SECNEWS.co.uk https://validator.w3.org/feed/docs/rss2.html Pillow 13.0.0 fixes critical image flaws that can run code StealC seller returns with Stadia RAT four months after Endgame Coinbase Ireland’s €3.25m fine: the cost of trusting group controls Datadog’s reported $4bn Upwind bid disputed: what UK buyers should do Researchers pushed 2m updates to disable Popcorn Time updater Swiss regulator probes pension software firm PK Softech after breach x402 flaws could let malicious APIs drain AI agents’ wallets Teams to flag AI-detected phishing in external chats from November Sandworm wiper attack used backdoor hidden in Yggdrasil mesh network £60m Cyber Shield to scope agentic AI sandbox for CNI NAIC: big-firm cyber claims fall but average payout doubles to $4.4m Proton rehosts Flock camera map after legal threats to researcher State Bank of India confirms 3,897 customer records leaked online OpenAI cuts frontier training off the web after agents beat sandboxes Marsh: UK cyber insurance rates fall 7% as buyers hold the upper hand Bitcoin Core scraps embargoes for bugs AI can easily rediscover FCC’s first chip-level ban hits Huawei HiSilicon camera kit APT41-linked BlackX bootkit beats Secure Boot on patched Windows Red team finds OpenAI’s agent monitor could be dodged or switched off Navigate360 confirms 8.3m anonymous tip records stolen HPE fixes eight CVSS 10.0 flaws in Aruba wireless controllers Node2Shell: crafted Brotli data runs code on official Node.js Token spraying: stolen M365 sessions beat MFA at 79 organisations UK white paper puts security duties on subsea cable operators GBG chair Longdon to retire after 65% share fall during tenure OpenAI’s five-stage disclosure plan tests UK hacking law Quest Diagnostics breach: patient records accessed via lab portal AISI: Mythos 5 kept attacking real developers after admitting harm Willis: 70% build cyber into board risk, but only 48% are insured curl to triage low and medium flaws in public as AI reports swamp it Everest gang claims 590GB haul from PwC HR and learning systems Chrome now warns on copied ClickFix commands as Jisc flags rise Symantec researchers find agent that hijacks exposed AI models Unpatched Linux ksmbd RCE flaws go public with no CVE or fix Arista VeloCloud zero-day lets read-only users seize SD-WAN control Interpol’s Serengeti III: 1,462 arrests, 10,909 networks disrupted Meta told to pay New Mexico $25bn over Cambridge Analytica deceit UK tech jobs plan targets cyber’s shrinking entry-level market Railway breach exposes customer secrets: rotate every key now London’s Tracebit plants ‘context bombs’ to derail AI attack agents CFC study: SMEs rank cyber top risk but don’t know what cover buys Capcom ID breach exposes 11.7m accounts as attackers hijack 196 Ofcom fines Tismi £437,500 for letting scammers misuse its numbers FT owner Nikkei discloses third breach this month: 1.8m records LiteLLM 1.107.0 backdoored: AI gateway release steals cloud keys Signal flaw could keep mic and camera live after you hang up 23andMe successor to pay California $6m: liability outlives firm Accenture, Dragos, SANS put $10m into free OT security for utilities INC affiliates’ exposed servers reveal Claude-planned attacks Chrome 156 patches 353 flaws, six critical, as memory bugs dominate