SECNEWS.co.uk https://validator.w3.org/feed/docs/rss2.html Ofcom fines Tismi £437,500 for letting scammers misuse its numbers FT owner Nikkei discloses third breach this month: 1.8m records LiteLLM 1.107.0 backdoored: AI gateway release steals cloud keys Signal flaw could keep mic and camera live after you hang up 23andMe successor to pay California $6m: liability outlives firm Accenture, Dragos, SANS put $10m into free OT security for utilities INC affiliates’ exposed servers reveal Claude-planned attacks Chrome 156 patches 353 flaws, six critical, as memory bugs dominate EU opens DSA probe into Booking.com over phishing and fake listings Chainguard picks London for EMEA HQ with $200m and 200 jobs TeamUpdraft breach: stolen keys used to backdoor WordPress sites Qwen3-Coder writes weaker code for US defence firms, study finds Public exploit lands for critical FortiSIEM flaw: patch to 7.5.1 Microsoft ties bug bounty payouts to new Complete report test ICO reprimands Ogi and Data Cymru over ‘Password1’ ransomware breach WhatsApp AI support bot was told not to point users to regulators Leaked PHP2Shell flaws force emergency PHP patch today eMudhra CA key compromise: what to patch beyond the browser Google Cloud outage puts UK critical third parties regime to the test Two-thirds of $10bn+ firms now have a head of AI security Meta pauses Muse chat sharing after researchers find 6,800 links Microsoft to treat AI agents as insiders with live risk scores Oracle October update: 1,283 fixes, CVSS 10.0 in three product lines OVHcloud CLI releases swapped for a secret stealer: what to rotate Shearwater wins £1.7m GOV.UK threat intelligence contract HackerOne caps low-signal hunters at three trial reports OpenCode AI agent quietly fixed critical MCP flaw with no CVE Backdoored Rank Math PRO update puts WordPress sites at risk Zero-click Pegasus hit Belgrade university rector before Serbian vote Moody’s: slow patching of exploited flaws is now a credit risk Canva confirms enterprise customer data exposed via Canny breach US orders DeepSeek AI ripped out of federal systems and vendor tools Plex2Shell flaws exploited a day after public exploit release ClickFix crew hides malware behind signed Siemens Software Center Maximus buys cyber contractor Agile Defense for $660m Bullhorn cyber attack knocks UK recruiters’ platform offline Exposed Cairn panels show AI agents breaching firms on the cheap F5 rushes out NGINX fixes for three critical memory flaws October Windows Server update can knock on-prem Exchange offline Clearview AI takes ICO’s £7.5m fine fight to the Court of Appeal Conduent agrees $80m payout to settle 62m-person breach lawsuit Microsoft paid $4,000 for CVSS 9.6 VS Code Workspace Trust bypass Loxone says hackers took customer data in attack on its IT AI agent incident response: what US guidance means for UK SOCs FCA wants AI failures and near-misses in incident reports Vista Equity to buy HID’s PKI arm, owner of IdenTrust and ZeroSSL 16-year-old Broadcom Wi-Fi flaw lets attackers hijack nearby routers Coalition: AI phishing kits drive 30% jump in email fraud claims Nottingham hospitals sack 15 staff over attack victims’ records Drupal fixes critical Field UI RCE as NHS warns sites to patch