The NCSC warns that ‘tech on the cheap’ has left UK organisations exposed to AI uncovering and exploiting longstanding cyber security weaknesses and calls for urgent investment in resilience.

An NCSC assessment that examines current AI-enabled threat trends and projections of the threat landscape to 2028.

A maximum-severity security flaw impacting Siemens SIMATIC IoT2050 Advanced devices has come under active exploitation, VulnCheck has revealed.

The vulnerability, tracked as CVE-2026-58115 (CVSS score: 10.0), is a case of missing authentication for a critical function that could be exploited by an unauthenticated remote attacker to run arbitrary code.

"SIMATIC IoT2050 Advanced devices running

Threat actors are attempting to exploit an unpatched maximum-severity security vulnerability in the CryptoPayment Gateway WordPress plugin, according to findings from Defused Cyber.

The vulnerability in question is CVE-2026-81648, which carries a CVSS score of 10.0. Successful exploitation of the flaw could permit unauthenticated users to delete arbitrary files on the server and extract

OpenVDDK is reportedly already being used in production, at scale

US officials described the attacks on Qeshm Island as limited and defensive, according to CBS, the BBC's US partner.

Google's Dreambeans, its latest AI experiment, now supports 13 Indian languages.

Comments

Accessing external memory puts the brakes on physical AI, so carmaker has found an economical and speedy shortcut

Iranian state media reported the sound of explosions on the island in the strait of Hormuz, coming on the eve of crucial US midterms

The ⁠US launched limited strikes on ​Iran’s Qeshm Island late on Monday, ⁠according to reports in US media, hours after US vice-president JD Vance said he was optimistic diplomatic efforts to end the war were moving in the right direction.

The strikes were reported as being “defensive”, and not thought to be a signal of a return to full hostilities, but came on the eve of crucial midterm elections in which Donald Trump’s Republican party is expected to be punished by voters for the cascading effect the war has had on the US cost of living.

Continue reading…

Comments

Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user's Internet connection out to strangers and conducts advertising fraud. Experts involved in the takedown say the action is likely to sever the botnet's access to more than 10 million additional compromised systems, including other Internet of Things (IoT) products such as Android-based healthcare devices and karaoke machines.

Apple hinted at ways that it could spur revenue through third-party "opportunities" during its Monday night earnings call.

A Kyiv startup’s pocket-sized, 10-ounce receiver lets Ukrainian troops watch the video feeds of Russian drones, though Russian moves toward digital video and AI-guided drones that emit no signals could make the victory short-lived.

Y Combinator Garry Tan has jokingly admitted that he's suffered from "cyber psychosis” and barely sleeps sometimes because he’s so excited to be working with his AI agents. On a new episode of Walter Isaacson’s podcast, The Builders, Tan put a price tag on his passion.

Comments

"[V]ulnerabilities that have been tolerated for far too long can now be discovered and exploited at a scale that was once unimaginable," the NCSC's chief will warn in releasing the agency's annual report.

Comments

Revised IPO filing warns 12x revenue growth is unlikely to continue

The one-year-old startup is now valued at $300 million.

Apple says unprecedented memory chip costs will continue to rise, raising questions about future device prices as its inventory climbs to $14.5 billion.

Your industrial IoT gateway isn't exposed to the internet, right? RIGHT?!

Comments

Comments

The record theft shows how weak system separation, inadequate controls, and untested attack possibilities can turn one breach into systemic loss.

RSI is the point at which AI grows so good at training itself that it spawns a dramatic acceleration of AI capabilities. To the AI doomers, RSI represents the cataclysm from which there is no return.

Comments

Blockchain security companies said more than $46 million left the Mercado Bitcoin platform.

Chinese hackers used ARTEX, an open-source, multi-agent AI penetration-testing framework, in attacks against more than 200 organizations across 14 countries. […]

Comments

Turns out legislation may have bugs, too

Millions of Americans are turning to AI for election information, but chatbots are getting voting facts wrong and recommending candidates, raising concerns they could influence voters' decisions.

A recent post by the BYOD gang appears to line up with a security incident that prompted campus-wide action at Michigan State University. BYOD drew attention in October for an attack on the University of New Mexico.

German lawmakers and a filmmaker are among the people who received notifications from Apple warning that their phones may have been hacked.

Comments

She is the world’s youngest self-made female billionaire, unseating Taylor Swift and Lucy Guo.

Comments

The website builder said that the job losses are part of a broader restructuring of its organization.

Videostrong accused of shipping devices with a backdoor baked in

Financial technology company Abrigo has restored its Sageworks risk management application, except for borrower-facing capabilities, following an outage triggered by "irregular activity" in its environment. […]

Comments

Comments

Linux TCP vulnerability CVE-2026-98432 was patched upstream on October 5, 2026, but vendors spent two weeks disputing severity scores before disclosure, leaving the fix already available while warnings were delayed.

Comments

Google and industry partners have dismantled the XCPE malware botnet consisting of more than 1.3 million Android TV streaming TV boxes that Google says its manufacturer intentionally infected with malware to generate revenue through cybercrime activities. […]

The tsunami of imitators is way bigger than any one model maker can stem.

IP house believes optics demand is going to explode as Nvidia and others eye bigger systems

OpenAI is raising Security Bug Bounty rewards and introducing report quality, loyalty, and priority campaign bonuses for independent security researchers.

OpenAI is preparing its next internal security sprint with Cathedral Systems to test and strengthen its defenses using AI.

Marvell's planned purchase of Lumentum is one of the biggest acquisitions in tech history. And they both have the same strategic investor: Nvidia.

Comments

In the middle of a datacenter capex binge, vendor promises no more borrowing until the end of 2030

We launched the Nightwatch Risk Assessment a couple of weeks ago. Since then, we’ve found critical threats in 100% of the environments where we’ve run it. Naturally, we’ve been getting questions about how it works (and how folks can see it in action!) In this post, Robert explains how Nightwatch investigates activity in your SIEM and EDR, follows the evidence, and decides what to investigate next, even when there’s no alert to start from. Here’s how the adaptive threat discovery works: https://lnkd.in/g2chBsac