SECNEWS.co.uk https://validator.w3.org/feed/docs/rss2.html Apple sends new spyware threat alerts to users in 99 countries Hijacked UK DebugBear script drains up to $2.7m from Polymarket Microsoft: fake help desk calls led to AD CS abuse and DCSync Follow-up: n0n’s exposed server reveals AI-built extortion kit Ofcom names four age checks for UK under-16 social media ban Norton owner Gen raises FY27 outlook as Q2 revenue rises 12% Chainalysis says ‘agentic’ attacker exposed customer details Orange Cyberdefense signs up as Mistral’s first European MSSP partner ICO reprimands Staffordshire Police for revealing victim’s address Researcher finds 26,400 live cloud and AI keys exposed on Gitee Tenable raises 2026 outlook after Q3 beat and $800m note sale IPCO: GCHQ still cannot account for thousands of storage devices Talos IR: help desk vishers and EDR killers push ransomware to 27% Binance loses record $6.3bn in heist tied to North Korea WordPress 7.1.4 upgrade-window RCE under attack within a day Cisco open-sources Quarry to detect rogue AI agents in SOC logs CREST maps five-stage maturity path for financial cyber resilience Google says Gemini 4 Carbon tops exploit benchmarks, defenders only China-nexus Vapor Panda ran DeepSeek AI agents against 200+ targets DfT proposes mandatory cyber baseline for GB public EV chargers Budget commits UK to consult on software makers’ breach liability Shearwater cuts losses as UK telco deals lift revenue 34% Sony’s So-net breach exposes 2.58m ISP records and mail passwords OpenAI’s cut-price GPT-6.1 Terra hits its Critical cyber risk tier KeyDrift: Volt Typhoon-linked APT targets Cisco SD-WAN keys Fortinet shares plunge 26% despite Q3 beat as service growth lags BYOD gang claims UNM Health attack that diverted ambulances Boston Scientific puts $150m sales hit on August cyber attack 123 Reg and GoDaddy disclose ‘AI-driven’ breach of customer data AI agent finds critical RCE flaw in EPICS accelerator control kit DreamHost’s forced password resets: lessons for UK small firms npm worm hid 13MB payloads in 42 GitHub repos to trap AI coding tools ISC2 opens pilot for AI security certification, launch due 2027 Coinbase customer contact data exposed via analytics vendor Amplitude Korean police: ex-pentester used ARTEX AI to steal 8.2m records WatchGuard fixes seven critical Firebox flaws, some pre-auth RCE Inside wesp.sys: Microsoft’s plan to move EDR out of the kernel Exposed attacker servers show 44-agent AI kit automating intrusions NIST finalises post-quantum deadlines: RSA and ECC out by 2035 GMO refuses $50m demand as alleged Desktop Cloud data leaks Apple 27.2 updates fix 286 flaws, push exploited zero-day to iOS 18 Police and fire cyber recovery plans unsatisfactory, says HMICFRS Copenhagen University breach hits 525,000; second attack ruled out Australia’s ASD cuts Amadey controller off from 180,000 PCs Dahua cameras hijacked via guessable serials and P2P cloud relay NCC Group names CFO Guy Ellis CEO as Maddison exits OpenAI pays $6,000 for flaw that bypassed its reasoning-theft fix Cox confirms VinSolutions incident claimed by ScarlettGroup Cloudflare AI bug served 155 users other customers’ model output Fake IT help desks in Teams: 400+ incidents and how to catch them