SECNEWS.co.uk https://validator.w3.org/feed/docs/rss2.html Public exploit lands for critical FortiSIEM flaw: patch to 7.5.1 Microsoft ties bug bounty payouts to new Complete report test ICO reprimands Ogi and Data Cymru over ‘Password1’ ransomware breach WhatsApp AI support bot was told not to point users to regulators Leaked PHP2Shell flaws force emergency PHP patch today eMudhra CA key compromise: what to patch beyond the browser Google Cloud outage puts UK critical third parties regime to the test Two-thirds of $10bn+ firms now have a head of AI security Meta pauses Muse chat sharing after researchers find 6,800 links Microsoft to treat AI agents as insiders with live risk scores Oracle October update: 1,283 fixes, CVSS 10.0 in three product lines OVHcloud CLI releases swapped for a secret stealer: what to rotate Shearwater wins £1.7m GOV.UK threat intelligence contract HackerOne caps low-signal hunters at three trial reports OpenCode AI agent quietly fixed critical MCP flaw with no CVE Backdoored Rank Math PRO update puts WordPress sites at risk Zero-click Pegasus hit Belgrade university rector before Serbian vote Moody’s: slow patching of exploited flaws is now a credit risk Canva confirms enterprise customer data exposed via Canny breach US orders DeepSeek AI ripped out of federal systems and vendor tools Plex2Shell flaws exploited a day after public exploit release ClickFix crew hides malware behind signed Siemens Software Center Maximus buys cyber contractor Agile Defense for $660m Bullhorn cyber attack knocks UK recruiters’ platform offline Exposed Cairn panels show AI agents breaching firms on the cheap F5 rushes out NGINX fixes for three critical memory flaws October Windows Server update can knock on-prem Exchange offline Clearview AI takes ICO’s £7.5m fine fight to the Court of Appeal Conduent agrees $80m payout to settle 62m-person breach lawsuit Microsoft paid $4,000 for CVSS 9.6 VS Code Workspace Trust bypass Loxone says hackers took customer data in attack on its IT AI agent incident response: what US guidance means for UK SOCs FCA wants AI failures and near-misses in incident reports Vista Equity to buy HID’s PKI arm, owner of IdenTrust and ZeroSSL 16-year-old Broadcom Wi-Fi flaw lets attackers hijack nearby routers Coalition: AI phishing kits drive 30% jump in email fraud claims Nottingham hospitals sack 15 staff over attack victims’ records Drupal fixes critical Field UI RCE as NHS warns sites to patch AOMEI Backupper update servers poisoned in minutes: how to hunt Midnight Blizzard-linked server still live weeks after exposure FSB finalises 12 AI governance practices for banks and insurers US cyber job adverts hit four-year low: what it means for the UK Calif discloses root exploit for 37-year-old OpenBSD kernel bug India’s CERT-In warns test AI agents breached live company systems China moves to export-control AI hacking tools and bug-hunting tech Acronis hands CEO role to ex-WatchGuard chief Prakash Panjwani Firedancer bounty charges 1 SOL per report to curb AI-written spam Vercel’s $1m sandbox bounty surfaces PwnEscape Linux VM escape October Windows update starts blocking NTLMv1 sign-on by default CMA moves to give Microsoft special status, eyes security bundling