AGL builds AI agent for security architecture reviews
Key points AGL has built an AI agent that automatically produces an initial draft of security architecture review documents. The...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
AI leaders warn UN of security risks
Executives from three of the world's leading artificial intelligence companies have briefed the UN Security Council amid warnings that increasingly...
ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack
ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack Pierluigi Paganini September 23, 2026 ShinyHunters claims FBI breach via PeopleSoft...
From admin to architect: Jamf’s vision for the autonomous Apple enterprise
if ( !emtpy($headline_subheadline ) ) : ?> AI was front and center at Jamf’s big event for Apple IT. endif;...
A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You
Swati KhandelwalSep 23, 2026DevOps Security / Supply ChainThe private email address GitLab gives you for filing issues by email is...
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH...
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead...
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Ravie LakshmananSep 23, 2026Malware / Cloud Security Unknown threat actors have managed to compromise two legitimate MemTensor packages across the...
New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control
Swati KhandelwalSep 23, 2026Vulnerability / Web Security A flaw in cPanel's CalDAV and CardDAV service lets anyone with a cPanel hosting account...
OpenAI Expands Outside Safety Reviews Into Model Training
OpenAI wants outside safety evaluators involved before its models are finished, not just shortly before launch. The company said Tuesday...
Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw
Meta says it issued a fix for the Muse zero-day vulnerability that would have let attackers do “whatever” they wanted...
Looking for free Robux? Here’s what’s real, and what’s a scam
Kids Online Fake giveaways, free Robux generators and lookalike login pages all target the same thing – your Roblox account...
EvilTokens made phishing-as-a-service look easy. Then it got taken down
EvilTokens made phishing-as-a-service look easy. Then it got taken down Pierluigi Paganini September 23, 2026 Microsoft, Coinbase and law enforcement...
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools Pierluigi Paganini September 23, 2026 Attackers spoofed...
CVE-2026-87902: how close is your WordPress to remote code execution?
CVE-2026-87902: how close is your WordPress to remote code execution? Pierluigi Paganini September 23, 2026 WordPress 7.1.2 fixes an unauthenticated...
