SECNEWS.co.uk https://validator.w3.org/feed/docs/rss2.html Drupal fixes critical Field UI RCE as NHS warns sites to patch AOMEI Backupper update servers poisoned in minutes: how to hunt Midnight Blizzard-linked server still live weeks after exposure FSB finalises 12 AI governance practices for banks and insurers US cyber job adverts hit four-year low: what it means for the UK Calif discloses root exploit for 37-year-old OpenBSD kernel bug India’s CERT-In warns test AI agents breached live company systems China moves to export-control AI hacking tools and bug-hunting tech Acronis hands CEO role to ex-WatchGuard chief Prakash Panjwani Firedancer bounty charges 1 SOL per report to curb AI-written spam Vercel’s $1m sandbox bounty surfaces PwnEscape Linux VM escape October Windows update starts blocking NTLMv1 sign-on by default CMA moves to give Microsoft special status, eyes security bundling Anthropic team claims $36,864 NIST curve seeds bounty with Claude Compromised ConnectWise backup credential used to access M365 tenants London’s CodeWall raises $4m to replace annual pentests with AI Sony pays rare $50,000 top bounty for critical PlayStation flaw OpenAI logs more rogue agent incidents, two rated critical Bank of America hired 1,000 contractors to fix flaws found by Mythos Attackers target Langflow AI agent builder via MCP command flaw Hijacked NAS boxes become proxies that hide logins from defenders ICO orders Met Police to fix shadow IT after Auror data sharing Collabora flaw exploited to plant web shells on Nextcloud servers China-linked hackers exploited BeyondTrust Remote Support zero-day Ransomware crews threatened staff in 40% of attacks, survey finds Proofpoint agrees $6.3bn cash deal to buy data security firm Varonis Revolut breach under scrutiny after UK knifepoint crypto robbery LiteLLM gateway flaws let any user seize AI keys and the server MoD’s Defence Cyber Operations moves to new Elastic SIEM Cohere moves to buy AI bug hunter AISLE and launch Cohere Cyber BAE Systems cyber incident halts US bankruptcy court notices Aoki infostealer now raids Claude, Copilot and Cursor credentials FBI shuts 40 North Korean laptop farms: how to spot fake remote hires London-based Harmonic Security raises $50m to govern staff AI use Update: Legal Aid Agency breach reaches back to 1978 records H&M extortion claim points to warehouse software supplier SneakPeek flaw let Claude Code Desktop preview leak dev secrets Cisco email gateway zero-day lets one attachment give attackers root Hirudo Android trojan swaps real banking apps for patched clones Meta takes Ofcom to High Court over global-revenue fine ceiling Ampath confirms hack as gang claims 80 million patient records Public AI model helped XBOW build a Chrome full chain in six days curl fixes first high-severity flaw since 2023 in 24-CVE release Microsoft seizes phishing kit market behind a billion scam messages Extortion gang n0n claims 38 shipping firms, UK’s BMT IQ among them October Patch Tuesday: record 1,400 fixes and a Windows zero-day Follow-up: fridge attacks spread to Copeland Dixell kit across Europe PAC chair warns of ‘worrying lack of urgency’ on Whitehall legacy IT Big firms twice as likely to leave critical flaws unpatched UK survey firm Liberating Research exposed 74,000 people’s diagnoses