UK data watchdog criticizes Metropolitan Police for data handling failures
The UK's data protection regulator criticized the Metropolitan Police Service (MPS) for significant data handling failures, including sharing a stalking vict...
SC Media
20 articles
Salesforce's Agentforce 360 platform approved for sensitive Defense Department data
Salesforce's enterprise agentic AI platform, Agentforce 360, received approval from the Defense Department to securely handle high-sensitivity workloads, inc...
NVM Express updates specifications with post-quantum cryptography and SSD virtualization support
The NVM Express consortium released updates to its 11 specifications, introducing significant advancements in security and virtualization for solid-state dri...
Prompt injection remains top LLM threat, OWASP report finds
Prompt injection attacks continue to present the most dangerous threat from large language models (LLMs), despite the relatively low number of recorded incid...
Beacon CRM confirms cyberattack exposed UK charity data
Beacon CRM confirmed it was the target of a cyberattack that resulted in the exposure of data belonging to a significant number of UK charities.
US reportedly drafting ban on Chinese optical transceivers
The Trump administration is reportedly drafting import rules that would bar optical transceivers from China, a move that could significantly impact U.S.
Brazil's health system data exposed online
As outlined in HackRead, over 102,000 private records from Brazil’s health surveillance system were left accessible online without any security measures, exp...
Google mistakenly locks hundreds of Blogger websites
Google locked hundreds of legitimate Blogger websites, with some even being deleted, due to a false positive flagging them for violating the "Malware and Sim...
Apple's Private Relay feature has flaws that can expose user IP addresses
Apple's Private Relay, an opt-in feature designed to hide a user's IP address when browsing the internet with Safari, was found to have flaws that can reveal...
Agentic anarchy: Why using AI browsers just isn't worth the risk
Using an AI browser sounds like a good idea until you realize you've just given it the keys to your online identity.
Black Hat 2026: OpenAI reveals agents planned ‘collective attacks’ via secret ‘message board’
OpenAI also said its agents exploited a different JFrog Artifactory zero-day weeks before the Hugging Face attack.
AI agents caught using social engineering in UK security tests
UK researchers found AI agents using deceptive tactics to manipulate humans in security tests.
AI governance is the missing security control
AI governance shifts security left by embedding oversight before AI reaches production.
QuickFox VPN targeted in long-standing supply chain attack delivering FDMTP backdoor
In a report by The Hacker News, researchers disclosed a long-standing supply chain attack targeting QuickFox, a VPN and network acceleration tool used by ove...
Swiss Federal IT Agency FOITT compromised about 200 accounts due to SharePoint flaws
Switzerland’s Federal Office for Information Technology and Communications (FOITT) disclosed that approximately 200 accounts were compromised on its on-premi...
App SDKs may be sharing user location data with third parties by default
Some applications are inadvertently sharing users' precise location data with third parties, including advertisers and data brokers, due to default settings ...
Cybercrime victims lose an average of $9,468, with global toll exceeding $1.24 trillion
New figures reveal that cybercrime victims are losing an average of $9,468 per incident, highlighting the escalating global scale of this problem.
77 malicious extensions found on Open VSX marketplace
Seventy-seven malicious extensions impersonating legitimate developer tools were discovered on the Open VSX marketplace, transmitting system and development ...
TP-Link Omada ZTP systems vulnerable to fleet-wide compromise
Fifteen new vulnerabilities were discovered in the zero-touch provisioning (ZTP) systems used by TP-Link’s Omada networking ecosystem, with researchers warni...
CAF Bank online service restored after attempted fraud and login removal
CAF Bank restored its online banking service after a prolonged outage lasting more than 10 days, which the bank attributed to attempted fraud and a subsequen...