Oct 10, 2026Twila Rosenbaum
Google has disclosed that several of its domains were affected by a recent hijack of third-party country-code top-level domains. The incident targeted .gh, .sl, and .as ccTLDs, allowing attackers to modify authoritative DNS records and obtain unauthorized HTTPS certificates. Google blocked the certificates in Chrome and worked with issuing CAs to revoke them, while analysis of Certificate Transparency logs revealed broader impact across other organizations. Domain owners are urged to monitor CT logs and publish restrictive CAA records.
View more
Oct 10, 2026Twila Rosenbaum
Google and Mandiant have warned that ShinyHunters, tracked as UNC6240, has launched a fresh mass-exploitation campaign against Oracle PeopleSoft customers. The group modified its exploit to bypass WAF rules blocking the PSEMHUB endpoint by using %50, the URL-encoded form of P. The new wave has expanded beyond education into agriculture, government, healthcare, IT services, technology, and transportation. Attackers have deployed JSP web shells, the SideEye backdoor, Neo-reGeorg, and MeshCentral while abusing service accounts to access data and credentials.
View more
Oct 10, 2026Twila Rosenbaum
Microsoft has disrupted EvilTokens, an AI-powered phishing platform that used device code phishing to compromise more than 12,000 email accounts at over 10,000 organizations worldwide. The platform offered customized phishing themes, AI-assisted targeting, and persistent access to victims' inboxes for a $1,500 entry fee and $500 monthly subscription. Microsoft seized 50 websites and disabled more than 150 domains, while two suspects were arrested in the United Kingdom. Partners including SpyCloud, Cloudflare, OpenAI, and Coinbase contributed to the takedown.
View more
Oct 10, 2026Twila Rosenbaum
A Swiss court sentenced a Ukrainian ransomware developer to nearly 13 years in prison. Researchers disclosed Plugin4Shell, a zero-click flaw affecting major AI coding agents. A maximum-severity SAP vulnerability is under emergency patching. The week also brought new AI risk data, an npm info-stealer tied to a bug bounty hunter, extraditions of Black Axe leaders, and fixes for WordPress and TP-Link flaws.
View more
Oct 10, 2026Twila Rosenbaum
A recent wave of AI tools has shortened the time attackers need to find vulnerabilities and build exploits. Some vendors have rebranded long-standing defense-in-depth practices as 'virtual patching.' Yet the core protections remain the same: identity and access management, network segmentation, least privilege, endpoint security, application security, data encryption, preventive and detective controls, and disciplined processes. Enterprises that focus on these fundamentals will be better prepared for faster attacks.
View more
Oct 09, 2026Twila Rosenbaum
Mistral has opened public preview for Large 4, its newest flagship model, letting enterprises test multi-step workflows before a full release later in October. The model offers a 1M-token context window, posts 59.9% on AutomationBench, 49.8% on the Coding Agent Index, and 61.7% on DeepSWE v1.1. Planned downloadable weights would allow private deployment, but API prices are significantly higher than Large 3. Even with a two-week launch discount, input and output rates remain above the previous generation.
View more
Oct 09, 2026Twila Rosenbaum
Reflection AI has unveiled Beam, a 501-billion-parameter open-weight model designed for enterprise coding, multi-step reasoning, and autonomous agents. The Nvidia-backed lab positions Beam as a sovereign alternative to Chinese open-weight models, emphasizing data ownership and lower inference compute. Beam is scheduled for release under an Apache 2.0 license after red-teaming.
View more
Oct 09, 2026Twila Rosenbaum
Zankore has secured a senior term loan of up to $3.1 billion to build an initial 100 megawatts of Nvidia AI infrastructure in Indonesia. The platform, backed by Indosat Ooredoo Hutchison, Ooredoo Group, Nvidia, and Nokia, aims to scale toward 1 gigawatt of Nvidia DSX AI Factory capacity. The financing moves Indonesia’s regional AI hub ambitions into funded deployment as competition over GPUs, data centers, and power intensifies across Southeast Asia.
View more
Oct 09, 2026Twila Rosenbaum
Norway is preparing to restrict AI glasses in selected public places, including schools, gyms, health facilities and places frequented by children. The government plans to send temporary legislation to the Storting as quickly as possible while an expert group studies body-worn technology and permanent rules. Officials are also weighing whether the ban should cover ordinary camera glasses and other recording-capable wearables, not just AI-branded products. Employers have already begun setting their own workplace policies ahead of national law.
View more
Your experience on this site will be improved by allowing cookies
Cookie Policy
These cookies are essential for the website to function properly.
These cookies help us understand how visitors interact with the website.
These cookies are used to deliver personalized advertisements.
