The answer to AI uncertainty is adaptability, not paralysis
Every few weeks, the AI conversation seems to reset around a new warning.A model demonstrates an unexpected capability. An autonomous...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
For fast defence capability, look to commercial providers
The Australian defence establishment should urgently work with commercial providers to deliver military and dual-use capabilities that can be deployed...
Westpac spends US$12,000 in AI tokens on intranet migration
Key points Westpac migrated its internal intranet for $12,000 USD in AI tokens, versus a typical low seven-figure cost and...
Optus may ban smart glasses in stores, offices
Key points Optus is discussing cyber security policies that could regulate or even ban smart glasses in its stores and...
Australia considers banning the use of smart glasses in government buildings
Australia is considering barring the use of camera-equipped smart glasses in government workplaces due to privacy and security concerns, in...
UK silence over demand for Apple data access is farcical, lawyer says
The British government's refusal to confirm whether it has issued an order to bypass encryption to access customer data held by...
SilkParasite Infrastructure Links SpiceRAT to Central Asian Targets
SilkParasite Infrastructure Links SpiceRAT to Central Asian Targets Pierluigi Paganini September 17, 2026 Hunt.io links SpiceRAT, NodeEdgeRAT and NomadRAT to...
NightmareStresser Goes Offline in Global DDoS-for-Hire Crackdown
NightmareStresser Goes Offline in Global DDoS-for-Hire Crackdown Pierluigi Paganini September 17, 2026 The DOJ seized domains behind NightmareStresser, a DDoS-for-hire...
US Coast Guard and FBI board oil tanker to investigate cyber attack
An oil tanker bound for Texas was boarded mid-voyage by the US Coast Guard and FBI last month, after its...
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone
Swati KhandelwalSep 17, 2026Vulnerability / DNS Security Every release of the Unbound DNS resolver before 1.26.1 has a critical heap...
Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar
The Hacker NewsSep 17, 2026Security Operations / Artificial Intelligence A new CVE drops. Your scanner finds it. The severity score...
CISO’s Expert Guide to Agentic Pentesting for Websites
Attackers now weaponize new vulnerabilities in about five days (Mandiant, part of Google Cloud). The median organization takes 43 days...
China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America
Ravie LakshmananSep 17, 2026Malware / Cyber Espionage The China-aligned state-sponsored threat actor known as FamousSparrow has been observed deploying a...
OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads
Ravie LakshmananSep 17, 2026Artificial Intelligence / Vulnerability OpenAI on Wednesday disclosed six new instances of "unexpected or concerning model behavior"...
Cyberthreats are moving faster than SMBs: Readiness must accelerate
The cyberthreat landscape has been evolving for years. But there’s a sense today that things are escalating more rapidly than...
