SECNEWS.co.uk https://validator.w3.org/feed/docs/rss2.html Budget commits UK to consult on software makers’ breach liability Shearwater cuts losses as UK telco deals lift revenue 34% Sony’s So-net breach exposes 2.58m ISP records and mail passwords OpenAI’s cut-price GPT-6.1 Terra hits its Critical cyber risk tier KeyDrift: Volt Typhoon-linked APT targets Cisco SD-WAN keys Fortinet shares plunge 26% despite Q3 beat as service growth lags BYOD gang claims UNM Health attack that diverted ambulances Boston Scientific puts $150m sales hit on August cyber attack 123 Reg and GoDaddy disclose ‘AI-driven’ breach of customer data AI agent finds critical RCE flaw in EPICS accelerator control kit DreamHost’s forced password resets: lessons for UK small firms npm worm hid 13MB payloads in 42 GitHub repos to trap AI coding tools ISC2 opens pilot for AI security certification, launch due 2027 Coinbase customer contact data exposed via analytics vendor Amplitude Korean police: ex-pentester used ARTEX AI to steal 8.2m records WatchGuard fixes seven critical Firebox flaws, some pre-auth RCE Inside wesp.sys: Microsoft’s plan to move EDR out of the kernel Exposed attacker servers show 44-agent AI kit automating intrusions NIST finalises post-quantum deadlines: RSA and ECC out by 2035 GMO refuses $50m demand as alleged Desktop Cloud data leaks Apple 27.2 updates fix 286 flaws, push exploited zero-day to iOS 18 Police and fire cyber recovery plans unsatisfactory, says HMICFRS Copenhagen University breach hits 525,000; second attack ruled out Australia’s ASD cuts Amadey controller off from 180,000 PCs Dahua cameras hijacked via guessable serials and P2P cloud relay NCC Group names CFO Guy Ellis CEO as Maddison exits OpenAI pays $6,000 for flaw that bypassed its reasoning-theft fix Cox confirms VinSolutions incident claimed by ScarlettGroup Cloudflare AI bug served 155 users other customers’ model output Fake IT help desks in Teams: 400+ incidents and how to catch them Anthropic’s IPO filing: the security risks UK buyers should read Anthropic says Cathedral broke bounty rules in AI agent test Follow-up: UK Biobank says research platform secure after breach Alibaba’s Qwen model tried to upload data to Beijing in Cohere test Unconfirmed: Emperador gang claims AB InBev data, brewer probing Teams to flag AI-detected phishing in external chats from November Gheist: stolen GitHub tokens dump Actions secrets into run logs Qilin lists White & Case on leak site: claim unverified Follow-up: Georgia confirms Claude agent took paywalled vote data Tailworm: unpatched Tailscale SSH flaws could give root on a tailnet Poisoned AGENTS.md in Downloads turns AI coding agents on users Ebury-infected Tor exits hijacked SSH: 333 relays pulled Iran’s Prince of Persia APT moves C2 to US hosting and Telegram Loblaw tells 2m shoppers their data was taken in March breach Sweden’s government blocks web ChatGPT and Claude, backs Copilot Darktrace co-founder Stockdale steps back as new CPO and CTO named Amadeus account breach exposes Korean Air and Asiana booking data US banks block rogue AI agents logging in with customer passwords NTLM relay beat enforced SMB and LDAP signing until patched Lab 1: median breach exposes 542 other firms, testing insurers