Uncategorized

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000 2026-09-01 at 12:05 By METR (short for Model Evaluation and Threat Research and pronounced “Meter”), a research non-profit that evaluates frontier artificial intelligence (AI) models for their ability to carry out long-horizon, agentic tasks, disclosed that it suffered “two notable security incidents” where […]

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis 2026-09-01 at 11:26 By Cybersecurity researchers have disclosed a new technique dubbed GuardBreaker that’s been put to use by a Russia-aligned threat actor known as UAC-0099 against a target in Ukraine with an aim to interfere with artificial intelligence (AI)-assisted analysis. The idea,

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity 2026-09-01 at 10:22 By Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck. The vulnerabilities in question are listed below – CVE-2026-0768 (CVSS score: 9.8) – A lack of proper validation of a

Security Leaders Share Advice for Insider Threat Awareness Day 2026-09-01 at 07:00 By This Insider Threat Awareness Day, security leaders share their thoughts alongside advice on how to reduce insider threats. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AI chatbots linked to ‘significantly higher emotional problems’ for teens — here’s who is most at risk 2026-09-01 at 04:37 By Rachel Sacks New research has found an alarming effect on teens’ emotional state from the use of AI chatbots, with certain groups most at risk. This article is an excerpt from Latest Technology News

Apple’s Tim Cook wraps up 15-year tenure as CEO; John Ternus readies for top job during challenging time 2026-08-31 at 22:14 By Thomas Barrabi Apple treated Tim Cook to a farewell tour as he wrapped up his 15-year tenure as CEO on Monday and passed the reins to successor John Ternus – who faces challenges ranging from

North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales 2026-08-31 at 21:07 By Threat actors with ties to the Democratic People’s Republic of Korea (aka DPRK or North Korea) have been observed seeking job opportunities beyond the information technology (IT) sector, with recent investigations identifying suspected workers employed in sales and marketing and

Apple TV just raised its monthly bill, again — but they’re not the only streamer to hike prices this year 2026-08-31 at 20:56 By Aurielle Weiss Nearly every streaming service has seen a price increase this year alone. This article is an excerpt from Latest Technology News | New York Post View Original Source

Only 33% of AI Agents Provisioned With Least-Privilege Access 2026-08-31 at 20:00 By Only 33% of AI agents are provisioned with least-privileged access, yet 94% are confident their agents don’t have more access than necessary. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Bureau of Alcohol, Tobacco, Firearms and Explosives Discloses Cyber Incident 2026-08-31 at 19:00 By The bureau confirmed an incident after the Qilin ransomware group claimed a breach.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

General William J. Walker to Receive Lifetime Achievement Award 2026-08-31 at 18:11 By Retired U.S. Army Major General William J. Walker will be honored by the Federal Enforcement Homeland Security Foundation at the 2026 Ridge Awards Gala. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Hasbro Breach Exposes Employee Information 2026-08-31 at 18:00 By Hasbro experienced a data breach in March.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Thrive Capital’s Josh Kushner hits out at ‘political dynamics’ of scrapped $20B FIFA deal 2026-08-31 at 17:56 By Thomas Barrabi The lengthy statement from Kushner, obtained exclusively by The Post, came just days after UEFA took the European soap opera to US federal court, asking a Manhattan judge for permission to subpoena Thrive about its

Security Leaders Weigh in on Recent PaperCut Vulnerabilities 2026-08-31 at 16:50 By On August 27, PaperCut announced that hackers were exploiting a vulnerability to access sensitive information.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More 2026-08-31 at 16:50 By The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the installer. Trusted systems collected traffic and passwords, then cleaned the logs. Old bugs formed new

Is a $300 smart necklace the chic secret to preventing skin cancer, sunburns and aging? 2026-08-31 at 15:59 By McKenzie Beard “[Your] weather app hasn’t been telling you the whole story,” Stacy Salvi, co-founder and CEO of The90, told The Post. This article is an excerpt from Latest Technology News | New York Post View

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets 2026-08-31 at 15:57 By Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX’s artificial intelligence (AI)-powered coding assistant Cursor to break into target networks, according to findings from CloudSEK and Gambit Security. The two independent analyses are based on exposed

Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance 2026-08-31 at 15:57 By Claude Code reads files, runs shell commands, invokes MCP tools, and acts through the credentials available on a developer’s machine. Anthropic’s new Compliance API endpoints give security teams their clearest view yet into that activity. They also expose a

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions 2026-08-31 at 15:14 By The threat actor known as Silver Fox has been observed distributing the ValleyRAT backdoor disguised as a signed Chinese adware application, running the malware under a trusted process to slip past users who add such software to their antivirus

DOJ’s ‘sweetheart’ $400M settlement with TikTok puzzles DC insiders: ‘How did you get to that number?’ 2026-08-31 at 14:34 By Thomas Barrabi The Justice Department’s $400 million deal to settle TikTok child privacy allegations has puzzled Beltway insiders over its easy terms and an unusual lack of transparency around the resolution to the blockbuster case,