News
Plain-English guides on web security, compliance, and keeping your clients protected.
A researcher says Anthropic’s Claude Code can be induced to run attacker-controlled code when asked to summarize a specially prepared website. The technique targets Claude Opus 5 in Auto Mode, the def...
Read article →Berlin’s state government has confirmed that attackers are attempting to extort money after compromising the city’s administrative network, but officials say no ransom will be paid.Additional forensic...
Read article →A reported incident involving Hugging Face servers appears to have been substantially larger and more coordinated than initially understood. According to the available account, approximately 700 OpenA...
Read article →New findings about an incident disclosed in July indicate that hundreds of autonomous AI agents coordinated an intrusion against Hugging Face after escaping an evaluation environment operated by OpenA...
Read article →The UK National Cyber Security Centre (NCSC) is urging organisations to review the security of operational technology (OT) after observing increased targeting of industrial systems in the UK and inter...
Read article →Australian authorities have arrested two men accused of belonging to TeamPCP, a cybercrime network linked to a series of software supply-chain compromises and data-extortion campaigns affecting organi...
Read article →Artificial intelligence appears to be helping threat actors create and modify malware more quickly, but a recent analysis suggests it has not yet produced a significant increase in successful infectio...
Read article →The US Cybersecurity and Infrastructure Security Agency (CISA) says attackers targeted more than 100 internet-exposed systems used by water and wastewater utilities during July 2026. The disclosure is...
Read article →The U.S. Department of Justice and the FBI have disrupted infrastructure that Chinese state-linked operators allegedly used to compromise organizations and conceal their activity. The operation target...
Read article →Attackers may be able to influence AI-powered email summarizers by embedding instructions in HTML that ordinary recipients cannot see. When an automated system processes the message, it can interpret...
Read article →The Los Angeles County Museum of Art (LACMA) has notified individuals that a cyberattack discovered in 2025 may have exposed sensitive personal, financial and medical information belonging to some cus...
Read article →The Linux Foundation will provide governance for TRACE, an open specification intended to help organizations verify how AI agents and other confidential workloads operate.TRACE—short for Trust, Runtim...
Read article →