Cybersecurity - Page 23

Anthropic has expanded its Cyber Verification Program into three tiers, Defense, Red Team and Specialized, that relax Claude's cyber safety blocks for vetted security teams on Opus 5.5, Sonnet 5.5 and Mythos 5.1. Specialized applicants are reviewed with the US government. What each tier allows, and what Anthropic's own test shows.

A ransomware attack on SoftBank's IDC Frontier knocked out services for 495 customers, halting Nissui's logistics and Ibaraki's websites. Japan's police say Qilin has hit 53 Japanese firms. MrMax, GMO's infoQ and Nikkei disclosed breaches; Asos says hackers took detailed customer profiles; Oracle Health's count may near 20 million; and Denmark says its population register was looked up for 8.8 million people. What each organisation confirmed.

A hijacked release of the tensorlake npm package stole tokens and AI-tool config files, and booby-trapped the stolen GitHub token so that revoking it wipes the victim's home folder. The same week, GitHub made local sandboxing for Copilot generally available, Bitdefender released a free agent guard for macOS, and Citadel AI opened early access to agent monitoring. LangChain and past.dev shipped agent tooling with access controls built in. What each one confirms.

Arizona’s courts confirm data on 1.3 million people was copied; ccTLD registry hijacks let attackers obtain certificates for Google and other domains; exploitation attempts follow a public Atlassian PoC; Yoido Full Gospel Church confirms 850,000 members’ data exposed; the Double Counter Discord bot is breached; a MonsterCloud owner is charged; and the US offers $10m for accused HAFNIUM hacker Zhang Yu. Confirmed vs alleged, case by case.

From FortiBleed credential harvesting and ASOS customer notifications to UIC ransomware, Citrix NetScaler KEV deadlines and a new NetScaler flaw, CVE-2026-107406 (patch out; no known exploitation), Southern Company portal access and Advantest’s delayed PII notices — what is confirmed, what is alleged, and the patterns linking initial access to disclosure timing.

South Korea’s president ordered a full response after customer data was exposed at seven financial firms, saying some cases showed possible AI use. Police have formed a 28-member investigation team.

Anthropic, the AI company behind Claude, recently built something that alarmed its own researchers: an artificial intelligence capable of autonomously discovering and exploiting software vulnerabilities. Their response?...

UK CNI Under Attack: 93% Hit by Successful Cyber Attacks — and the Defences Aren't Keeping UpNinety-three percent.That's not a typo. That's the percentage of UK Critical...

UK Cyber Security and Resilience Bill: Why MSPs Are About to Become the Front LineThe UK just drew a line in the sand. The Cyber Security and...