Top hyperscalers likely to have more AI-linked debt than now known
S&P Global estimates the world's biggest tech firms are likely to have more AI-linked liabilities than currently known, although its...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
SUBCO brings in joint CIO and CISO
Key points SUBCO has appointed Andrew Bacon as its joint chief information officer and chief information security officer. Bacon joined...
WhatsApp Help Pages Leaked Hidden Instructions for a Meta Chatbot
Around 80 pages on WhatsApp’s website exposed instructions that were designed for its chatbot, including “WHAT NOT TO SAY.” Meta...
The AI Exchange: Innovators in Payment Security Featuring AuditSafe
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature...
AI Governance in Higher Education: A University CISO’s Playbook
Last Updated: 5 October 2026 Higher educationAI governancePlaybook10 min read Every AI governance guide I read assumes the same thing:...
Meta wants to scrape your website to train its AI, and you can’t say no
Meta wants to scrape your website to train its AI, and you can’t say no Pierluigi Paganini October 19, 2026...
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives...
Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from...
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone...
GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects...
From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software
The Hacker NewsOct 19, 2026Artificial Intelligence / Enterprise Security In Salesforce Agentforce, the recommended way to make an agent respond...
Deepfakes and Election Manipulation: UK Watchdog Seeks Faster Detection
Deepfakes and Election Manipulation: UK Watchdog Seeks Faster Detection Pierluigi Paganini October 19, 2026 The UK Electoral Commission is building...
Big Fish: OpenBSD Root Exploit Chains a 37-Year-Old BSD Bug With a Kernel Flaw
Big Fish: OpenBSD Root Exploit Chains a 37-Year-Old BSD Bug With a Kernel Flaw Pierluigi Paganini October 19, 2026 OpenBSD...
Attackers Abuse Stolen ConnectWise Application Credentials to Target Microsoft 365
Attackers Abuse Stolen ConnectWise Application Credentials to Target Microsoft 365 Pierluigi Paganini October 19, 2026 Attackers stole ConnectWise application credentials...
Japan’s SiteGuard WAF flaw CVE-2026-106931 is already being exploited
Japan’s SiteGuard WAF flaw CVE-2026-106931 is already being exploited Pierluigi Paganini October 19, 2026 Attackers are exploiting vulnerability CVE-2026-106931 in...
