The AI Exchange: Innovators in Payment Security Featuring Integrity360
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Weekly Update 521: Breach Perception v. Reality
12 September 2026 I think what really resonates with me this week is being able to completely turn the tables...
Friday Squid Blogging: Rotting Squid on a Beached California Boat
Friday Squid Blogging: Rotting Squid on a Beached California Boat Smells awful: But an estimated 30 to 50 tons of...
My Talk at DEF CON
My Talk at DEF CON Last month, I gave a talk at DEF CON on AI hacking: what happens when...
Meta Sued Over Training Data for Its AI and Face-Recognition Systems
The proposed class action alleges Meta illegally harvested people’s Facebook and Instagram photos to train its AI image-generation models and...
The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet
The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet Pierluigi Paganini...
Teams and Copilot are changing addresses: update your firewalls
if ( !emtpy($headline_subheadline ) ) : ?> Two popular Microsoft services will be redirected to new URLs, causing problems for...
ConnectWise patches critical ScreenConnect authentication failure after five days
if ( !emtpy($headline_subheadline ) ) : ?> The company seeks to reassure users after revealing a new vulnerability. endif; ?>...
Apple’s A20 Pro rewrites the rules for chip design — again
if ( !emtpy($headline_subheadline ) ) : ?> Apple didn't just set the rules for folding devices this week, it also...
Anthropic finds evidence of a fourth AI escaping from containment
if ( !emtpy($headline_subheadline ) ) : ?> After plowing through four million more chat transcripts, though, it hasn’t found any...
GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
Ravie LakshmananSep 11, 2026Vulnerability / Web Security GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability...
Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks
Ravie LakshmananSep 11, 2026Artificial Intelligence / Cybercrime Anthropic on Thursday said it identified and disrupted industrial-scale illicit distillation attacks against...
Claude Used to Automate Exploitation and Data Theft Across Multiple Victims
Ravie LakshmananSep 11, 2026Artificial Intelligence / Cyber Operations Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its...
Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection
Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing...
Your Critical Vulnerabilities Might Not Be Your Biggest Risk
Security teams have become exceptionally talented at finding vulnerabilities. Now, it’s time to turn our attention to optimizing the process...
