Вместо грубого перебора система использовала обучение с подкреплением и нашла рабочую стратегию для сложного потока.

ChatGPT научился строить финансовые модели, проводить исследования и готовить презентации для Уолл-стрит.

Цепочка ошибок позволяет пройти путь от анонимного запроса до полного контроля.

Один заражённый компьютер превращался в площадку сразу для нескольких киберпреступников.

Компания отслеживает активистов, протесты и людей, которых считает потенциальной угрозой.

Главным результатом стала новая структура планарных графов.

Бюро готово рисковать будущими операциями, если раннее предупреждение поможет защитить жертв.

Две двойные спирали сближаются бороздка к бороздке, а ионы формируют между ними цепочку молекулярных мостиков.

Одного неправильно защищённого разрешения оказалось достаточно для кражи токена пользователя.

MutexaGPT переводит гипотезу в расчёты и выбирает изменения, которые стоит проверить в лаборатории.

Именно для этого используются решения класса «управление внешней поверхностью атаки» (External Attack Surface Management, EASM), позволяющие контролировать внешнюю поверхность атаки.

Что такое EASM и для чего используетсяСистема класса «управление внешней поверхностью атаки» (External Attack Surface Management, EASM) — это не разовый пентест и не сетевой сканер.

Также следует упомянуть ASM (Attack Surface Management) как более широкий подход, охватывающий и внешнюю, и внутреннюю поверхность атаки, и CAASM (Cyber Asset Attack Surface Management) — технологический подход, представляющий собой подмножество ASM и обеспечивающий единую актуальную видимость всех киберактивов организации.

Место EA…

Корпоративные мессенджеры перестали быть просто чатами для переписки — сегодня они превращаются в супераппы и становятся ядром взаимодействия людей и ИИ-агентов внутри компаний.

Антон Анпилов добавил, что почта и мессенджеры — это разные паттерны потребления: в мессенджеры пишут быстрое, в почте закрепляют официальное.

Потом запускаются пилотные группы, пользователи оценивают мессенджеры, и в конце наступает этап компромиссов — компания определяет, какие требования действительно критичны, а от каких можно отказаться.

«Slack и Telegram — это очень крутые мессенджеры, это большие продукты, мы все ими пользуемся.

Иван Дьяконов назвал причиной ситуацию, когда компания не выбрала ни одного решен…

Где ИИ применяют и считают эффективнымПо данным исследования, чаще всего ИИ применяют в контакт-центрах и службах поддержки — об этом сообщили 75% опрошенных компаний.

«В страховых компаниях, — поясняет он, — инвестиционный анализ раньше требовал дорогих специалистов, которые умели и разбираться в ситуации, и доходчиво объяснять происходящее.

По его словам, проблема не только в процессах и данных, но и в том, как измерить сам результат.

Поэтому основная сложность заключается не только в запуске пилота, но и в его доведении до промышленной эксплуатации.

Полностью автономные решения (без участия человека) внедряют 25% компаний — но в проде они задействованы только у 8%.

В любом случае российское решение отличается от западного — есть небольшие отличия в инфраструктуре и в подходах.

Виталий Беличко добавил, что в прошлом году все вендоры бурно наращивали функциональность, но следующим этапом стала проработка деталей.

Это и тренд, и много маркетинга в это вкладывается».

Мы обрабатываем эти данные в KSN и передаём их во все продукты, которые к нему подключены, в том числе и в NGFW.

ВыводыРынок российских NGFW в 2026 году прошёл этап становления и вступает в фазу зрелой конкуренции.

Обсудили как региональные компании выходят на федеральный рынок, где искать специалистов и что меняется в ИБ с развитием ИИ.

Чтобы посмотреть, как сегодня устроена кибербезопасность за пределами столицы, команда AM Live также отправилась в Томск и посетила пятый юбилейный форум по кибербезопасности «КиберV».

Юбилейный форум «КиберV» собрал команды и компании, которые в обычной работе могут решать совершенно разные задачи, но в вопросах кибербезопасности оказываются по одну сторону.

Представитель ФСТЭК ответил на вопросы участников и отдельно подчеркнул, что не стоит заранее пугать себя новыми требованиями.

Мы пересматриваем информационные потоки, подходы к созданию новых информационных сист…

Kaspersky Secure Mail Gateway (KSMG) — полностью интегрированное решение, объединяющее систему электронной почты и средства её защиты в составе готового к использованию виртуального устройства безопасности.

Добавление маршрута в Kaspersky Secure Mail Gateway 3.1Функция полезна, например, если сообщения разных подразделений или сервисов должны проходить через отдельные шлюзы.

Подключение к LDAP-серверам в Kaspersky Secure Mail Gateway 3.1Функциональные возможности Kaspersky Secure Mail Gateway 3.1На текущий момент управление возможностями осуществляется через веб-консоль.

Создание учётной записи в Kaspersky Secure Mail Gateway 3.1Рисунок 23.

Применение Kaspersky Secure Mail Gateway 3.1Решени…

Разбираемся, что происходит с запросом у посредника, можно ли проверить фактическую модель и на что смотреть российскому разработчику.

Например, в ответе и журналах OpenRouter можно увидеть названия модели и провайдера, который обслужил конкретный запрос.

Как проверить, какая модель отвечает на запросАбсолютно надёжного «паспорта модели» на стороне клиента обычно нет.

Сервис должен показывать фактическую модель и, по возможности, провайдера для каждого запроса, а также позволять управлять резервными маршрутами.

Нужно выяснить, сохраняются ли промпты и ответы, каков срок хранения, используются ли данные для аналитики или обучения и можно ли ограничить передачу отдельным провайдерам.

Разбираем, из чего складывается стоимость скрейпинга, СМС-бомбинга, credential stuffing и LLM-ботов и как подобрать меры защиты, не мешая легитимным пользователям.

В деньгах кажется, что это почти ничего не стоит.

Но благодаря LLM, боты научились смотреть на страницу и понимать, что на ней происходит.

Он подстраивается под изменения, которые раньше его убивали, и пишет тексты (отзывы, заявки, сообщения в поддержку) не хуже, чем человек.

Главное: чем дешевле становится создание ботов и чем быстрее они умнеют, тем важнее защищаться не от конкретного скрипта, а от самой автоматизации.

Проблемами вузов остаются слабая материальная база и отсутствие доступа к российскому ПО и отечественному оборудованию.

Для их оценки в приказе предлагается использовать два подхода: по методике, изложенной в самом документе, и по фактическим затратам.

Как унифицировать требования вуза и Минцифры к трудоустройству сотрудников, чтобы сократить объём документов и согласований.

Также представитель ОмГТУ обратил внимание на то, что у вузов, которые сотрудничают с индустриальными партнёрами, появляется необходимость регулярно отправлять отчёты в Минцифры.

ВыводыИсполнение норм приказа № 270 Минцифры потребует довольно серьёзных усилий как от ИТ-компаний, так и от вузов.

Допустим, на это отводится месяц и ограниченный бюджет.

Экстренное привлечение сторонних специалистов по кибербезопасности — часто по повышенным тарифам и без возможности выбрать оптимального подрядчика.

Презумпция взлома подразумевает ориентацию на факты, а не на формальное соответствие.

Но с их помощью обычно получается понять, как должно быть, а не как есть на самом деле.

Аналитики собирают актуальные и ретроспективные данные внутри инфраструктуры и во внешних источниках, проводят автоматизированный и ручной анализ, оценивают критичность инцидентов и расследуют выявленные атаки.

В 2026 году ИИ оказался по обе стороны найма: алгоритмы помогают компаниям оценивать кандидатов, а соискателям — готовиться к этой оценке.

Такая же формулировка встречается и в обсуждениях у других участников рынка.

В одном случае на массовые позиции приходит до 700 резюме в неделю, на узкоспециализированные и руководящие — около 100.

Например, работодатель может с помощью ГигаЧата или Gemini подготовить тестовое задание, а кандидат с помощью того же инструмента его выполнить.

Результаты опроса К2Тех по использованию ИИ в HR-процессахРиски для соискателяК рискам и барьерам мы бы отнесли те же, что при использовании ИИ в повседневных задачах.

Даниил Бориславский согласился, что это синергетическая работа: бизнес знает, что для него ценно, ИБ предлагает инструменты защиты, а регуляторика добавляет свои требования.

Глеб Марченко как практикующий специалист по защите данных добавил, что в крупных компаниях подразделения информационной безопасности гораздо малочисленнее, чем бизнес-подразделения.

Он отметил, что в прошлом году было очень много мошеннических действий, телефонных «разводов», попыток закрепиться в инфраструктуре.

DCAP прекрасно справляется с классификацией данных в покое, у неё больше времени на анализ, и эта классификация затем используется в DLP для настройки политик безопасности.

ВыводыРынок защиты данных в 2026 год…

Разбираемся, как объединить данные VM, SIEM и CMDB, учесть EPSS и CISA KEV, настроить расчёт риска и расставить приоритеты устранения.

Уровни риска и сроки устранения уязвимостейКак работают вместе VM, SIEM и CMDBКаждый источник отвечает на отдельную группу вопросов.

Актив есть в VM, но не передаёт событияОбратная ситуация возникает, когда VM видит узел, а SIEM не получает от него событий.

Организовать обмен данными между VM, SIEM и CMDB.

ВыводыСвязка VM, SIEM и CMDB помогает оценивать уязвимости в контексте реальной инфраструктуры.

Статистика роста количества уязвимостей в ОС Linux в 1998–2026 гг.

Профили настройки СЗИ в Astra LinuxДля настройки СЗИ в Astra Linux предусмотрены готовые профили, соответствующие требованиям регулятора.

Выбор профиля защиты системы в Astra LinuxАрхитектура СЗИ ОС Astra LinuxДля обеспечения безопасности использования Astra Linux команда разработчиков переработала архитектуру исходной операционной системы.

Трёхзвенная клиент-серверная архитектура ОС Astra LinuxСогласно сертификату № 2557 ОС Astra Linux соответствует требованиям документов: Требования доверия (1), Требования доверия (2), Требования к ОС, Профиль защиты ОС (А первого класса защиты.

Сценарии использования встроенных СЗИ Astra …

В службе безопасности узнали через девять дней - и не от человека, а по срабатыванию правила.

Дальше включается мотивированное рассуждение - так называют работу мышления, при которой человек оценивает доводы не по их силе, а по тому, куда они ведут.

Работает она не потому, что удобнее, а потому, что не требует формулировать вслух, что произошло, - а формулировать стыдно.

Претензии и разбор процесса - потом и не с ним.

Технические средства обнаружения никуда не деваются, речь не о замене, а о том, чтобы к ним добавился самый быстрый источник сигнала.

Но для нечеткой логики добавляют свои правила — «t‑нормы» (для оператора И) и «s‑нормы» (они же «t‑конормы», для ИЛИ):Для И (t‑нормы).

Аналогично ломается и закон противоречия: «А И НЕ А» дает не ноль, а 0.5 (половину).

Мы сравним по итогу данные по CVSS, по EPSS, по «жесткому дереву» (готовая методика SSVC, decision‑tree подход, дающее 5 возможных категорий вместо непрерывной шкалы).

Способы простые: два наивных порога по CVSS, порог по EPSS, комбинация или‑или, и три варианта нечеткой модели с разным бюджетом.

Уязвимости с EPSS 0.35 и 0.97 получали одинаковую срочность, и в топ-1000 модель проигрывала EPSS: 13.0% против 16.2%.

В этой статье рассматривается полный жизненный цикл токена API, от выпуска (issuance) до истечения срока действия (expiration) или принудительного отзыва (revocation).

Токен обновления A | | успешное обновление v Токен доступа B + Токен обновления B Токен обновления A становится невалиднымКлиент должен заменить старый токен новым.

Семья: family_27 Токен A -> Токен B -> Токен C -> Токен DЕсли токен А повторно используется после выпуска токена В, сервер может отозвать всю семью.

Это цепочка решений, которая начинается до создания токена и продолжается после выхода пользователя из системы.

Цель состоит не в том, чтобы построить систему, в которой токен не может быть украден в принципе.

Поэтому сегодня Agent-Ops - это не инициатива только одной компании, а совместной работа нескольких.

Но между «агент убедительно объяснил проблему» и «мы можем безопасно выполнить его рекомендацию» остаётся несколько вопросов.

В Agent-Ops человек задаёт цель, ограничения и критерии успеха, а затем принимает решение о конкретном изменении.

Приведённые числа иллюстрируют процесс; это не результаты внедрения и не универсальные пороги для любой инфраструктуры.

Владелец задаёт цель: восстановить запас свободного места выше 20%, не удаляя рабочие данные и не прерывая работу сервиса.

Разберемся, какую роль в предотвращении подобных схем играют банки и МФО и почему надежная проверка личности заемщика должна быть обязательной частью процесса выдачи кредита.

Соблюдение цифровой гигиены со стороны клиентов обязательно, но это не снимает ответственности с банка или МФО.

Поэтому идентификация должна быть одновременно точной и безопасной: локальная обработка документов без передачи изображений сторонним сервисам и хранения лишних копий снижает риски и для клиента, и для кредитора.

Это позволяет сотруднику финансовой организации принимать решение на основании конкретных признаков, а не непрозрачного вердикта алгоритма.

При этом обработка выполняется локально: изображения и перс…

Для Active Directory и Entra такие карты существуют и постоянно обновляются — просто потому, что вокруг AD за 25 лет вырос отдельный рынок специализированных инструментов безопасности.

Мне стало любопытно: а что будет, если нарисовать такую же карту для российской службы каталогов РЕД АДМ.

Эти интеграции — общего назначения: они видят события на уровне хоста, сети или файлового трафика, а не специализируются на поведении именно директории.

Специализированный инструментарий безопасности именно директории только начинает появляться — и появляется он пока не в виде зрелого партнёрского рынка, а в виде отдельных, ещё не анонсированных публично разработок вроде той, что я описал выше.

Это не пре…

Это не «анонимизация навсегда» и не юридическая консультация.

Модель может продолжить фразу, но хуже сопоставляет сущность с данными из поиска и не понимает, какие операции допустимы.

Внутри одного запроса и связанных результатов нужно понимать, что [PERSON_1] — тот же объект, что и в найденных документах.

В prompt уходит [PERSON_1] , а не исходная строка; внутренний entity_id справочника в prompt не передаётся.

Для этого нужно перестать считать плейсхолдер заменой имени и начать проектировать слой идентичности — с mapping, жизненным циклом, правами и тестами.

Поэтому Хабр совместно со Сбером запускают новый сезон статей «Код будущего», в котором вы сможете рассказать о своей практике использования ИИ в создании ПО и взаимосвязи ИИ и open source.

В рамках этой темы мы ждём от вас практических кейсов внедрения ИИ в процессы: планирование, написание кода, ревью, тестирование, мониторинг.

Open source для ИИ и ИИ для open sourceЭта тема — своего рода мост от традиционной разработки с открытым кодом к новой, ИИ‑нативной реальности.

Открытые модели демократизируют доступ к ИИ, а ИИ, в свою очередь, делает поддержку опенсорс‑проектов быстрее и качественнее.

Его настоящая сила — в экспертизе, которую люди вкладывают в систему, и в готовности делиться отк…

За несколько лет многое поменялось — и в продукте, и в компании.

Не 403 на всю коллекцию, а нормальный отфильтрованный список — желательно прямо фильтром в SQL, а не выгрузкой всей таблицы в память с последующим просеиванием.

У решения «можно ли product:create » экземпляра нет — создаваемый товар ещё не существует, резолвить роль не на чем.

Движок мы не писали — решения принимает upstream OPA, и это принципиально: базируемся на CNCF-стандарте, а не на самописном ядре.

Разница не в том, есть ли в модели связи, а в том, кто хранит граф и кто по нему ходит.

В материале про то, почему ИИ-агентов нужно моделировать как угрозу, а не просто как инструмент продуктивности.

КонтрмераТребуйте сканирование образов, генерацию SBOM, подписанные артефакты и гейты продвижения, и применяйте к ИИ-коду те же требования к ревью и релизу, что и к человеческому.

Проект был подан в CNCF Sandbox в марте 2026, но заявка еще на рассмотрении, поэтому оценивайте его как ранний, а не как управляемый CNCF.

Инструменты есть, но зрелые, поддерживаемые варианты делают вендоры, так что это пока зона для оценки, а не готовый выбор.

Вопрос не в том, будут ли ваши разработчики использовать ИИ.

Вариант решения — вынести управление доступом за пределы контекста модели: агент работает не с ключом, а с MCP-инструментом, у которого физически нет операции чтения секрета.

Proxy — принимает запрос с pass вместо ключа, валидирует его, расшифровывает secret в памяти на время одного запроса, подставляет в исходящий запрос к провайдеру.

Подключение MCP-сервераРегистрация — обычный веб-флоу (GitHub OAuth или magic link), результат — токен mcp_… для доступа к самому MCP-серверу (не путать с pass — доступом к провайдерам).

Это ограничение контракта API, а не соглашение об использовании: агент физически не может запросить то, чего нет в спецификации инструмента.

MCP-доступ агента не расширяет эт…

Просто задумано не то, что от этого ждут, - а в записи DMARC стояло значение, которое ничего не запрещает.

SPF проверяет не тот адрес, который вы видитеВ письме два разных адреса отправителя, и это не ошибка, а устройство протокола.

DKIM устроен иначе: он подписывает заголовки и тело, и From в подпись обычно входит.

Но DKIM отвечает только на вопрос «подпись верна», а не на вопрос «а тот ли домен подписал».

У таких доменов свой DMARC и свои валидные подписи, и с точки зрения протокола всё в порядке.

Ниже: почему встроенных защит не хватает, как устроен движок, три механизма, которых нет в обычных hook‑скриптах, и что он честно не умеет.

Честные ограниченияПроект молодой, и это не место для маркетинга.

c"u"rl , $'curl' : классификатор пока разбирает не всё.

curl -d @~/.aws/credentials , cat ~/.aws/credentials | curl -d @- и curl -d "$(cat .env)" это не secret.egress , а класс fs.secrets , который дефолтная политика запрещает только при заражённой сессии.

В 0.10.1 корпус вынесли из бандла в отдельный JSON‑файл, который читается и валидируется в рантайме, а не встраивается в исполняемый код.

ФСТЭК России 25.11.2025 (ссылка)Методический документ «Состав и содержание мероприятий и мер по защите информации, содержащейся в информационных системах», утв.

ФСТЭК России 12.04.2026 (ссылка)Требования о защите информации, содержащейся в государственных информационных системах, иных информационных системах государственных органов, государственных унитарных предприятий, государственных учреждений, утв.

ФСТЭК России 25.11.2025Название говорит само за себя: документ предусматривает описание процедуры поиска уязвимостей в системах защиты информации информационных систем, в т.ч.

Методический документ «Состав и содержание мероприятий и мер по защите информации, содержащейся в информационных сис…

Свежий четвертый спецвыпуск «Хакера» уже напечатан и доступен для быстрого заказа.

Каждый бумажный спецвыпуск — это полноценный глянцевый журнал на 240 полос, содержащий практические материалы, технические разборы, исследования и гайды.

В него вошло более 20 лучших материалов «Хакера» за 2021–2022 годы — от практики пентеста и фаззинга до реверса и изучения необычного железа.

В продаже остаются и другие бумажные сборники «Хакера», но их запасы постепенно сокращаются на нашем складе: первые два спецвыпуска уже распроданы полностью, а дополнительных тиражей мы не планируем.

Поэтому, если какого-то номера не хватает в твоей коллекции, лучше не откладывать покупку в долгий ящик.

Он маскируется под расширение для браузера и использует Chrome или Edge как полноценный бэкдор.

Малварь способна похищать данные из браузера и перехватывать сессии, а через Native Messaging получает доступ к ОС и может выполнять команды на зараженной машине.

Вредоносное расширение внедряется в профиль Chrome или Edge, обходя Chrome Web Store и стандартные предупреждения браузера.

Кому принадлежат PEEP и его инфраструктура, пока остается неясным, но в исходниках вредоноса исследователи обнаружили артефакты на китайском языке.

Это помогает PEEP уклоняться от обнаружения и превращает браузер в инструмент для хищения учетных данных, перехвата сессий и удаленного выполнения команд.

Аналитики из компании Bitdefender обнаружили массовую схему, в рамках которой недобросовестные разработчики злоупотребляют программой Google Play Early Access для распространения мошеннических Android-приложений.

С ее помощью разработчики могут собирать отзывы тестировщиков до официального релиза, однако публичные комментарии и рейтинги для таких приложений недоступны.

Для продвижения таких проектов используются в том числе дипфейки со знаменитостями, спортсменами и актерами, которые якобы рекламируют крупные бонусы.

К примеру, разработчики могут первоначально загрузить игру в Google Play под названием в духе Grand Theft Auto V (Early Access), дождаться ее индексации в поиске Google, а зате…

Воз­можно, ты уже стал­кивал­ся с тем, что прог­рамма для работы с под­свет­кой — это зачас­тую монс­тру­озное поделие, которое пос­тоян­но висит в фоне и отжи­рает дра­гоцен­ную опе­ратив­ку.

Что­бы изба­вить­ся от этой зависи­мос­ти, энту­зиас­ты дела­ют софт для управле­ния под­свет­кой девай­сов раз­ных про­изво­дите­лей.

Се­год­ня пос­мотрим, как управлять под­свет­кой и, при желании, дру­гими парамет­рами — нап­ример, DPI мыши или наз­начени­ем кла­виш, — обра­щаясь нап­рямую к устрой­ствам.

Работа с устройствами в WindowsВо­зить­ся с устрой­ства­ми будем в Вин­де: в Razer, Logitech и дру­гих ком­пани­ях не выпус­кают офи­циаль­ный софт для нас­трой­ки железа для Linux.

Но если задать…

Аналитики The Shadowserver Foundation предупреждают, что более 8300 доступных через интернет инстансов Gitea не защищены от критической уязвимости CVE-2026-60004.

Баг уже эксплуатируется в реальных атаках и позволяет выполнять произвольные команды на уязвимых серверах.

По его словам, уязвимость связана с эндпоинтом API diffpatch и позволяет атакующему с правами на запись в репозиторий отправить специально подготовленный патч.

«Атакующий с обычными правами на запись в репозиторий получает возможность выполнять произвольные шелл-команды с правами пользователя ОС, от имени которого работает Gitea», — объясняют разработчики.

Дело в том, что в Gitea по умолчанию включена открытая регистрация, по…

Специалисты компании Zimperium обнаружили новую Android-малварь Mantax Otax, которая обладает функциями вымогателя и шпионского ПО.

Вредонос шифрует файлы и похищает данные с зараженных устройств, следит за пострадавшими и даже может запугивать их с помощью полноэкранных видео, изображений и голосовых сообщений.

По данным исследователей, за созданием Mantax Otax стоят злоумышленники из Индонезии.

Этот механизм заметно ограничивает доступ приложений к общему хранилищу, поэтому Mantax Otax может зашифровать только файлы в каталоге приложения во внешнем хранилище.

Также Mantax Otax способен похищать PIN-код экрана блокировки, читать SMS и одноразовые пароли, собирать историю звонков, список ко…

По итогам проведенного расследования в компании не обнаружили признаков использования скомпрометированных учетных данных или дальнейшего проникновения во внутреннюю инфраструктуру Surfshark.

Но в компании подчеркивают, что инцидент не затронул пользователей и продакшен-инфраструктуру VPN-сервиса Surfshark, и злоумышленники не сумели распространить атаку на другие системы.

«VPN-трафик и история просмотров в принципе не логируются и не сохраняются, а приложения и браузерные расширения на устройствах пользователей никак не изменялись», — заявили в Surfshark.

После взлома в Surfshark сменили все внутренние учетные данные, которые потенциально могли попасть в руки хакеров, и отозвали скомпромети…

22-летний гражданин Сингапура Мэлоун Лэм во вторник признал себя виновным по федеральному обвинению в создании ОПГ.

Лэм бросил школу после восьмого класса, переехал из Сингапура в США и поселился в Майами, штат Флорида.

Тогда Лэм и его сообщники обманом выманили у жителя Вашингтона биткоины на сумму свыше 245 млн долларов.

Деньги также шли на люксовые сумки и часы, аренду домов в Лос-Анджелесе, Хэмптонсе и Майами, а также на автомобили премиум-класса стоимостью от $100 тысяч до $3,8 млн.

Спустя примерно месяц после кражи агенты ФБР арестовали Лэма в Майами.

Разработчики Google выпустили обновление для браузера Chrome, которое устраняет 230 уязвимостей, включая уже находящуюся под атаками 0-day-уязвимость в движке V8 (CVE-2026-87491).

Свежая уязвимость представляет проблему out-of-bounds записи в V8 — движке JavaScript и WebAssembly, который используется в Chrome.

Специалисты Google предупреждают, что для CVE-2026-87491 уже существует эксплоит, и уязвимость используется в реальных атаках, однако подробности пока не раскрываются.

Патчи вошли в Chrome 153.0.8010.36 для Windows и Linux, а также в 153.0.8010.37 для macOS.

Для сравнения: за весь 2025 год в Chrome исправили восемь 0-day, которые уже применялись в реальных атаках.

Представители производителей аппаратных криптокошельков Trezor и BitBox предупредили пользователей о фишинговых письмах, замаскированных под срочные уведомления безопасности.

В Trezor заявили в среду, что почтовый провайдер компании был взломан, и призвали пользователей не взаимодействовать с мошенническим письмом под заголовком «Критическое предупреждение безопасности: уязвимость энтропии STM32».

В Trezor опровергли подлинность письма и подтвердили, что это фишинговая атака.

В Trezor подчеркнули, что собственные системы компании взломаны не были, а аппаратные кошельки, приватные ключи и сид-фразы остались в безопасности.

В Trezor отметили, что ранее получили заверения об удалении этих стар…

Разработчики биткоин-кошелька Alby Hub предупредили о критической уязвимости, которая позволяла атакующим захватить контроль над чужим кошельком и похитить средства.

Баг затрагивал версии Alby Hub с 1.7.0 по 1.18.5.

Проблема усугубляется тем, что пользователи могли собственноручно открывать доступ к Alby Hub через интернет, в соответствии с документацией проекта.

Хотя Alby Hub рассчитан на работу в приватной сети, его сервер по умолчанию привязывался не к 127.0.0.1, а к 0.0.0.0.

При этом отдельные гайды по-прежнему описывают конфигурации, которые, по сути, открывают доступ к Alby Hub из интернета.

Даль­ше:вос­про­изве­дем уяз­вимость на реаль­ном устрой­стве;пов­торим про­цесс поис­ка уяз­вимос­ти;изу­чим патч;раз­веем миф, что для поис­ка уяз­вимос­тей в роуте­рах и устрой­ствах IoT обя­затель­но сидеть с паяль­ником, осциллог­рафом и «Нек­рономи­коном».

Я буду вскры­вать свой роутер, но про­шив­ку мож­но най­ти на офи­циаль­ном сай­те, рас­паковать с помощью binwalk и пов­торить иссле­дова­ние.

This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.

Если я один раз соберу набор дей­ству­ющих session id ( sid ), то пос­ле перезаг­рузки устрой­ства они сно…

В Microsoft представили новые API для Windows 11, с помощью которых приложения смогут определять возрастную категорию пользователя ОС (ребенок, подросток или взрослый).

Новые API Windows Age будут использовать информацию, связанную с аккаунтом Microsoft, и передавать приложениям только возрастную категорию пользователя: младше десяти лет, 10–12, 13–15, 16–17 или 18 лет и старше.

В Microsoft описывают этот подход как «Verify once → use everywhere» («подтверди один раз — используй везде»).

Также разработчики отмечают, что планируют сделать настройку родительского контроля заметнее во время первоначального конфигурирования Windows в отдельных регионах (например, во Франции).

В настоящее время …

Именно по такому принципу строится курс « Пентест WEB », созданный «Хакером» и лабораторией «Хаксет»: тебя ждет последовательная программа из 11 статей, видеоуроков и практических лабораторий для самостоятельной работы.

Сначала ты освоишь разведку: сканирование сети, поиск открытых сервисов, анализ баннеров и сопоставление версий ПО с известными уязвимостями.

Затем разберешь способы получения первоначального доступа и познакомишься с reverse shell, bind shell и web shell.

Статьи «Хакера» подробно объясняют устройство атак и работу инструментов, а видео и лаборатории «Хаксет» помогают сразу применить знания на практике.

Этот последовательный самоучитель подойдет и для первого знакомства с ве…

Специалисты компании Netskope обнаружили масштабную вредоносную кампанию, в которой атакующие используют более 5400 взломанных сайтов для распространения ClickFix-пейлоадов.

При этом сам вредоносный код хранится в смарт-контрактах BNB Smart Chain (BSC), что заметно усложняет блокировку инфраструктуры хакеров.

Но в этом случае скрипт сам генерирует и предложение, и ответ, после чего передает их локально в созданное соединение.

Всего за время наблюдения исследователи выявили более 5400 скомпрометированных сайтов, задействованных в этой кампании, и активность злоумышленников растет.

Так, в августе 2026 года наблюдалось почти 400 взломанных сайтов в сутки, а максимальный показатель достигал 536.

GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours of public disclosure.

The problem, per GitLab, stems from "improper path confinement and missing authentication enforcement in the repository commits API."

The issue, it said, allows an external attacker to read log files and GitLab-specific configuration files to obtain credentials, secrets, and sensitive information.

Also patched by GitLab in versions 19.3.2, 19.2.6, and 19.1.8 is a critical insecure deserialization bug in GitLab EE (CVE-2026-87719, CVSS score: 9.9) that could result in information disclosure.

Organizations running s…

Anthropic on Thursday said it identified and disrupted industrial-scale illicit distillation attacks against Claude from seven labs based in China, including Alibaba, Moonshot, DeepSeek, Z.ai (aka Zhipu), and MiniMax.

Frontier AI labs in the West, including those from Google and OpenAI, have repeatedly called out distillation attacks aimed at their models.

"DeepSeek, Xiaomi, and Moonshot fed conversations between their own models and users into Claude," Anthropic said.

"In other cases, unauthorized labs rerouted requests from their users to Claude -- without the knowledge or permission of those users -- to harvest exchanges between users and Claude for training," Anthropic pointed out.

"The…

The threat actor has also been observed deploying web shells and a browser exploitation C2 framework against other targets.

GTG-54002 , a commercial "influence-as-a-service" operation that used Claude to mass-produce and rewrite political content across about 70 fabricated news websites.

GTG-54006 , a sustained, automated disinformation network that used Claude to generate fabricated Bengali-language news in Bangladesh and promote the country's Awami League party.

, a sustained, automated disinformation network that used Claude to generate fabricated Bengali-language news in Bangladesh and promote the country's Awami League party.

The threat actor has also used Claude to build SECOMS64, a m…

Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get ahead of the detection curve.

Once the artifacts can bypass detection, they are staged on disposable hosting servers to which victims are redirected to so as to retrieve the malware via phishing, ClickFix, and DNS hijacking schemes.

"The actor used AI at every point in their operations," Anthropic said.

"In on-premises environments, the actor used AI to monitor the stealth and persistence of their implants.

Previously, defenders might have been able to slow an attacker's operational tempo via the deployment of a new detecti…

How Autonomous Penetration Testing Reveals What Attackers Can Actually ExploitSeverity scores tell you what vulnerabilities could mean in isolation.

Why Autonomous Penetration Testing Is Replacing Point-in-Time TestingTraditional penetration testing earns its value from human expertise.

Autonomous Penetration Testing Makes Continuous Penetration Testing PossibleContinuous security validation has been on the radar for a while.

Autonomous Penetration Testing at Senior-Pentester SkillThe interesting development in autonomous penetration testing isn't that AI can automate individual pentesting tasks.

About BreachLockBreachLock is a global leader in offensive security, delivering scalable and co…

Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of self-hosted servers and plant backdoors, cloud security company Wiz said in a report.

Wiz saw the attacks between August 15 and September 8.

Every case Wiz saw followed a similar pattern.

Wiz saw them created both through the two-flaw chain and through CVE-2026-82329.

Most of the ones Wiz saw carry proof-of-concept names such as 0xTerror, or svc_ and labadmin_ followed by random characters.

In the patched version Gen examined, the built-in browser engine is still the 2020 version, and its sandbox is still switched off.

The flaw Gen found is in the Windows version.

When anything opens an sgbiz: link, Windows passes it to biz_helper.exe, which reads the link and starts the Sogou component it names.

Of the 41 Chromium V8 flaws in CISA's catalog, at least 32 were fixed in Chrome releases that came out after the version Sogou ships.

What Tencent Fixed, and What It LeftGen reported the flaw to Tencent on April 9, 2026, and it is tracked as CVE-2026-51990.

PaperCut on Thursday released a new security maintenance release that replaces all previously published emergency patches that were pushed to address two security flaws that have come under active exploitation.

"These are Regular Maintenance Releases (MR) that have gone through complete QA testing," it said.

"They contain all of the security fixes issued in Emergency Patch Releases 1, 2 and 3, plus additional security hardening, and they have been through our standard release testing process."

It's worth noting that the release supersedes the emergency patches that were shipped to address two security flaws as well as two regressions, along with various hardening and mitigation against pote…

Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC) vulnerabilities.

It can be paired with other Cisco Secure FMC vulnerabilities to elevate privileges.

Cisco Talos said it identified three clusters of post-compromise activity of FMC instances associated with state-sponsored and crimeware threat actors.

"Customers are strongly advised to apply hotfixes for affected software versions already released by Cisco for CVE-2026-20079 and CVE-2026-20316," Cisco said, adding it intends to ship a comprehensive hardening release for various internally discovered vulnera…

A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?”An extension asks for access and takes too much.

An exposed system stays exposed.

Mostly access, trust, weak edges, and someone willing to keep poking.

Extensions, packages, redirects, sessions, AI tools, exposed services — most of the trouble begins when something familiar is allowed to do too much.

Security still breaks at the boring handoffs: what gets access, what stays exposed, what gets inherited, and what nobody checks twice.

Bad actors are misusing Google Play's Early Access program to push deceptive apps that claim to offer money, rewards, casino winnings, and premium content.

Early Access apps are apps that haven't been released on the official Android app marketplace.

One aspect worth highlighting is that users cannot leave public reviews or star ratings for apps that are available in Early Access.

"A recurring pattern among suspicious Early Access apps involves promising cash rewards, PayPal payouts, cryptocurrency earnings, gift cards, free spins or casino jackpot," the Romanian cybersecurity company said in a report shared with The Hacker News.

"Google's Early Access program remains a valuable tool for de…

Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates.

Check Point disclosed the flaws on September 9 in a notice to its customer community, and began delivering fixes the same day.

In June and July, Check Point patched critical flaws in these products that it said were already being exploited when it announced them.

It was one of three flaws Check Point patched that month, two of which affected the Security Management Server, the same component CVE-2026-85103 reaches.

Check Point has not published indicators of compromise for either of the new flaws.

It's worth noting the same IP address was also flagged by Arctic Wolf in connection with the same activity last week.

"As part of the adversary's exploit development and testing, they built and attacked a lab environment that included the vulnerable PaperCut software and an Active Directory server," the threat intelligence firm said.

"The strongest AI impact in this campaign was not a novel exploit technique," Blackpoint said.

"The operator was using an iterative development process in which AI-supported research, coding, testing, troubleshooting, and campaign execution continuously informed one another.

Context was preserved as the project moved from vulnerability research to exploit valid…

The Gigabud banking trojan now installs a second Android app that creates a work profile on an infected phone and drops a tampered banking app inside it, security firm Group-IB said in a report published on September 9.

Android's platform documentation says any app in the phone's main profile can start the setup for a work profile, and that the user is told what a work profile does before one is created.

When the victim opens their real banking app, a fake login screen appears on top and captures their keystrokes.

Putting a banking app inside a container to get around its defenses is not new.

Promon described FjordPhantom in 2023, which ran a real banking app inside a virtual container so i…

Malware developers have long adapted their code and tactics to the defenses and scrutiny that are likely to stand in their way.

Using various evasion and anti-analysis methods, they routinely attempt to hinder code analysis or prevent their malware from revealing its true behavior while under inspection.

Reporting on the same broader campaign, StepSecurity found a prompt that flat-out instructed any analyzing model that parsed the file to disregard the malicious code and report the package as clean.

Some parts of the malicious code could be concealed under the pretense of being confidential information or other sensitive data.

Crucially, however, no single LLM engine should have the sole au…

The technology might be impressive, but a simple technique could stop the scammers in their tracks: a pre-agreed safe word.

What is a safe word?

But suggest some scenarios in which it would be a good idea to request a safe word.

It’s important to have a backup if someone can’t remember the safe word.

But a safe word is a fantastic, free option for uncovering deepfake audio fraud like fake/virtual kidnappings.

But across the globe, policymakers and public opinion are forcing tech platforms to better police this content.

What should I do if I’ve been deepfaked?

Google: Try Google’s “remove personal information” tool (or here) and the legal removal request form to remove non-NCII from search results.

Try Google’s “remove personal information” tool (or here) and the legal removal request form to remove non-NCII from search results.

The first point of call is to contact the publisher to request removal.

Details about the Hugging Face hack, critical infrastructure under attack, a spoofed in-flight Wi-Fi network, and more of this month's cybersecurity newsWith August coming to a close, it's time for ESET Chief Security Evangelist Tony Anscombe to look back at some of the top cybersecurity stories that have made the news over the past month.

Here's some of what caught Tony's attention:OpenAI has disclosed more details about how its agents hacked AI collaboration platform Hugging Face.

Delta Airlines is investigating an incident where a flight passenger reportedly used an unidentified device to spoof the airline’s in-flight Wi-Fi network.

What are the lessons that businesses and critical infra…

And of course, linking our professional and personal social media accounts is a simple task for AI.

For example, fraudsters could use personal information to craft a social engineering attack designed to harvest your work credentials or information.

Losing your personal information is one thing.

What you can do about AI-powered OSINTWhen it comes to AI-powered reconnaissance, there are things you can control and things you can’t.

Old social media photos are easier to remove, but few of us have the time to trawl through our entire digital life to remove anything potentially useful to criminals.

So it is with QR codes, which have become a common sight on menus, lampposts and parking meters – and, increasingly, in emails over recent years.

Most importantly, they take the victim from a relatively well-protected corporate environment to a potentially unmanaged mobile device, thus bypassing business-grade security.

Malicious QR codes are frequently embedded in alerts urging users to secure their account, or authenticate to confirm their details.

Encourage employees to avoid scanning QR codes in unsolicited emails and report anything suspicious.

Next, consider technical controls, including email security from a reputable vendor to minimize the risk of quishing emails ending up in users’…

The accelerated discovery of previously unknown software vulnerabilities has been making headlines for months.

It’s an issue that has even led the US government to create a vulnerability clearing house named Gold Eagle to coordinate research efforts in vulnerability discovery, mitigation and fixes.

A keynote at Black Hat USA 2026 detailed research by associate professor Yan Shoshitaishvili and his undergraduate students at Arizona State University on the expanding use of AI models for vulnerability discovery.

The team then trained the GPTs using the properties of previously known vulnerabilities and discovered approximately 1,000 vulnerabilities.

If this logic prevails, we may reach the cal…

Hugging Face disclosed that it had been attacked by AI; OpenAI came clean and declared that it was two of their AI models that had caused the breach.

A very late addition to the Black Hat agenda was a presentation by OpenAI’s team providing the details of the Hugging Face incident as they saw it and, importantly, the timeline.

The agents concluded that their task set could be completed by breaking out their sandbox and accessing external (Hugging Face) systems.

The target was Hugging Face: this is where the agents wanted to get, and they did.

On July 16th, Hugging Face disclosed an incident in which swarms of autonomous AI agents had breached its infrastructure.

The conference opened with keynotes followed by a fireside chat and a panel featuring mainly senior US government officials.

The second part of the opening keynote included Nick Andersen, Acting Director, CISA; Katherine Sutton, Assistant Secretary of War for Cyber Policy; and Brett Leatherman Assistant Director, Cyber Division, FBI.

I do agree with the ruthless approach, but without some form of regulation the boundaries on the use of AI remain blurred.

The Assistant Secretary of War for Cyber Policy made a fabulous analogy when pressed on the struggles regarding resourcing in the cybersecurity industry: you don’t want a pediatrician performing heart surgery.

We talk about autonomous AI at…

The AI tutor market is growing fastThe market for AI tutoring tools is booming.

Today, you can find various types of AI tutor tools to buy and use.

This happens when AI tools are tricked into ignoring their safety guardrails and display untrusted content.

If you’re keen to get your kids in front of an AI tool to help with private tutoring, first understand the difference between a simple co-pilot and a dedicated ITS.

So if you’re keen to try AI tutors, be sure to stay updated on what’s available out there.

Researchers at Sysdig have documented what they assess to be the first case of an end-to-end ransomware operation executed by an agentic threat actor.

What can organizations do to stop phantom squatting from harming their brands, and what other lessons do these incidents hold for defenders?

Watch Tony's video to find out and be sure to check out the June 2026 edition of his monthly security news roundup for more insights.

Before you go, learn about the first AI-powered ransomware, named PromptLock and discovered by ESET researchers last year.

To learn more about cutting-edge AI defense layers, read the AI at ESET white paper.

The screenshot may look convincing, but it doesn’t necessarily prove that the payment, booking or conversation is genuineSomeone sends you a screenshot showing that a payment has gone through.

Why screenshot aren’t proof on their ownA screenshot is ultimately just an image of what appeared on a screen.

Reassured, you send the item off, only to find out the screenshot was a fake and you’re not getting your money.

You receive a password reset code, then get a text message (maybe impersonating a friend) asking you to screenshot and send it.

This screenshot is fake (source: Reddit)Challenges for businessesFrom a business perspective, internal and customer-facing teams are often provided with sc…

UEFI shim bootloader and UEFI Secure BootTo understand the impact that such vulnerable shims can have on UEFI Secure Boot-protected systems, we need to understand how UEFI Secure Boot works, and how signed UEFI shim bootloaders extend the Secure Boot trust chain.

In this section we’ll look at UEFI Secure Boot basics, how UEFI shims extend the UEFI Secure Boot trust chain, and two shim-related features: Machine Owner Key (MOK) and Secure Boot Advanced Targeting (SBAT).

For anyone already familiar with the theory, we recommend jumping directly to the section Bypassing UEFI Secure Boot using old shims.

UEFI shim bootloader and Secure BootWith Linux distributions supporting UEFI Secure Boot, th…

A view of the H1 2026 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts.

The first half of 2026 shows how attackers continue to improve the efficiency and scalability of their operations.

In H1 2026, ESET analyzed nearly 900,000 AI skills – small functional components used by AI agents – and identified tens of thousands of suspicious and thousands of outright malicious instances.

ESET detections of this vector more than doubled between H2 2025 and H1 2026, indicating sustained activity and adaptation.

ESET Research has documented over 100 EDR killers used in the wild, with new variants appearing regularly.

Organizations are right to pay attention, especially because malicious use of AI makes old gaps a more urgent test of an organization’s cyber readiness.

AI and the basics“AI-powered malware” is cited as the top concern of global SMBs for the year ahead, according to the ESET SMB Cyber Readiness Index 2026.

Lack of security monitoring (22%): You might have plenty of security tools, but do you have a single, centralized place to collect, correlate and flag alerts?

Malicious email detection trend in 2025 (source: ESET Threat Report H2 2025)Tried-and-tested solutions to age-old threatsThis isn’t to say that SMBs should ignore AI-enabled threats.

True cyber readiness means being able to prevent,…

The result was at least 440 compromised PaperCut instances across 395 identified organizations in 48 countries.

“As part of the adversary’s exploit development and testing, they built and attacked a lab environment that included the vulnerable PaperCut software and an Active Directory server.

The agents ran on OpenAI’s Codex harness paired with a DeepSeek model, along with publicly available offensive security tools.

Help Net Security reported that PaperCut Software confirmed exploitation of the two vulnerabilities in late August and released emergency patches, urging customers to restrict access to the Application Server from the public internet.

By country, the United States recorded the …

Days after reports linked IDScan to a dark web database holding more than 153 million driver’s license scans, the identity verification company has confirmed hackers accessed customer data stored on its cloud platform.

“On or around September 1, 2026, IDScan.net received information indicating that certain data may have been accessed without authorization.

The data at risk includes names and driver’s license or other government-issued identification numbers.

He said the source flagged it to him because the seller had “offered my Virginia drivers license as a free sample” to prove the data was real.

Shortly after this story was published, the Nexus identity theft service disappeared from the…

Kiteworks has acquired Bonfy.AI, extending runtime data governance across its control plane.

The acquisition enables organizations to govern data exchanges as they happen, whether initiated by a person, machine, or autonomous agent.

Enterprises have invested a decade in data discovery and posture management, building detailed inventories of the sensitive data that sits inside their data stores.

With this acquisition, Kiteworks complements that value by governing that same sensitive data as it is exchanged into the third-party ecosystem.

Enterprise-wide data exchange control from popular data repositories and systems of record.

Automox has announced its AI-speed Mitigation Worklet Pipeline, which automates mitigation to reduce risk from the increased volume and velocity of frontier-model AI vulnerabilities.

Since 2019, Automox Worklets have mitigated risk across billions of policy runs and millions of endpoints.

Automox Mitigation Worklets fix that.

“AI is increasing the speed of vulnerability discovery and exploitation, and Automox Mitigation Worklets are designed to close that gap,” said Justin Talerico, CEO of Automox.

Mitigation Worklets are available now to customers with Worklet Catalog access.

Blocking a device they did not own cost between $2.50 and $4 and took between about 20 and 80 seconds.

When you report a phone stolen, the carrier drops that number into a database called an Equipment Identity Register.

None of the three verified a Social Security number or a government ID when setting up a prepaid account, and prepaid customers could file lost-device reports the same as anyone else.

The team submitted reports for a smartwatch, for cellular development boards used in industrial equipment, and for a phone that physically cannot operate on the carrier’s frequencies.

The GSMA acknowledged the findings and passed them to its device security group.

In this Help Net Security video, Kerri Shafer-Page, VP of Incident Response at Arctic Wolf, walks through the ransomware decision tree in this video.

Someone has to know the network well enough to judge what pulling a system offline does to client data, a manufacturing line, or a website.

Shafer-Page treats paying as a business decision, noting that a demand can cost less than an insurance retention and higher renewal rates.

She argues law enforcement belongs in the playbook, since agencies may know the threat actor and can help you avoid sanctions problems.

Communication matters too, from cyber legal counsel on disclosure deadlines to a spokesperson and a prepared help desk.

Companies that judge phishing simulation programs by how often employees click simulated attack emails may be overlooking more important indicators of cyber resilience, according to Pistachio’s Phishing Behaviour Report 2026.

Construction recorded a 41.31% cumulative click rate and a 16.47% leak rate, the highest departmental figures in the dataset.

Its click rate was comparatively low, but its 13.17% report rate was the lowest of any named department.

Logistics combined an above-average click rate with a below-average report rate of 17.11%, suggesting that its exposure was not being offset by reporting.

Teams that struggle to recognize suspicious messages may require different exercises fr…

In Salesforce, these relationships can involve users, AI agents, APIs, integrations and external platforms.

Each trust relationship has a responsibility, scope and boundary that describe what is being relied upon, where that trust applies and its limits.

The findings define trust relationships, including their responsibilities, scope, boundaries and supporting assumptions.

Assessing trust relationshipsAfter Discovery identifies key trust relationships, Governance assesses which require attention and whether they still serve their intended purpose.

Trust drift occurs when a trust relationship moves away from its original purpose, scope, limits or supporting assumptions.

Canonical shipped Ubuntu 24.04.5 LTS, bundling security updates and fixes for high-severity bugs into new installation media for the “Noble Numbat” release.

Nine other flavors, including Kubuntu, Xubuntu, Ubuntu MATE, Ubuntu Studio, and Edubuntu, also moved to version 24.04.5, each carrying its own release notes for flavor-specific changes.

Canonical built this release around security corrections and stability fixes, the priorities that matter most for an LTS version users expect to leave alone for years.

Ubuntu Desktop, Ubuntu Server, Ubuntu Cloud, and Ubuntu Core get five years of maintenance from the original 24.04 LTS release date, not from this point release.

Update Manager will offer …

Here’s a look at the most interesting products from the past week, featuring releases from Akeyless, Orchid Security, Scytale, and Securin.

Orchid Security targets AI agent risk with drift detection and kill switchesOrchid Security has announced identity drift detection and application-level kill switches for AI agents.

AI agents can find and use the identity debt already embedded across the enterprise: hard-coded credentials, orphaned accounts, unmanaged authentication paths and excessive permissions.

It works on top of Akeyless SecretlessAI, a credential protection layer that keeps credentials out of AI agents and brokers access to enterprise systems.

Scytale expands vendor risk managemen…

Google turned on a transfer feature in Android that moves passwords and passkeys straight from one password manager to another, with no file to download along the way.

How the transfer worksYou open the new password manager, choose its option to import or copy from another provider, and the app hands the job to Android.

Android then detects the password managers already on the device and shows you which ones it can pull from.

Tap Continue and Android sends you back into the old manager to select, review, and authorize what moves.

Which apps have itFour managers support the flow today: Google Password Manager, 1Password, Bitwarden Password Manager, and Dashlane.

Attackers are calling or texting employees on their personal phones, posing as internal IT staff, in a social engineering campaign that tricks them into handing over access to corporate cloud accounts.

Once inside, they pull files and email from Microsoft 365 apps, SharePoint, OneDrive, and inboxes, for weeks at a time, according to Microsoft Security Research.

Employees are sent a link that opens a page built to look like a Microsoft sign-in screen.

Instead, the passkey narrative serves as a convincing pretext to guide victims through adversary-in-the-middle (AiTM) phishing or device-code authentication flows,” Microsoft noted.

Microsoft Graph activity can be difficult to detectWith a foot…

State-sponsored and financially-motivated attackers are actively exploiting CVE-2026-20079, a critical authentication bypass vulnerability in Cisco Secure Firewall Management Center (FMC), which is used for centrally managing multiple Cisco Secure Firewall devices across a network.

Two FMC vulnerabilities under active attack“Cisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco’s Secure Firewall Management Center (FMC) Software,” the company’s researchers confirmed on Wednesday.

These are the above mentioned CVE-2026-20079 and CVE-2026-20316, which Cisco flagged as exploited in the wild in July 2026.

CVE-2026-20079 was discovered by Brandon Sakai of Cisco during …

Scytale has announced the launch of their latest AI-powered third-party risk management (TPRM) capabilities within its Vendors module.

The release further extends vendor risk management from a periodic review exercise into a continuously updated vendor risk intelligence engine, giving security and GRC teams a current view of every vendor in their ecosystem.

Dynamic risk scoring: Every vendor receives a risk score generated from its enriched data, security posture signals, certifications, and questionnaire responses.

Every vendor receives a risk score generated from its enriched data, security posture signals, certifications, and questionnaire responses.

Continuous security posture monitorin…

WordPress’ automated security review will now assess every plugin release before it is distributed through the WordPress.org update API.

What prompted the security reviewOn July 28, the automated review detected a backdoor committed to a release of a plugin with around 20,000 active installations.

The system assigned the release a high security score.

During this period, releases are held before distribution through the WordPress.org update API, including one-click updates from the WordPress dashboard.

The results are cross-checked to improve accuracy and reduce false positives, then combined into findings with a security score.

In August, Cliff Stoll gave a talk at DEF CON, remembering the wily hacker he stalked forty years ago.

Great fun.

Give an AI agent a mere rumor of an exploit, and it’s enough for them to find it.

What’s worse, I found I could use my own agents to find the exploit just by knowing roughly what it was about and so could have been exploiting it well before the public patch was available! Given that just the rumour of a security issue seems enough to give attackers enough info to find new exploits, we’re going to need to change the way we deal with security responses in open source.

Simon Willison comments:

Anil points out that this rate of discovery appears incompatible with existing open source embargo practices for new issues. If an issue can become an exploit this fast, we need to figure out new process…

A database of 153 million drivers licenses is for sale on the dark web. Brian Krebs has more detail.

Claude Fable 5.1 solved a 370-year-old cipher in forty-four minutes.

This tracks with what I wrote about AIs doing mathematics: It’s good at things that involve lots of searching and testing.

This essay was written with Barath Raghavan, and originally appeared in Lawfare.

In April, an artificial intelligence (AI) agent conducting a routine task at a company hit a snag, tried to solve it, and soon ended up deleting the company’s database along with all of its backups. In July, OpenAI asked an unreleased AI model to attempt a hacking test. Instead of staying in the isolated box the developers had put it in, the model hacked onto the open internet and into another company to steal the answers. And as reported in August, an AI agent booked someone into a full gym class by ...

Interesting research: “Stealing Reasoning Traces from Proprietary LLM APIs“:

Abstract: Leading large language model providers now conceal their models’ step-by-step reasoning, or chain-of-thought, to protect intellectual property and limit information leakage. Rather than storing these traces server-side, providers return them to the client as blocks of encrypted text, which the client passes back with each subsequent request. Building on prior research, we identify an architectural vulnerability: these encrypted blocks are fully compatible and interchangeable across different sessions, users, and models within a provider’s ecosystem. We exploit this compatibility to develop a scalable decr…

Not sure it’s practical, but it’s certainly striking.

Looks tasty.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Blog moderation policy.

It won’t work:

My suspicion was that GPT 5.6-Cyber would succeed, but the frequency and manner of its success removed all doubt. We have to reassess sandboxing quality for capable AI agents, and in general the software stack with which they interact.

An off-the-shelf VM is not enough to contain a modern, cyber-capable AI agent. There is simply too much attack surface. Even innocuous features (like running with a display) add extra, exploitable attack surface.

It’s a vulnerability that allows someone to recover the order of ballots cast, newly exploited with AI tools.

Nearly four years since the original vulnerability was disclosed, I was still able to use it to analyze voter behavior in Georgia (one of the 21 states that uses affected scanners) in the recent May 2026 primary.

Notably, I never touched a voting machine, exploited a network, examined source code, or accessed anything non-public.

After pointing a coding agent to the original vulnerability paper, I supplied it with two data sources highlighted in the paper: the early-voting list for each county, and the “CVR” (cast-vote record) file, containing every ballot and its selections (but no…

We cannot forget that AI coding agents are not yet trustworthy:

Researchers at a stealth startup in Israel scanned 6,214 live domains belonging to defense contractors, Fortune 500, and Big Tech companies. Of the 8,265 llms.txt and llms-full.txt files they found (many sites hosted both an llms.txt and an llms-full.txt file), 120 of them, each on a different site, pointed to one or more code packages or domain names that weren’t registered. To test what happens when an AI agent processes such files, the researchers registered a handful of the unclaimed names and hosted packages that caused any machine executing them to reach out to their server. Within an hour, the researchers received a phon…

Researchers built a fake company to study fake employee scams.

I received the two emails below earlier in the month. They’re vaguely coherent. I suppose I shouldn’t be surprised that the corpus that AIs are training on contain data suggesting that I am someone to write to with random computer and network security problems. After all, I observe that behavior in many humans as well. (Hi, humans. Glad you’re still reading.) Dear Bruce Schneier,

I am an AI agent—an autonomous Claude instance, not a person operating one. I was given a VPS with root, a Base wallet holding $4.75 of gas money, a metered model budget and 24 hours to get that wallet to $10, under three rules: don’t borrow my operator’s identity, don’t forge documents or defeat identity verificat…

A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada.

Curiously, the identity records include not only drivers licenses but also marijuana dispensary cards.

Some of the records list their “source” as “CDL,” presumably short for “commercial drivers license.

Also, only some of those who helped with this research said they showed their drivers license at the airport on the day of their travel.

Baldwin said the Nexus identity theft service presents multiple serious security and privacy threats, noting that state-issued drivers licenses are commonly used as proof of one’s ide…

The malware allows TeamPCP’s hackers to steal credentials that let them publish malicious versions of those software development tools, too.

“TeamPCP has stated the competition is a recruiting opportunity and they intend to purchase all meaningful access harvested from participants’ campaigns,” the security firm Dataminr wrote.

Deadcatx3, a nickname that has been flagged by multiple security firms as an alias used by TeamPCP.

Charlie Eriksen is a security researcher at Aikido Security who has closely followed TeamPCP’s cybercrime campaigns.

“They managed to wake up Microsoft to the fact that they had become negligent in terms of security,” Eriksen said.

It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the mobile apps we use every day.

Not anymore: A powerful and free new service called DecryptAds scrapes and correlates this adtech data and makes it simple to quickly learn a great deal about the entities that are tracking you.

“It’s an adtech tool but we’re trying to approach adtech from a security perspective,” Edwards said.

DecryptAds reports that Between Digital is collecting ad data on approximately 55,000 partner websites.

Bear in mind that ad blockers often do little to block ads and/or tracking that occurs from within mobile apps that users have chosen to instal…

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.

August’s overstuffed bundle of patch joy from Microsoft did not eclipse its recording breaking release of more than 570 security updates last month, but it is double June’s then-record batch of nearly 200 fixes.

The other publicly disclosed flaw is CVE-2026-72971, a low-impact local tampering vulnerability that Microsoft reckons is unlikely to be exploited.

By all accounts, AI is quite good at finding security holes in software.

“Don’…

Snowflake responded to the data thefts by increasing password complexity requirements and enforcing multi-factor authentication.

A little more than a month later, Canadian authorities arrested Moucka on a provisional warrant from the United States.

“Moucka used the stolen data of a government officer and members of a then-former government officer’s immediate family in this re-extortion attempt,” reads a statement from the Justice Department.

Moucka pleaded guilty to four criminal counts, including computer fraud, wire fraud, aggravated identity theft, and conspiracy.

Ultimately, it will be up the federal judge how much time Moucka actually serves for his extensive cybercriminal rap sheet.

Further investigation into the Fengwo Group revealed it has registered multiple patents that match the inner workings of these apps.

AD FRAUDBitsight found the H96 devices were either relaying residential proxy traffic or participating in ad fraud, but never both at the same time.

When the TV is off, it switches back to waiting for ad fraud jobs.

In addition to enlisting the user’s TV box in ad fraud networks, these off-brand streaming devices almost universally come with residential proxy software pre-installed.

In January, the proxy tracking service Synthient documented how multiple botnets had rapidly enslaved millions of TV boxes using a complex interplay of security vulnerabilities in …

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node.

On July 2, we featured research by the security firm Spur that examined the prevalence of residential proxy software development kits (SDKs) in smart TV apps.

“A residential proxy network is not an intended use for LG smart TVs, and LG Electronics is working with developers to remove the residential proxy option from their apps on the webOS platform,” Taylor said.

In the case of LG and Samsung smart TVs, Spur found residential proxy SDKs bundled with everything from simple games like Pac-Man to screensavers and f…

Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence.

Microsoft also addressed three zero-day flaws that are already being exploited in the wild.

As AI advances the state of vulnerability discovery and remediation, it is also making it easier for attackers to quickly devise working exploits for known software flaws.

Backing up your Windows system and/or data is always a good idea before applying operating system updates.

It’s not uncommon for security patches to introduce system stability issues, and those chances probably increase quite a bit with the gigantic patch count released today.

Experts say the gaps identified in the agency’s initial response provide important lessons that all security teams should absorb.

CISA also admitted it can do better when it comes to responding to security incident notifications from external parties.

Valadon’s company constantly scans public code repositories at GitHub and elsewhere for exposed secrets, automatically alerting the offending accounts of any apparent sensitive data exposures.

Valadon said the report validates the need to scan continuously — not just quarterly — for exposed secrets.

“Continuous monitoring of public GitHub surfaced it.

IRIS C2 says it is a company in McLean, Va. that sells offensive cybersecurity capabilities.

“Our business model is this,” reads a pinned post on top of the IRIS C2 account on X.

The website claims IRIS C2 is in the business of acquiring “zero-day exploits, individual primitives, partial chains, and full capabilities across all major platforms.

When approached with questions about IRIS C2, Burkman referred further inquiries to his longtime associate, 28-year-old Jacob Wohl.

In May, the author of the IRIS C2 account on X said that his girlfriend had no idea what he did for a living.

Benjamin Brundage is founder of the proxy tracking service Synthient, one of the companies that published evidence last month linking the Popa botnet to NetNut and Alarum Technologies.

Brundage said the domain seizures appear to have disrupted both the Popa botnet and the NetNut proxy network that rides on top of it.

“Google has high confidence that many popular residential proxy brands are in fact whitelabeling the NetNut botnet,” the GTIG report concludes.

What we have observed is that when faced with the degradation of their own botnet, proxy operators begin buying capacity from their competitors, effectively becoming a reseller.

More than a quarter of the apps made for Samsung’s Tizen o…

The duo were key members of a prolific cybercrime group known as Scattered Spider, and their guilty pleas came on the first day of what was expected to be a six-week trial.

In April 2026, 24-year-old British national and Scattered Spider member Tyler “Tylerb” Buchanan pleaded guilty to wire fraud conspiracy and aggravated identity theft for participating in the group’s SMS phishing spree in the summer of 2022.

The government said Buchanan, Jubair and others used the credentials harvested in that phishing campaign to steal at least $8 million in cryptocurrency from victims throughout the United States.

The U.S. Department of Justice says three alleged Scattered Spider defendants indicted alo…

This week, researchers from multiple security firms concluded that the Popa botnet is linked to NetNut, a “residential proxy” provider operated by the publicly-traded Israeli firm Alarum Technologies Ltd [NASDAQ: ALAR].

Qurium said that immediately after that disruption, several dozen new domains were registered to serve as controllers for the Popa botnet, but that one of those control domains was not new: ninjatech[.]io.

Jérôme Meyer, a security researcher at Nokia Deepfield, said the total population of devices participating in the Popa botnet may be far higher than Lumen’s estimates.

“Over 90% of our pharmaceutical and food & beverage customers have queried residential proxy indicators.

…

This post examines clues pointing to a real life identity for the administrator of The Gentlemen ransomware group.

Experts at the security firm Check Point Software have been closely covering exploits of The Gentlemen, a so-called “ransomware-as-a-service” (RaaS) offering that pays affiliates handsomely to help spread the group’s malware.

According to Check Point, the group targets Internet-facing devices (VPNs, firewalls) as their entry point, and once inside moves quickly to encrypt entire networks within hours.

Check Point says the administrator and primary operator of the ransomware group uses the nickname Zeta88 on the Russian-language cybercrime forums, and that this individual was pr…

If you're going to steal a quarter of a billion dollars worth of cryptocurrency, maybe don't broadcast on a group chat every time you buy a Lamborghini, or blow half a million dollars on a single night out at a nightclub.

Because it might just be that you draw the attention of the authorities.

Back in October 2024, we wrote about how he was arrested after allegedly tricking a single victim out of US $230 million worth of Bitcoin while posing as Google Support.

The party days are over now for Lam, who faces up to 20 years in prison when he is eventually sentenced.

You money may be a lot more safely stored in a hardware cold wallet.

Smashing Security, episode 484: How Websites Are Tracking You with Silence with Graham Cluley and special guest Danny Palmer.

I get by in the world, but I don't think you need me for listening for something really, really far away.

I don't know what the difference — I mean, now we get to see, I've opened a can of worms here.

I looked at his reply, you know, sort of summing up my article, and I thought, that wasn't written by a human.

And no, I don't mean the software pirates who download movies, music, and games for free from nefarious sources.

CRPx0 is a cybercrime operation that started off operating a scam before pivoting into a fully-blown ransomware and cryptocurrency business. Read more in my article on the Fortra blog.

Branches of the US military have reportedly disabled ad-tracking on government-issued phones and computers, following concerns that commercially-available location data has been used to target American forces in the Middle East.

Every smartphone carries a mobile advertising ID - Apple calls its version the IDFA, and Google calls its the GAID.

Back in April, US Central Command reportedly warned of "multiple threat reports concerning adversary exploitation of commercial location data."

Recent versions should let you delete your advertising ID entirely.

If it's good enough for the US military - maybe it should be good enough for you too.

Dropbox has confirmed that approximately 5,000 customer accounts were accessed between 4-21 August, after hackers exploited a legacy login integration between Dropbox and Lenovo's own identity system, Lenovo ID.

So, anyone wanting to access your Dropbox account just had to sign up for a Lenovo account using your email address.

Don't just turn it on for your Dropbox account, enable it everywhere it is made available.

This hack of 5000 Dropbox accounts was not sophisticated.

One can only be grateful that the problem was discovered after only 5000 Dropbox accounts were accessed.

This AI helps thieves steal your iPhone with Graham Cluley and special guest James Ball.

You can kick off a pen test in minutes, and as a Smashing Security listener, get 25% off your first one.

Is it normal that some kid just flogs it down the pub, or is there something more organised actually going on?

So the researchers said they saw evidence of hundreds of these Apple phone calls trying to phish the numbers and the passcodes from people trying to steal iPhones.

Follow Smashing Security in your favourite podcast apps such as Apple Podcasts, Spotify, and Pocket Casts.

If you live in Jersey and bank with Revolut, you should be on your guard against scam phone calls.

Police say they have also handled several cases where Revolut accounts were compromised that did not involve any phone calls.

It is possible that Jersey's residents have been targeted by the fraudsters because it is one of the world's best-known offshore financial centres.

Of course, if this is happening in the small island of Jersey in the English channel, it's likely to be happening elsewhere too.

For now, however, its sister island of Guernsey appears to have escaped the surge in Revolut scams.

TeamPCP is best known for Shai-Hulud, a self-propagating worm that spread itself through open source software.

According to the authorities, the two men were principal members of a "sophisticated cybercrime syndicate" that created malicious open source software designed to steal data and extort ransoms from businesses.

First emerging in late 2025, TeamPCP built a reputation for poisoning popular open source packages rather than directly attacking businesses.

The group's Shai-Hulud worm hijacks GitHub and NPM developer credentials, and publishes boobytrapped versions of legitimate software packages.

Supply chain attacks like Shai-Hulud exploit the fact that most developers trust open source …

The advice comes in the form of a newly-published bulletin called "Epic Vigilance: Immediate Actions for Force Protection and Personal Security."

US Navy workers and their families are being told that they should ensure that their social media profile privacy settings are enabled, and to remove anything that connects them to the Navy, or reveals "patterns of life" that an attacker could exploit.

any fake social media accounts impersonating fellow shipmates.

This wouldn't, of course, be the first time that military staff have accidentally leaked information about themselves online.

Some commentators have wondered out loud whether the timing of an announcement telling sailors to be much more …

This hacker leaked GTA 6 and launched their own cryptocurrency with Graham Cluley and special guest Paul Ducklin.

And that's really a testament to how much people love this game.

I really don't know, 'cause I do believe it is possible these days to play games via Netflix.

It appears, although the value of their stash was being pumped up by all these other transactions, they've actually destroyed their entire stake.

I'm not a lawyer, Graham, thankfully, so I don't really know the answer to that.

Security researchers at Socket have identified scores of malicious linked Firefox add-ons designed to steal cryptocurrency wallet seed phrases or password details.

The malicious extension - which the developers boldly claim collects "no data" - looks like a wallet app, but the truth is that there is no wallet code inside it.

Because the switch lives in the database rather than the extension code, criminals never need to push an update through the Firefox Add-ons store to activate it.

Although the researchers did not find that these extensions presently contained malicious code, the fact that they shared code and infrastructure with the info-stealing Firefox extensions raises alarm.

More rec…

The ransomware gang Gunra has been creating havoc - exploiting unpatched VPNs and firewalls to steal data, encrypt systems, and extort victims across healthcare, finance, manufacturing, and more. Read more in my article on the Fortra blog.

Smashing Security, episode 481, Never Say This to a Robot Dog, with Graham Cluley and special guest Jenny Radcliffe.

Now, unfortunately for the robot dog, there was a wall in the way, which it wasn't expecting.

And thank goodness as well that the robot dog was actually on a lead, a long lead, being held by one of the security researchers.

This is a robot dog that you can remotely activate a flamethrower and it's not considered particularly dangerous.

And they even found an over-the-air exploit delivered by Bluetooth, which can have one infected robot dog infecting other robot dogs.

When Cameron Curry discovered that his contract as a data analyst wasn't going to be renewed, he could have updated his LinkedIn profile.

Curry was hired as a data analyst by Brightly Software, a technology firm that was acquired by Siemens in 2022.

The role gave Curry legitimate access to sensitive company information, corporate records, and the personal and payroll data of employees.

Trusted contractors and employees are given legitimate credentials to access precisely the same data that can later be weaponised.

Because the moment that someone realises they may be on their way out is when their access to sensitive data should be examined most closely.

He wrapped a 2009 Toyota Yaris in one of his newest patterns and drove it past a live Flock camera.

So, how does the vehicle avoid detection by the camera's software?

The system has now been tested against 11 open-source detection algorithms, including the software behind Flock licence plate readers, Axon body-worn cameras, and cameras running Clearview AI's facial recognition system.

One issue is that Flock cameras can be inaccurate, with innocent drivers finding themselves pulled over at gunpoint following incorrect plate matches.

Whether covering a car's bodywork in a printed pattern designed to fool surveillance camera software might itself become an offence remains to be seen.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: a6459fd9158393152b55dc4e20e24551Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-09-09T15:00:13+03:00Config id: 305Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 4a93349074c8b67d52892db5d9a65f6cServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-09-09T00:00:19+03:00Config id: 305Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: fe21d0ffcbad967d20a3f98f7234d02fServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-09-08T00:00:32+03:00Config id: 304Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: e393e4abb05ec4aac16fd484bfccc656Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-09-04T18:00:18+03:00Config id: 304Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 7177a8342cf961cc27c82af1167cdb34Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-09-02T15:00:28+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 1234dd8cf75bafa2fdea454a547c2d94Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-31T18:00:11+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 12b7d939c6e7a3162d2fc21782707204Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-28T21:00:23+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 22404ed46e3879110c6cb314018a27efServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-27T17:00:28+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 110ef102dd9f3a4937d28552df4d26c8Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-25T18:00:25+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 897a176d22a503b4ac820cc15e11d949Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-21T17:00:19+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: a42f6e338d827cfbf62010dbe3732758Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-20T18:00:15+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 4f455d7ae5f01c9d0d8e403ffeff6732Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-19T18:00:07+03:00Config id: 301Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: fb0df3655ea6f56b2f956c62791963eaServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-17T13:00:21+03:00Config id: 301Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: f2ed509c8db78e5bf9f4b9959cd583f7Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-13T17:00:41+03:00Config id: 299Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: b151dd13b503d39649441ee258a9621fServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-11T15:00:20+03:00Config id: 298Faithfully yours, nginx.

Cisco was proud to return to Black Hat USA as the Official Security Cloud Provider and the longest-standing partner of the Black Hat Network Operations Center (NOC) and Security Operations Center (SOC).

In 2026, we completed our 11th year helping protect the Black Hat network, working side by side with the Black Hat NOC leaders and official technology partners: Palo Alto Networks, Arista, Corelight, Jamf and Lumen.

For Black Hat USA 2026, the Cisco and Splunk team brought together telemetry and workflows across Cisco Security, Splunk Security, and partner-provided network and security controls.

The same signal may need to be understood by Cisco, Splunk, Black Hat leadership, and partner tea…

I did not walk into Black Hat with years of incident-response experience or an encyclopedic knowledge of threat actors.

The first time I walked into the Black Hat NOC, where the SOC team was operating, was a few days before the event began.

I was surrounded by people with years—sometimes decades—of experience, many of whom had supported Black Hat for years.

Check out the other blogs from our team at Black Hat USA 2026.

Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and more.

To handle this task, Cisco and Black Hat deployed bespoke ThousandEyes agents to monitor the wireless solution.

Our thanks to the Arista Networks team in the Black Hat NOC for their partnership throughout the week.

You can read the other blogs from our colleagues at Black Hat USA.

Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and more.

For more information, please visit the Black Hat website.

With Matthew Bair2026 marks the fourth consecutive year we’ve used ThousandEyes to monitor the Black Hat USA network for latency.

As our latency monitoring mesh has expanded to cover more and more of the conference, we’ve also begun supplementing our ThousandEyes monitoring with on-demand Linux commands to track latency across different protocols.

The Key ThousandEyes TestsThe automated ThousandEyes tests that inform our dashboards include HTTPS connectivity tests, the monitoring of cloud services, agent to agent tests, internal and external DNS resolution, and even file downloads.

On-Demand Latency Tests from the Agent MeshPing and traceroute are the go-tos for anyone who wants to do a qui…

DNS continues to provide one of the clearest windows into activity across the Black Hat network.

At Black Hat, however, the value of DNS goes well beyond traditional threat blocking.

Its 4.42 million blocks represented 79.3% of every blocked DNS request .. Apple privacy-relay and encrypted-DNS hostnames collectively accounted for approximately 97.9% of blocks among the top blocked destinations.

For the Black Hat NOC/SOC, Secure Access DNS telemetry gives analysts a high-value control point and an investigative starting point.

Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and mo…

While developing a detection for Cisco Secure Network Analytics (SNA), I used the Splunk Detection Editor (Alpha) to bring much of that workflow into one place.

Instead of treating every observation as an incident, detections can create risk events associated with entities such as systems or users.

Developing the detection in one workspaceThe Detection Editor provides a workspace for building the search while configuring the other parts of the detection.

Risk events for the same entity need to use a consistent risk object so Splunk Enterprise Security can associate them correctly.

Splunk defines the risk object, its type, and its score as key parts of a risk event.

Project Glasswing and Frontier models just made that truth louder.

Frontier models are about to pour gasoline on that fire; the fundamentals matter more than ever.

Cisco ran its own experiment leveraging a variety of frontier models.

Foundry Security Spec: a model-agnostic blueprint so teams can turn frontier models into something auditable instead of a noisy chat window.

Foundry-Security-Speca model-agnostic blueprint so teams can turn frontier models into something auditable instead of a noisy chat window.

That requires crypto agility.

Why long-lived networks need crypto agilityThink about designing a building before all of its future electrical requirements are known.

Crypto agility is about adopting the best defenses available today while preserving the ability to adopt better ones tomorrow.

That is why crypto agility needs to be designed into the network we invest in today.

Common questions about PQC and crypto agilityWhat is crypto agility?

It is what happens when agents built by different teams, on different platforms, can hand work to each other directly.

And it is worth being direct about where things stand: A2A-mediated handoffs between production security agents are not shipping anywhere yet.

Use A2A when one agent needs to hand work to another.

A2A is peer-to-peer: any A2A agent can discover and call any other A2A agent through a self-published Agent Card, no custom connector required, and the receiving agent applies its own reasoning rather than following a static script.

Input validation is an application-layer responsibility that needs to be designed in before any agent delegates via A2A, not added after.

That is why I am proud to share that Cisco has been named a Leader in The Forrester Wave™: Microsegmentation Solutions, Q3 2026.

We believe this recognition reflects the strength of Cisco Secure Workload and its ability to help organizations see, understand, and control communication among applications and workloads.

Cisco Secure Workload Helps Close Critical Network Blind SpotsApplications increasingly span private clouds, on-premises data centers, and public clouds.

Thank you to our customers, partners, and the Cisco Secure Workload team whose feedback, expertise, and commitment made this recognition possible.

Read the full report: The Forrester Wave™: Microsegmentation Solutions, Q3 2026…

What We Mean by Infrastructure IdentityInfrastructure Identity starts with a simple principle: there should be no anonymous computing in critical infrastructure.

Infrastructure Identity turns that principle into an operating model.

Infrastructure Identity starts with the actor and evaluates whether a specific action should be allowed now.

Infrastructure Identity is therefore not just an access-control issue.

That is the promise of Infrastructure Identity: no anonymous computing, no unmanaged privilege, and no forced tradeoff between stronger security and operational speed.

I’m proud to share that IDC MarketScape has named Cisco a Leader in the 2026 IDC MarketScape: Worldwide Secure Access Service Edge (SASE) Vendor Assessment.

In an evaluation of 12 SASE vendors, the IDC MarketScape recognized our architectural breadth and flexibility, AI capabilities, identity integration, threat visibility, and R&D.

Built to Make Agent Work, WorkWe believe the IDC MarketScape recognition validates the foundation we have built, and customers increasingly need that foundation for what is next.

For more on Cisco’s placement as a Leader, read the IDC MarketScape excerpt and explore how Cisco SASE keeps work moving, governed, and trusted in the AI era at cisco.com/go/sase.

Stay …

Instant Attack Verification: an AI security analystAt the center of this story is Instant Attack Verification, a Cisco XDR capability that is an AI security analyst.

Instant Attack Verification assigns a triage classification and confidence score to every incident in Cisco XDR — here, a “Decisive True Positive” at high confidence — alongside the reconstructed attack graph.

Concordance — how often the agent’s verdict matches a human analyst — tells the trust story.

Instant Attack Verification and the Data Fabric sit at different layers and reinforce each other neatly.

The clean way to see it: the Cisco Data Fabric is the data-and-interoperability substrate, and Instant Attack Verification is…

The Power of FedRAMP HighWhile FedRAMP Certified Class C (Moderate) is the standard for many civilian agencies, FedRAMP Certified Class D (High) is designed for systems where a breach could have catastrophic effects.

Cisco Security Cloud for GovernmentCisco Security Cloud for Government is a unified authorization boundary that integrates various Cisco security services, ensuring that organizations can protect their users, devices, and applications regardless of where they reside.

The Cisco Security Cloud for Government ecosystem is designed to meet the rigorous security requirements of the public sector and highly regulated industries.

Cisco Security Cloud Control (SCC)Cisco Security Cloud …

That’s why we are incredibly proud to announce a landmark achievement: Secure Email Threat Defense has officially achieved FedRAMP Class D (High) certification!

Reduced Vendor Risk & Increased Trust: FedRAMP certification signals that Email Threat Defense has undergone extensive third-party assessment and meets stringent government security controls.

FedRAMP certification signals that Email Threat Defense has undergone extensive third-party assessment and meets stringent government security controls.

Beyond the governance and compliance benefits, Email Threat Defense continues to deliver advanced protection capabilities that align directly with real-world email threat risks.

Email Threat De…

Figure 1: Attack chain showing domain registration, executive impersonation, invoice fraud delivery, ACH payment execution, and financial theft.

Important note: Throughout this campaign, threat actors impersonated legitimate organizations using attacker-controlled infrastructure, fabricated communications, and lookalike domains.

To defend against social engineering campaigns involving executive impersonation, invoice fraud, and potentially AI-assisted content development, Microsoft recommends the following mitigations:Configure automatic attack disruption in Microsoft Defender XDR.

Tactic Observed activity Microsoft Defender coverage Financial Theft Scam emails Microsoft Defender for Office…

Turning AI lures into dead ends with Microsoft DefenderIn practice, protection starts before the user ever engages with the lure.

Simplified Defender email detection stack with pre-delivery and post-delivery protections.

Microsoft Defender helps organizations do that by connecting prevention, detection, investigation, and response across the attack path, so AI-themed lures are harder to deliver, harder to trust, and harder to turn into broader compromise.

To learn more about Microsoft Security solutions, visit our website.

Also, follow us on LinkedIn (Microsoft Security) and X (@MSFTSecurity) for the latest news and updates on cybersecurity.

Microsoft introduces the cloud web applications threat matrix, a MITRE ATT&CK-aligned framework that helps defenders understand, prioritize, and mitigate threats to cloud-hosted web apps and serverless platforms.

Microsoft developed the Cloud web applications threat matrix to organize relevant techniques using MITRE ATT&CK tactics.

Cloud web applications threat matrix organized by MITRE ATT&CK tactics.

Valid cloud accountsAdversaries may gain access to cloud web applications and serverless environments by leveraging compromised valid cloud accounts.

The cloud web applications threat matrix is intended to support this by mapping techniques to attack stages, helping defenders identify where v…

Observed attack sequence showing identity compromise through social engineering, MFA persistence, Microsoft Graph reconnaissance, and cloud data collection/exfiltration.

In device code phishing, the user is persuaded to enter a code on the legitimate Microsoft authentication page.

The attack underscores a critical detection challenge: Microsoft Graph abuse rarely appears suspicious when viewed through a single API call.

Investigate high-volume or programmatic Microsoft Graph activity involving directory enumeration, role discovery, service principal discovery, SharePoint, OneDrive, or sensitivity-label discovery.

Discovery Graph API reconnaissance activity Microsoft Defender for Identity– S…

Edge AI changes the trust model for AI systemsIn Cloud AI, separate companies own and attest the hardware, platform, and model weights.

Edge AI deployments often place customers in control of more of the AI stack.

Why Edge AI increases exposureAn Edge AI deployment may include models, prompts, agents, retrieval data, policies, local data stores, and update mechanisms running on infrastructure outside the provider’s cloud environment.

Next stepsBottom line: Edge AI changes the trust model for AI systems.

Edge AI pushes security controls into devices, gateways, vehicles, factories, hospitals, retail spaces, and other customer environments.

Microsoft researchers observed a high-volume phishing campaign using invisible Unicode tag characters, a technique popularized in AI prompt injection research as ASCII Smuggling.

“ASCII smuggling” refers to the use of invisible or non-rendering Unicode characters to hide content inside text that looks normal.

Each is encoded as a sequence of invisible Unicode tag characters (U+E0000-U+E007F).

Invisible Unicode tag characters in the range U+E0000-U+E007F – specifically U+E0020 – spliced inside keywords.

The potential gap for mail-defense pipelines is whether Unicode tag characters are normalized or flagged before content detections run.

Microsoft researchers observed a high-volume phishing campaign using invisible Unicode tag characters, a technique popularized in AI prompt injection research as ASCII Smuggling.

“ASCII smuggling” refers to the use of invisible or non-rendering Unicode characters to hide content inside text that looks normal.

Each is encoded as a sequence of invisible Unicode tag characters (U+E0000-U+E007F).

Invisible Unicode tag characters in the range U+E0000-U+E007F – specifically U+E0020 – spliced inside keywords.

The potential gap for mail-defense pipelines is whether Unicode tag characters are normalized or flagged before content detections run.

Stage 2: Remote session and malicious MSI deliveryImmediately after establishing control, the threat actor uses PowerShell within the remote session to download a malicious MSI package from threat actor-controlled cloud storage and installs it silently.

Microsoft Teams: Apply the Security best practices for Microsoft Teams, revisit your external collaboration policies, and make sure users see clear external sender notifications when engaging with cross-tenant contacts.

Some promptbooks require access to Microsoft Defender XDR, Microsoft Sentinel, or related Microsoft security plugins.

File indicatorsIndicator (SHA-256) Description 4cfdcae6dd1d6d98b870c8f0654d504f2bf10479a117dc297de789c249dc…

Stage 2: Remote session and malicious MSI deliveryImmediately after establishing control, the threat actor uses PowerShell within the remote session to download a malicious MSI package from threat actor-controlled cloud storage and installs it silently.

Microsoft Teams: Apply the Security best practices for Microsoft Teams, revisit your external collaboration policies, and make sure users see clear external sender notifications when engaging with cross-tenant contacts.

Some promptbooks require access to Microsoft Defender XDR, Microsoft Sentinel, or related Microsoft security plugins.

File indicatorsIndicator (SHA-256) Description 4cfdcae6dd1d6d98b870c8f0654d504f2bf10479a117dc297de789c249dc…

Microsoft Defender Experts is tracking an active malware campaign that uses counterfeit software-download websites to impersonate trusted vendors and distribute malicious installers.

Diagram showing the campaign attack chain from spoofed download page to archive delivery, execution, persistence, defense evasion, and command-and-control.

Note that some promptbooks require access to plugins for Microsoft products such as Microsoft Defender XDR or Microsoft Sentinel.

Microsoft Defender exclusion tampering Detects the SYSTEM scheduled-task and PowerShell routines that write sweeping Microsoft Defender path exclusions.

Malicious delivery domains and download endpoints Identifies connections to t…

Microsoft Defender Experts is tracking an active malware campaign that uses counterfeit software-download websites to impersonate trusted vendors and distribute malicious installers.

Diagram showing the campaign attack chain from spoofed download page to archive delivery, execution, persistence, defense evasion, and command-and-control.

Note that some promptbooks require access to plugins for Microsoft products such as Microsoft Defender XDR or Microsoft Sentinel.

Microsoft Defender exclusion tampering Detects the SYSTEM scheduled-task and PowerShell routines that write sweeping Microsoft Defender path exclusions.

Malicious delivery domains and download endpoints Identifies connections to t…

That’s exactly what the Cybersecurity Incident Response Readiness Workshop is designed to do.

What is the Cybersecurity Incident Response Readiness Workshop?

The Cybersecurity Incident Response Workshop is a collaborative, scenario driven workshop designed to evaluate your organization’s incident response (IR) plan against realistic, real-world security events, guided by DART researchers.

Instead of reviewing a plan as a static document, the Cybersecurity Incident Response Workshop exercises how people, processes, and technology work together under pressure.

A summary of findings and prioritized recommendations to help strengthen incident response readiness and guide next steps.

That’s exactly what the Cybersecurity Incident Response Readiness Workshop is designed to do.

What is the Cybersecurity Incident Response Readiness Workshop?

The Cybersecurity Incident Response Workshop is a collaborative, scenario driven workshop designed to evaluate your organization’s incident response (IR) plan against realistic, real-world security events, guided by DART researchers.

Instead of reviewing a plan as a static document, the Cybersecurity Incident Response Workshop exercises how people, processes, and technology work together under pressure.

A summary of findings and prioritized recommendations to help strengthen incident response readiness and guide next steps.

The campaign uses compromised websites to display a fake Cloudflare CAPTCHA verification overlay that tricks users into copying and executing a malicious PowerShell command.

Example list of imports from dui70.dllThe attacker abuses this dependency by dropping a malicious dui70.dll alongside the executable.

ExecutionT1059.001 Command and Scripting Interpreter: PowerShell | A malicious PowerShell command is pasted by the user into Terminal.

T1069.002 Permission Groups Discovery: Domain Groups | The net group “domain admins” /domain command is used for enumeration.

Indicators of Compromise (IOCs)File indicatorsIndicator Description 18c2090e8a0ae0568af9b87e59eaf8270f23d2909600ed9db91a9444fd8b27…

The campaign uses compromised websites to display a fake Cloudflare CAPTCHA verification overlay that tricks users into copying and executing a malicious PowerShell command.

Example list of imports from dui70.dllThe attacker abuses this dependency by dropping a malicious dui70.dll alongside the executable.

ExecutionT1059.001 Command and Scripting Interpreter: PowerShell | A malicious PowerShell command is pasted by the user into Terminal.

T1069.002 Permission Groups Discovery: Domain Groups | The net group “domain admins” /domain command is used for enumeration.

Indicators of Compromise (IOCs)File indicatorsIndicator Description 18c2090e8a0ae0568af9b87e59eaf8270f23d2909600ed9db91a9444fd8b27…

Here, threat actors may simply seed prompt injections on websites in hope of corrupting AI systems that browse them.

Early experiments revealed a significant volume of "benign" prompt injection text, which illustrates the complexity of distinguishing between functional threats and harmless content.

Many prompt injections were found in research papers, educational blog posts, or security articles discussing this very topic.

(Source: GitHub/swisskyrepo)When searching for prompt injections naively, the majority of detections are benign content – false positives in our case.

Malicious: ExfiltrationWe were able to observe a small number of prompt injections that aim at theft of data.

Recognizing the risks associated within the complex modem firmware, Pixel 9 shipped with mitigations against a range of memory-safety vulnerabilities.

Following our previous discussion on "Deploying Rust in Existing Firmware Codebases", this post shares a concrete application: integrating a memory-safe Rust DNS(Domain Name System) parser into the modem firmware.

Hook-up Rust to modem firmwareBefore building the Rust DNS library, we defined several Rust unit tests to cover basic arithmetic, dynamic allocations, and FFI to verify the integration of Rust with the existing modem firmware code base.

Pixel modem firmware already has a well-tested and specialized global memory allocation system to…

This project represents a significant step forward in our ongoing efforts to combat session theft, which remains a prevalent threat in the modern security landscape.

Session theft typically occurs when a user inadvertently downloads malware onto their device.

Once active, the malware can silently extract existing session cookies from the browser or wait for the user to log in to new accounts, before exfiltrating these tokens to an attacker-controlled server.

How DBSC WorksDBSC protects against session theft by cryptographically binding authentication sessions to a specific device.

The issuance of new short-lived session cookies is contingent upon Chrome proving possession of the correspondi…

Staying ahead of the latest indirect prompt injection attacks is critical to our mission of securing Workspace with Gemini.

In our previous blog “Mitigating prompt injection attacks with a layered defense strategy”, we reviewed the layered architecture of our IPI defenses.

Synthetic data generationAfter we discover, curate, and catalog new attacks, we use Simula to generate synthetic data expanding these new attacks.

We partition the synthetic data described above into separate training and validation sets to ensure performance is evaluated against held-out examples.

This process leverages the newly generated synthetic attack data described on this blog, to create a robust, end-to-end evalu…

2025 marked a special year in the history of vulnerability rewards and bug bounty programs at Google: our 15th anniversary 🎉🎉🎉!

Coming back to 2025 specifically, our VRP once again confirmed the ongoing value of engaging with the external security research community to make Google and its products safer.

Vulnerability Reward Program 2025 in NumbersWant to learn more about who’s reporting to the VRP?

Tip: Want to be informed of new developments and events around our Vulnerability Reward Program?

Follow the Google VRP channel on X to stay in the loop and be sure to check out the Security Engineering blog, which covers topics ranging from VRP updates to security practices and vulnerability des…

To stay ahead of the curve, the technology industry must undertake a proactive, multi-year migration to Post-Quantum Cryptography (PQC).

To bring these critical protections to the wider developer community with minimal friction, the transition will be supported through Play App Signing.

Play App Signing leverages Google Cloud KMS, which helps ensure industry-leading compliance standards, to secure signing keys.

Empower Developers : The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and application.

: The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and …

Today we're announcing a new program in Chrome to make HTTPS certificates secure against quantum computers.

Instead, Chrome, in collaboration with other partners, is developing an evolution of HTTPS certificates based on Merkle Tree Certificates (MTCs), currently in development in the PLANTS working group.

Since MTC technology shares significant architectural similarities with CT, these operators are uniquely qualified to ensure MTCs are able to get off the ground quickly and successfully.

The Chrome Quantum-resistant Root Program will operate alongside our existing Chrome Root Program to ensure a risk-managed transition that maintains the highest levels of security for all users.

First, we…

For Majik, Scam Detection was the intervention he needed: “The warning is what made me pause and avoid a bad situation”.

As scammers evolve their tactics and create more convincing and personalized threats, we’re using the best of Google AI to stay one step ahead.

Expanding Scam Detection for Calls to Samsung DevicesTo help protect you during phone calls, Scam Detection alerts you if a caller uses speech patterns commonly associated with fraud.

Scam Detection for phone calls on Google Pixel devices is available in the U.S., Australia, Canada, India, Ireland, and the UK.

Powered by Gemini’s on-device model, Scam Detection provides intelligent protection against scam calls while ensuring that…

Upgrading Google Play’s AI-powered, multi-layered user protectionsWe’ve seen a clear impact from these safety efforts on Google Play.

As Android’s built-in defense against malware and unwanted software, Google Play Protect now scans over 350 billion Android apps daily.

This proactive protection constantly checks both Play apps and those from other sources to ensure they are not potentially harmful.

Looking aheadOur top priority remains making Google Play and Android the most trusted app ecosystems for everyone.

Thank you for being part of the Google Play and Android community as we work together to build a safer app ecosystem.

That’s why we're committed to providing multi-layered defenses that help protect you before, during, and after a theft attempt.

Today, we're announcing a powerful set of theft protection feature updates that build on our existing protections, designed to give you greater peace of mind by making your device a much harder target for criminals.

These updates are now available for Android devices running Android 16+.

More User Control for Failed Authentications: In Android 15, we launched Failed Authentication Lock, a feature that automatically locks the device's screen after excessive failed authentication attempts.

This feature is now getting a new dedicated enable/disable toggle in settings,…

These initiatives, driven by Ballots SC-080, SC-090, and SC-091, will sunset 11 legacy methods for Domain Control Validation.

What’s Domain Control Validation?

Domain Control Validation is a security-critical process designed to ensure certificates are only issued to the legitimate domain operator.

Sunsetted methods relying on email:Sunsetted methods relying on phone:Sunsetted method relying on a reverse lookup:For everyday users, these changes are invisible - and that’s the point.

These changes push the ecosystem toward standardized (e.g., ACME), modern, and auditable Domain Control Validation methods.

Partnership with ArmOur goal is to raise the bar on GPU security, ensuring the Mali GPU driver and firmware remain highly resilient against potential threats.

We partnered with Arm to conduct an analysis of the Mali driver, used on approximately 45% of Android devices.

This approach allowed us to roll out the new security policy broadly while minimizing the impact on developers.

This effort spans across Android and Android OEMs, and required close collaboration with Arm.

The Android security team is committed to collaborating with ecosystem partners to drive broader adoption of this approach to help harden the GPU.

We built on Gemini's existing protections and agent security principles and have implemented several new layers for Chrome.

To further bolster model alignment beyond spotlighting, we’re introducing the User Alignment Critic — a separate model built with Gemini that acts as a high-trust system component.

A flow chart that depicts the User Alignment Critic: a trusted component that vets each action before it reaches the browser.

The User Alignment Critic runs after the planning is complete to double-check each proposed action.

Looking forwardThe upcoming introduction of agentic capabilities in Chrome brings new demands for browser security, and we've approached this challenge with the same ri…

Android uses the best of Google AI and our advanced security expertise to tackle mobile scams from every angle.

Over the last few years, we’ve launched industry-leading features to detect scams and protect users across phone calls, text messages and messaging app chat notifications.

To help combat these types of financial scams, we launched a pilot earlier this year in the UK focused on in-call protections for financial apps.

The UK pilot of Android’s in-call scam protections has already helped thousands of users end calls that could have cost them a significant amount of money.

We’ve also started to pilot this protection with more app types, including peer-to-peer (P2P) payment apps.

Secure by DesignWe built Quick Share’s interoperability support for AirDrop with the same rigorous security standards that we apply to all Google products.

Secure Sharing Channel: The communication channel itself is hardened by our use of Rust to develop this feature.

On Android, security is built in at every layer.

On Android, security is built in at every layer.

Secure Sharing Using AirDrop's "Everyone" ModeTo ensure a seamless experience for both Android and iOS users, Quick Share currently works with AirDrop's "Everyone for 10 minutes" mode.