Uncategorized

Critical Microsoft Excel bug weaponizes Copilot Agent for zero-click information disclosure attack 2026-03-10 at 22:35 By Jessica Lyons Could steal sensitive personal and financial data After a whopper of a Patch Tuesday last month, with six Microsoft flaws exploited as zero-days, March didn’t exactly roar in like a lion. Just two of the 83 Microsoft […]

Amazon insists AI coding isn’t source of outages 2026-03-10 at 21:44 By Thomas Claburn E-souk disputes report linking ‘Gen-AI assisted changes’ to recent high-impact incidents Amazon’s weekly operations meeting today reportedly focused on recent service outages and on the role that code changes attributed to generative AI may have played. However, the company is downplaying

AI nonsense finds new home as Meta acquires Moltbook 2026-03-10 at 21:21 By Brandon Vigliarolo Think it’s hard to tell bot from human on Facebook now? The biggest generator of AI slop on the internet has a new home, as Meta has reportedly acquired Moltbook and hired the team behind the social network for AI

Cybercrime isn’t just a cover for Iran’s government goons – it’s a key part of their operations 2026-03-10 at 20:25 By Jessica Lyons Ransomware, malware-as-a-service, infostealers benefit MOIS, too Iranian government-backed snoops are increasingly using cybercrime malware and ransomware infrastructure in their operations – not just hiding behind criminal masks as a cover for destructive

Health trackers aren’t doctors — but here’s how they’re saving people’s lives 2026-03-10 at 18:21 By Lara Lewington There have been multiple accounts of people getting diagnoses for lymphoma — as well as conditions like lupus and AFib — after wearable metrics convinced them to see a doctor. The Post spoke to three patients. This

Musk admits Starship V3 launch date has slipped as Super Heavy booster rolls into place 2026-03-10 at 18:21 By Richard Speed Launch predictions continue to be optimistic as 2027 and Artemis III near SpaceX has rolled another Starship super heavy booster to the launch pad as the company’s boss, Elon Musk, admits the first launch

Flying cabs, next-gen aircraft cleared for takeoff in 26 states 2026-03-10 at 18:21 By Brandon Vigliarolo FAA launches pilot projects starting this summer The skies over parts of the US could soon get busier, as the Federal Aviation Administration launches pilot projects spanning 26 states to test electric air taxis and other next-gen aircraft, with

Security Leaders Discuss Trump’s Cyber Strategy for America 2026-03-10 at 18:20 By Security leaders share approval and critiques of Trump’s Cyber Strategy for America.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

KadNap Malware Infects 14,000+ Edge Devices to Power Stealth Proxy Botnet 2026-03-10 at 18:20 By Cybersecurity researchers have discovered a new malware called KadNap that’s primarily targeting Asus routers to enlist them into a botnet for proxying malicious traffic. The malware, first detected in the wild in August 2025, has expanded to over 14,000 infected

Oracle moves to assure MySQL community it really does care 2026-03-10 at 16:54 By Lindsay Clark Big Red waves new features including vector support, while skeptics await concrete timescales Oracle has proposed a more transparent approach to developing its open source database MySQL, including new features supporting vectors.… This article is an excerpt from The

Ericsson blames vendor vishing slip-up for breach exposing thousands of records 2026-03-10 at 16:33 By Carly Page Crooks used simple phone scam to compromise vendor account, spilling personal and financial data belonging to more than 15,000 people A voice-phishing scam targeting one of Ericsson’s service providers has exposed the personal data of more than 15,000

New “LeakyLooker” Flaws in Google Looker Studio Could Enable Cross-Tenant SQL Queries 2026-03-10 at 16:33 By Cybersecurity researchers have disclosed nine cross-tenant vulnerabilities in Google Looker Studio that could have permitted attackers to run arbitrary SQL queries on victims’ databases and exfiltrate sensitive data within organizations’ Google Cloud environments. The shortcomings have been collectively named

Sorry, kids. Memory crunch threatens to kneecap Chromebook shipments 2026-03-10 at 16:23 By Dan Robinson Low-cost computers bashed by billion-dollar investment in AI infrastructure Chromebooks, the low-cost computing option popular with education buyers, will be squeezed hardest this year as memory prices spiral out of control.… This article is an excerpt from The Register View

Linux PC vendor System76 tries to talk Colorado down over OS age checks 2026-03-10 at 16:08 By Liam Proven Don’t celebrate yet – more states are considering them As more US states push to mandate OS-level age checks, System76 is taking its fight directly to lawmakers.… This article is an excerpt from The Register View

Fake job applications pack malware that kills EDR before stealing data 2026-03-10 at 15:31 By Carly Page Russian-speaking attackers lure HR staff into downloading ISO files that disable defenses A Russian-speaking cyber criminal is targeting corporate HR teams with fake CVs that quietly install malware which can disable security tools before stealing data from infected

Microsoft Authenticator to nuke Entra creds on rooted and jailbroken phones 2026-03-10 at 15:28 By Richard Speed Warning, lockout, then wipe if your device trips detection Microsoft is removing Entra credentials for school and work from jailbroken and rooted devices running iOS and Android.… This article is an excerpt from The Register View Original Source

How to Stop AI Data Leaks: A Webinar Guide to Auditing Modern Agentic Workflows 2026-03-10 at 15:06 By Artificial Intelligence (AI) is no longer just a tool we talk to; it is a tool that does things for us. These are called AI Agents. They can send emails, move data, and even manage software on

APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military 2026-03-10 at 15:06 By The Russian state-sponsored hacking group tracked as APT28 has been observed using a pair of implants dubbed BEARDSHELL and COVENANT to facilitate long‑term surveillance of Ukrainian military personnel. The two malware families have been put to use since April 2024,

The Zero-Day Scramble is Avoidable: A Guide to Attack Surface Reduction 2026-03-10 at 15:06 By You can’t control when the next critical vulnerability drops. You can control how much of your environment is exposed when it does. The problem is that most teams have more internet-facing exposure than they realise. Intruder’s Head of Security digs

The Public Sector Case for Repatriating IAM in the Age of AI 2026-03-10 at 13:01 By Jason Wilcox Part 3: Government-scale stakes demand IAM that keeps pace with the AI multiplier This article is an excerpt from SECURITY.COM View Original Source