SECNEWS.co.uk https://validator.w3.org/feed/docs/rss2.html Immunefi refunds bug report fees to 700+ hunters as AI floods triage Follow-up: fridge sabotage wave returns, NCSC warns UK firms CrowdStrike buys Fiddler AI and Dreadnode in reported $495m deal Microsoft paid $16,000 for Windows Get Help bugs but issued no CVEs WorkOS says AI attack framework breached its internal sales tool Node-RED CVSS 10 flaw exploited in attempts to plant Linux bots NCSC annual review: compliance alone won’t make UK firms resilient Check Point says revenue hit bottom as firewall refresh slump bites OpenAI quadruples bug bounty rewards, top payout now $172,000 London’s Trigger.dev says attacker stole customer secrets and API keys 400+ disguised AI apps and sites hid deepfake tools; Apple pulls 19 Name.com hijack sends 15 domains to wallet drainer: DNS lessons VOLTA infostealer asks Claude, Kimi and Gemini to rank its victims Lenovo ‘AES-256’ USB stick was a plain SD card; rivals got no warning Aon: only 13% of UK firms have quantified their cyber exposure Smart energy firms face CAF audits and 72-hour incident reports UK researcher had no way to report Applebee’s customer data flaw NHS England tells GPs to weigh ICO reports after supplier collapse Cyera in talks at $20bn valuation as data security market heats up AO3 silent three days on as possible user data theft keeps site down OpenAI pays $5,000 for ChatGPT share-link account takeover Northflank breach joins Wiz’s ‘Black October’ AI key theft wave TeamViewer flaw could let a rogue host run code on helpdesk PCs Cloudflare: 18.2m DDoS attacks in Q3, most over before SOCs can react Shelly Store UK warns card data may have been stolen via web malware AI deepfake investment scams cost UK victims £24.3m this year: police Apple sends new spyware threat alerts to users in 99 countries Hijacked UK DebugBear script drains up to $2.7m from Polymarket Microsoft: fake help desk calls led to AD CS abuse and DCSync Follow-up: n0n’s exposed server reveals AI-built extortion kit Ofcom names four age checks for UK under-16 social media ban Norton owner Gen raises FY27 outlook as Q2 revenue rises 12% Chainalysis says ‘agentic’ attacker exposed customer details Orange Cyberdefense signs up as Mistral’s first European MSSP partner ICO reprimands Staffordshire Police for revealing victim’s address Researcher finds 26,400 live cloud and AI keys exposed on Gitee Tenable raises 2026 outlook after Q3 beat and $800m note sale IPCO: GCHQ still cannot account for thousands of storage devices Talos IR: help desk vishers and EDR killers push ransomware to 27% Binance loses record $6.3bn in heist tied to North Korea WordPress 7.1.4 upgrade-window RCE under attack within a day Cisco open-sources Quarry to detect rogue AI agents in SOC logs CREST maps five-stage maturity path for financial cyber resilience Google says Gemini 4 Carbon tops exploit benchmarks, defenders only China-nexus Vapor Panda ran DeepSeek AI agents against 200+ targets DfT proposes mandatory cyber baseline for GB public EV chargers Budget commits UK to consult on software makers’ breach liability Shearwater cuts losses as UK telco deals lift revenue 34% Sony’s So-net breach exposes 2.58m ISP records and mail passwords OpenAI’s cut-price GPT-6.1 Terra hits its Critical cyber risk tier