Bias in Qwen3-Coder Model
Bias in Qwen3-Coder Model Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers:...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses
Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how...
uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts
A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies...
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in...
Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions...
Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
Swati KhandelwalOct 26, 2026Artificial Intelligence / Endpoint Security A malicious instruction file sitting in a developer's Downloads folder tried to...
Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem
New integration embeds Proofpoint’s API-based advanced email threat detection into the Microsoft security console for stronger, defense-in-depth protectionSUNNYVALE, Calif., October...
AI-enabled emergency management: a hint at PLA’s future AI integration
China’s Ministry of Emergency Management (MEM) compares disaster response to ‘fighting a war’ and, since 2022, has used a digital...
In Pictures: Securing Your Business In The Age Of Shadow AI NZ event with The Instillery
All rights reserved. This material may not be published, broadcast, rewritten or redistributed in any form without prior authorisation.Your use...
Ghost Sharks’ mines won’t be much use if Australia can’t act fast enough
So now it’s confirmed: Ghost Shark uncrewed submarines will be able to lay mines, up to 12 at a time....
In Pictures: Securing Your Business In The Age Of Shadow AI NZ event with The Instillery (VITG)
All rights reserved. This material may not be published, broadcast, rewritten or redistributed in any form without prior authorisation.Your use...
ACSC warns of critical vulnerabilities in Fortinet products
The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) has issued a critical alert urging organisations using Fortinet products...
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 5
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 5 Pierluigi Paganini October 25, 2026 Security Affairs AI-CYBERSECURITY newsletter includes a collection of the...
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
A single hacked device on a Tailscale network can be used to gain root access to other servers it can...
PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
Threat actors have been observed using agentic artificial intelligence (AI) platforms for post-exploitation activity following the abuse of the PHP2Shell...
