The Edge of the Cyber World See the latest
Noteworthy stories that might have slipped under the radar: Tensorlake npm SDK compromised, Empire Market co-founder gets 40 years, exposed NVIDIA GPU monitors leak telemetry. The post In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years appeared first on SecurityWeek.
Hackers hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several Google domains. The post Google Domains Impacted by Recent ccTLD Hijacks appeared first on SecurityWeek.
The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands. The post Unpatched AhsayCBS Vulnerabilities Exploited in the Wild appeared first on SecurityWeek.
Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost Android devices. The post Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries appeared first on SecurityWeek.
Flax Typhoon and other APTs used MicroScan and FishHub to scan and hack US and foreign critical infrastructure. The post US Disrupts Chinese State-Sponsored Hacking Tools appeared first on SecurityWeek.
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in. The post Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security appeared first on SecurityWeek.
Those closest to executives must match their security postures because the weakest link in a family becomes the entry point for attacks.
As AI agents gain authority over business systems, attackers can manipulate them like business email compromise (BEC) victims.
The UK’s data protection regulator just put a number on something that has been mostly theoretical until now: what it actually takes to get OpenAI, Google, Microsoft, Meta, Amazon, Apple, Anthropic, Cohere, DeepSeek, and Stability AI to change how they handle personal data inside their AI models. On October 8, 2026, the Information Commissioner’s Office…
The administrator overseeing Cash App’s $15 million data breach settlement confirmed on September 28, 2026, that payments to approved claimants would go out during October, according to OpenClassActions. For the roughly 40,380 Cash App users whose claims survived a two-year review process, the payments landing in Venmo balances, Zelle transfers, prepaid cards and paper checks…
