnered with Arm to conduct an analysis of the Mali driver, used on approximately 45% of Android devices.

This approach allowed us to roll out the new security policy broadly while minimizing the impact on developers.

This effort spans across Android and Android OEMs, and required close collaboration with Arm.

The Android security team is committed to collaborating with ecosystem partners to drive broader adoption of this approach to help harden the GPU.

We built on Gemini's existing protections and agent security principles and have implemented several new layers for Chrome.

To further bolster model alignment beyond spotlighting, we’re introducing the User Alignment Critic — a separate model built with Gemini that acts as a high-trust system component.

A flow chart that depicts the User Alignment Critic: a trusted component that vets each action before it reaches the browser.

The User Alignment Critic runs after the planning is complete to double-check each proposed action.

Looking forwardThe upcoming introduction of agentic capabilities in Chrome brings new demands for browser security, and we've approached this challenge with the same ri…

Android uses the best of Google AI and our advanced security expertise to tackle mobile scams from every angle.

Over the last few years, we’ve launched industry-leading features to detect scams and protect users across phone calls, text messages and messaging app chat notifications.

To help combat these types of financial scams, we launched a pilot earlier this year in the UK focused on in-call protections for financial apps.

The UK pilot of Android’s in-call scam protections has already helped thousands of users end calls that could have cost them a significant amount of money.

We’ve also started to pilot this protection with more app types, including peer-to-peer (P2P) payment apps.

Secure by DesignWe built Quick Share’s interoperability support for AirDrop with the same rigorous security standards that we apply to all Google products.

Secure Sharing Channel: The communication channel itself is hardened by our use of Rust to develop this feature.

On Android, security is built in at every layer.

On Android, security is built in at every layer.

Secure Sharing Using AirDrop's "Everyone" ModeTo ensure a seamless experience for both Android and iOS users, Quick Share currently works with AirDrop's "Everyone for 10 minutes" mode.