San Francisco’s city attorney has hit Meta with a cease-and-desist letter telling the company to stop “allowing” paid advertisements that include AI-generated child sexual abuse content and asked it to explain how the ads repeatedly ran on its platforms. On… Read More "San Francisco Orders Meta to Stop ‘Allowing’ AI Child Abuse Ads"
Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome. The first in-the-wild use of BlueMoon has been attributed to the China-aligned state-sponsored… Read More "Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week"
MikroTik patches flaws currently being exploited to take over routers
MikroTik released patches in RouterOS 7.25 beta 3, 7.24.2, 7.23.4, and 6.49.21 and advises against enabling the SSH service on the internet interface. Despite this not being the default configuration, over 122,500 MikroTik devices have SSH reachable from the internet… Read More "MikroTik patches flaws currently being exploited to take over routers"
U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto
The U.S. Department of Justice (DoJ) on Wednesday announced coordinated actions aimed at an illicit online marketplace called Xinbi Guarantee that offered scam services, including seizing Telegram channels used to run the service, confiscating two cryptocurrency wallets, and deploying the… Read More "U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto"
Apple Doesn’t Want You to Worry About the New Apple Watch’s Listening Features
The new Apple Watch Series 12 and Ultra 4 come not just with better fitness tracking and upgraded noise reduction, but a whole new way to listen. Apple announced on Wednesday that the two smartwatches come with four opt-in “audio… Read More "Apple Doesn’t Want You to Worry About the New Apple Watch’s Listening Features"
Cyber Resilience Act Preparedness: Who’s Ready, and Who Can’t Be Reached
Computers are not safe. Even the best hardware and software products have the potential to conceal as-yet unknown vulnerabilities. And they aren’t all made that well. Many are shuffled into the world without a plan to detect, remediate, and notify… Read More "Cyber Resilience Act Preparedness: Who’s Ready, and Who Can’t Be Reached"
Why Internal ASM Needs Network Visibility
EASM focuses on what an attacker can see and reach from outside the network, things like exposed domains, internet-facing assets, and public cloud services. Internal ASM picks up from there, covering internal asset sprawl, third-party access, and what happens once… Read More "Why Internal ASM Needs Network Visibility"
Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Advisories
Major chipmakers AMD, Arm, and Nvidia published new security advisories on Tuesday to notify customers of vulnerabilities recently discovered in their products. AMD announced fixes for CVE-2026-43603, a NULL pointer dereference flaw in its Linux GPU kernel driver that could… Read More "Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Advisories"
HelmGuard Raises $7.3 Million for Agentic GRC and Security
AI risk and compliance startup HelmGuard today announced raising $7.3 million in seed funding. The investment round was co-led by Infinity Ventures and Frontline, with additional support from FinTech Collective, Stage 2 Capital, and Entrepreneurs First. Founded in 2024 by… Read More "HelmGuard Raises $7.3 Million for Agentic GRC and Security"
AI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns
Adversaries, both criminal and state-sponsored, are increasingly using AI to automate and scale their attacks, according to Google’s Threat Intelligence Group (GTIG). What started as relatively simple adversarial prompt injection into enterprise AI systems has become a full-blown war, with… Read More "AI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns"