The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet
The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet Pierluigi Paganini...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Teams and Copilot are changing addresses: update your firewalls
if ( !emtpy($headline_subheadline ) ) : ?> Two popular Microsoft services will be redirected to new URLs, causing problems for...
ConnectWise patches critical ScreenConnect authentication failure after five days
if ( !emtpy($headline_subheadline ) ) : ?> The company seeks to reassure users after revealing a new vulnerability. endif; ?>...
Apple’s A20 Pro rewrites the rules for chip design — again
if ( !emtpy($headline_subheadline ) ) : ?> Apple didn't just set the rules for folding devices this week, it also...
Anthropic finds evidence of a fourth AI escaping from containment
if ( !emtpy($headline_subheadline ) ) : ?> After plowing through four million more chat transcripts, though, it hasn’t found any...
GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
Ravie LakshmananSep 11, 2026Vulnerability / Web Security GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability...
Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks
Ravie LakshmananSep 11, 2026Artificial Intelligence / Cybercrime Anthropic on Thursday said it identified and disrupted industrial-scale illicit distillation attacks against...
Claude Used to Automate Exploitation and Data Theft Across Multiple Victims
Ravie LakshmananSep 11, 2026Artificial Intelligence / Cyber Operations Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its...
Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection
Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing...
Your Critical Vulnerabilities Might Not Be Your Biggest Risk
Security teams have become exceptionally talented at finding vulnerabilities. Now, it’s time to turn our attention to optimizing the process...
Anthropic Says Claude Used in Possible Bioweapon Research
Claude was built to help with complex research. Anthropic says some scientists pushed that capability into territory with possible bioweapon...
EU Gets Access to Anthropic Cyber AI — But Not Its Newest Model
Europe can finally put Anthropic’s advanced cyber AI through tests of its own. The EU cybersecurity agency ENISA has gained...
“Eye” spy: Cyclops Blink returns with extended capabilities
In August 2026, Counter Threat Unit™ (CTU) researchers analyzed a malicious 64-bit Linux executable named timezone_check that was discovered on...
The US and Mexico Announce They’re Teaming Up Against Drones
The new joint operation uses laser-based technology capable of detecting, tracking, and disabling commercial drones linked to human and drug...
Attackers Exploit Critical Cisco FMC Flaw to deploy Qilin ransomware
Attackers Exploit Critical Cisco FMC Flaw to deploy Qilin ransomware Pierluigi Paganini September 11, 2026 Three threat groups are exploiting...