SECNEWS.co.uk https://validator.w3.org/feed/docs/rss2.html China-linked hackers exploited BeyondTrust Remote Support zero-day Ransomware crews threatened staff in 40% of attacks, survey finds Proofpoint agrees $6.3bn cash deal to buy data security firm Varonis Revolut breach under scrutiny after UK knifepoint crypto robbery LiteLLM gateway flaws let any user seize AI keys and the server MoD’s Defence Cyber Operations moves to new Elastic SIEM Cohere moves to buy AI bug hunter AISLE and launch Cohere Cyber BAE Systems cyber incident halts US bankruptcy court notices Aoki infostealer now raids Claude, Copilot and Cursor credentials FBI shuts 40 North Korean laptop farms: how to spot fake remote hires London-based Harmonic Security raises $50m to govern staff AI use Update: Legal Aid Agency breach reaches back to 1978 records H&M extortion claim points to warehouse software supplier SneakPeek flaw let Claude Code Desktop preview leak dev secrets Cisco email gateway zero-day lets one attachment give attackers root Hirudo Android trojan swaps real banking apps for patched clones Meta takes Ofcom to High Court over global-revenue fine ceiling Ampath confirms hack as gang claims 80 million patient records Public AI model helped XBOW build a Chrome full chain in six days curl fixes first high-severity flaw since 2023 in 24-CVE release Microsoft seizes phishing kit market behind a billion scam messages Extortion gang n0n claims 38 shipping firms, UK’s BMT IQ among them October Patch Tuesday: record 1,400 fixes and a Windows zero-day Follow-up: fridge attacks spread to Copeland Dixell kit across Europe PAC chair warns of ‘worrying lack of urgency’ on Whitehall legacy IT Big firms twice as likely to leave critical flaws unpatched UK survey firm Liberating Research exposed 74,000 people’s diagnoses VerCellBreak: TLS trick lets rogue AI agents slip Vercel Sandbox NCA hosts takedown week that hit West African scam compounds XWorm RAT grows to 46 plugins, hijacks live browser sessions past MFA EU Digital Omnibus stalls as Berlin blocks GDPR and NIS2 deal FTC shuts ‘sextortion help’ firm accused of taking $60m from victims Housing Ombudsman complaints system hit by supplier security incident Ivanti Connect Secure zero-day exploited, root flaw still unpatched Firefox Enterprise turns the browser into a self-hosted SOC control Kimsuky poses as conference hosts to phish Ukraine war experts Data guardian tells minister trust must weigh on NHS Palantir deal One in five UK security leaders take time off to dodge Patch Tuesday Bloom says GitHub left npm bug bounty report unanswered for months Hobbs, Whistles and Phase Eight owner TFG London hit by cyber attack Anthropic warns small AI models could soon self-replicate on IoT kit VMware HyperArmor adds virtual patching and MFA to ESX hosts IMF names cyber attack one of three triggers for market turmoil Bytes buys Microsoft security specialist CyberOne for £19.4m Icon cancer patient documents for sale after supplier breach Frontier AI models passed every OT attack test in Booz Allen lab Yandex rewrites cloud terms as drone strikes hit its data centres Google pays $90,000 for unauthenticated RCE in developer docs site Singapore adds national protective DNS to new cyber strategy Xandr hit with record NOK 92m Norwegian fine over Grindr data