Iceland Review reports: A security breach affected Inna, the student-information system used by Icelandic upper-secondary schools. It allowed a student to…
Tag: EN
Smashing Security podcast #491: How AI agents are spooking the banks
Bank of America has a message for its customers: please, for the love of God, stop handing your banking passwords to your AI assistant. And if your robot…
Lab 1 warns breach data now exposes thousands more firms
Mara Sugue reports: Lab 1 has published a report analysing 328 million files from 2,089 datasets exposed after cyber attacks. It found that the median…
Sweden Excludes ChatGPT and Claude From Government Workflows While Retaining Copilot
It has been reported that Sweden’s Government Offices are blocking direct access to ChatGPT from OpenAI and Claude from Anthropic’s official computers, in…
Why edge-cloud AI inference pipelines are key
Most enterprise AI conversations still start in the wrong place. They begin with models, platforms, and cloud services. Which foundation model is best?…
OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed
OpenAI has introduced GPT-6 Cyber, a version of GPT-6 Astra trained to find software vulnerabilities, test how attackers could exploit them, and help…
Hackers Use Fake Streaming Apps to Spread Mirax Android Malware and Steal Bank Accounts
Hackers are using streaming app lures to distribute Mirax. This Android banking trojan lets operators remotely control victims’ phones and initiate…
Virtualization security: attack layers and misconfiguration impact
A detailed breakdown of misconfigurations in virtual environment cybersecurity as shown by examples of ransomware cases on ESXi and Proxmox environments.
Claude Dispatch Flaw Lets Malicious Browser Extensions Run Code on Connected Computers
A flaw in Anthropic’s Claude Dispatch let a malicious browser extension run commands on a computer via Claude Desktop. That computer could even be a…
Critical Rails Bug Threatens to Derail Vulnerable Servers
An attacker could write arbitrary files and read sensitive files via images uploaded to the Rails Active Storage ImageMagick integration, possibly…
Python is de-jitted but still de-lovely
A major experimental component of Python, its native JIT (just-in-time) compiler , is to be removed. But that won’t make Python any less attractive or…
Sarajevo Cyber Security Summit 2026 puts the Western Balkans’ cyber resilience in focus
Cyber Security Summit 2026 in Sarajevo will examine the practical security questions organisations face when a supplier, network device or critical…
ARTEX AI Hacking Framework Found on 1,465 Public Servers, Some Hosting Cyberattack Tools
Security researchers have found ARTEX, an AI-powered penetration-testing framework, exposed on 1,465 internet-facing hosts. Some servers also hosted…
OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions
After its sandbox proxy failed, an internal OpenAI model crafted raw packets and probed AWS services trying to reach the internet.
Hackers exploited iOS and Android flaws to infect phones
Researchers say group may have been Kremlin-sponsored in search of diplomatic targets.
Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
ARTEX, a Chinese open-source agentic penetration-testing platform, to run autonomous attacks. The operators set a goal and then mostly check progress.…
MetaMask says recent attack didn’t affect wallet infrastructure
Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure. […]
Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released
Barracuda patched two flaws that can be chained to give attackers root access to Email Security Gateway appliances. Barracuda has patched two…
Apple turns iCloud into spy cloud, will start looking at public share links
Content shared with anyone who has the URL will be scanned for ‘harmful content,’ though the iMaker hasn’t defined that term
CVE-2026-122266 – Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS
Bulletin ID: 2026-170-AWS Publication Date: 11/04/2026 13:30 PM PST Description: We identified CVE-2026-122266, an issue in Amazon EKS Network Policy…