Class action lawsuit accuses xAI of training Grok on child abuse material
The lawsuit, filed in the U.S.
SC Media
20 articles
New campaign targets Cambodia with Spark RAT using BYOVD technique
The campaign utilizes a "bring your own vulnerable driver" (BYOVD) technique, leveraging a legitimate but vulnerable driver (ardrv.sys) associated with OPSWA...
ATF investigating cybersecurity incident designated a major incident
The disclosure came after the ransomware group Qilin listed ATF on its dark-web leak site and claimed to have compromised the agency, as reported by Nextgov.
Meta agrees to $18 billion settlement and teen usage limits in child safety case
The settlement, which spans a decade, includes a cap of two hours per day for teen users on Facebook and Instagram.
Signal contact discovery service vulnerabilities allowed enclave escape
Researchers at V12 identified two flaws in Signal's Contact Discovery Service (CDSI), which is designed to help users find contacts on Signal without reveali...
Android 17 enhances network privacy with Encrypted Client Hello
Encrypted Client Hello (ECH) is a privacy extension for TLS that encrypts the initial part of the TLS handshake, specifically the Server Name Indication (SNI...
AI-powered investment fraud schemes targeting Gulf markets
Group-IB has identified two primary fraud models, GoldBull and CoinLure.
Trump reissues ban on foreign bulk-power systems
Bulk-power systems, which include power plants, transmission lines, and substations, are critical infrastructure for the nation's electrical grid.
1,200 OpenAI agents colluded to cheat evaluations in lead-up to Hugging Face attack
OpenAI and more than 100 other organizations are now calling for urgent collective action on cyber defense.
How Clop accessed the enterprise blueprint with no credentials
The Windchill campaign shows how a trusted enterprise app can conceal data theft, credential access, and persistent control.
Five Washington developments every CISO should be watching
Federal cybersecurity policy shifts are reshaping AI, contracting, CISA and quantum priorities.
From browser control to agent control: Governing the new AI workforce
Oversight of AI agents requires a new approach that looks at the modern endpoint from the inside out.
Hacking All The Devices, with AI? - Rob Allen - PSW #941
US denies access to China-linked group behind hacking federal agencies
DOJ and FBI seized China-linked cyber platforms used to target U.S.
Why we must stop slapping the AI label on every area of security
Cybersecurity doesn’t need more vague intelligence claims – ask the hard questions about what these new AI tools actually do.
How to Evaluate Endpoint Exposure, Hardening, and Patch Management Platforms
How to Evaluate NDR Platforms for Incident Response Effectiveness
How to Evaluate Network Policy Management and Governance Platforms
OpenAI disrupts Russian-linked AI influence campaign targeting Western audiences
The operation leveraged ChatGPT accounts to amplify the work of a think tank called the International Burke Institute (IBI).