SECNEWS.co.uk https://validator.w3.org/feed/docs/rss2.html Willis: 70% build cyber into board risk, but only 48% are insured curl to triage low and medium flaws in public as AI reports swamp it Everest gang claims 590GB haul from PwC HR and learning systems Chrome now warns on copied ClickFix commands as Jisc flags rise Symantec researchers find agent that hijacks exposed AI models Unpatched Linux ksmbd RCE flaws go public with no CVE or fix Arista VeloCloud zero-day lets read-only users seize SD-WAN control Interpol’s Serengeti III: 1,462 arrests, 10,909 networks disrupted Meta told to pay New Mexico $25bn over Cambridge Analytica deceit UK tech jobs plan targets cyber’s shrinking entry-level market Railway breach exposes customer secrets: rotate every key now London’s Tracebit plants ‘context bombs’ to derail AI attack agents CFC study: SMEs rank cyber top risk but don’t know what cover buys Capcom ID breach exposes 11.7m accounts as attackers hijack 196 Ofcom fines Tismi £437,500 for letting scammers misuse its numbers FT owner Nikkei discloses third breach this month: 1.8m records LiteLLM 1.107.0 backdoored: AI gateway release steals cloud keys Signal flaw could keep mic and camera live after you hang up 23andMe successor to pay California $6m: liability outlives firm Accenture, Dragos, SANS put $10m into free OT security for utilities INC affiliates’ exposed servers reveal Claude-planned attacks Chrome 156 patches 353 flaws, six critical, as memory bugs dominate EU opens DSA probe into Booking.com over phishing and fake listings Chainguard picks London for EMEA HQ with $200m and 200 jobs TeamUpdraft breach: stolen keys used to backdoor WordPress sites Qwen3-Coder writes weaker code for US defence firms, study finds Public exploit lands for critical FortiSIEM flaw: patch to 7.5.1 Microsoft ties bug bounty payouts to new Complete report test ICO reprimands Ogi and Data Cymru over ‘Password1’ ransomware breach WhatsApp AI support bot was told not to point users to regulators Leaked PHP2Shell flaws force emergency PHP patch today eMudhra CA key compromise: what to patch beyond the browser Google Cloud outage puts UK critical third parties regime to the test Two-thirds of $10bn+ firms now have a head of AI security Meta pauses Muse chat sharing after researchers find 6,800 links Microsoft to treat AI agents as insiders with live risk scores Oracle October update: 1,283 fixes, CVSS 10.0 in three product lines OVHcloud CLI releases swapped for a secret stealer: what to rotate Shearwater wins £1.7m GOV.UK threat intelligence contract HackerOne caps low-signal hunters at three trial reports OpenCode AI agent quietly fixed critical MCP flaw with no CVE Backdoored Rank Math PRO update puts WordPress sites at risk Zero-click Pegasus hit Belgrade university rector before Serbian vote Moody’s: slow patching of exploited flaws is now a credit risk Canva confirms enterprise customer data exposed via Canny breach US orders DeepSeek AI ripped out of federal systems and vendor tools Plex2Shell flaws exploited a day after public exploit release ClickFix crew hides malware behind signed Siemens Software Center Maximus buys cyber contractor Agile Defense for $660m Bullhorn cyber attack knocks UK recruiters’ platform offline