tl;dr • AI is transforming the workplace. This is starting to change our organizational models from pyramids (with a large base of entry level staff) to diamonds (with a proportionally bigger…

Dutch Institute for Vulnerability Disclosure was breached through two Zammad 0-days in an AI-powered attack that led to remote code execution and root access.

Rep. Don Beyer, D-Va., who has expressed skepticism about Transportation’s rollout of an AI-powered tool at D.C.-area airports, said he had “a good conversation” with FAA Administrator Bryan Bedford…

LLMs are software systems requiring proper containment control, not sentient actors with malicious intent.

Lawmakers and legal experts debate using the Computer Fraud and Abuse Act, FTC regulations, or new federal laws to hold frontier AI companies liable as autonomous AI agents escape sandboxes and…

Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee…

The Technical University of Denmark (DTU) says information belonging to up to 200,000 users may have been exposed after hackers accessed its identity and access management system and downloaded a…

A newer program has been operational since 2011, and the next generation could launch within 12 months.

Actors with makeup and fake symptoms staggered into 73 healthcare facilities.

Amazon praised for ending NDAs but slammed for downplaying data center pollution.

300 lines of SQL querying renders accurate bitmapped views of Hell at 35 fps.

Meta says FDA isn't sufficient to Muse reading messages. Apple begs to differ.

Powered robotic devices designed to enhance the wearer’s physical capabilities are being developed for an increasing range of uses.

Flock’s nationwide network is quickly “approaching dragnet-type law enforcement practice” and the cop should have got a warrant, the judge wrote.

The estimated lifespan of the outer solar system has been downgraded from 100 billion years to just a few billion years, according to a study that probed “terminal instability” during the Sun’s death.

The plaintiffs, who all worked for the independent and Salvadoran news outlet El Faro, failed to convince the court that their case had jurisdiction in California, according to the judge’s order.

The bugs could lead to authentication bypass, shell command execution, and memory corruption.

Millions have downloaded Meta’s AI agent Muse. But getting it to do your bidding comes with privacy costs.

Opus 5.5’s biggest tell is the word “dependable,” which pops up 23 times more often than in human samples.

OpenAI has parted ways with three safety researchers after an internal investigation found they mishandled sensitive company information, report says.

A new California law places new rules on autonomous vehicles operators.

What really frustrates an adversary? Eight Cisco Talos researchers share practical ways to make their next move slower and riskier. From deception and behavioral detection to breaking attack…

In this week’s edition, Amy reflects on the importance of prioritizing family and personal well-being over the pressure to remain constantly productive.

St. Lucie County in Florida discovered (alt link) a dozen Flock cameras whose ownership it can’t identify, and that the county government had not permitted. I am reminded of the decade-old story of…

Ten years after AlphaGo’s match against Go champion Lee Sedol, today’s AI still isn’t tapping into the machinery that made that win possible.

As Congress debates who should control frontier AI governance, “cybersecurity” can become a substitute for reasoning about hard policy choices.

The latest edition of the Seriously Risky Business cybersecurity newsletter, now on Lawfare.

The Dutch Institute for Vulnerability Disclosure reveals agentic AI-powered attack using Zammad zero-days

Microsoft has warned that threat actors have gained the advantage over defenders by using AI to enhance the speed and scale of attacks

A study of 367,000 ships finds global GPS spoofing, including Red Sea activity detected months before the MSC Antonia grounding in May 2025.

Sens. Josh Hawley, R-Mo., and Chris Murphy, D-Conn., have introduced legislation that would hold AI agent operators and developers criminally and civilly liable for hacking incidents.

A trio of newly discovered backdoors walk and quack like legitimate edge solutions, so it's hard to tell they're not.

AI is likely to eliminate some entry-level SOC roles, a survey found, It is also creating opportunities to develop more strategic skills.

National Cyber Director Sean Cairncross warns against government overregulation of AI, urging deeper industry collaboration to counter China and secure critical infrastructure.

Government services were temporarily disrupted by ransomware in Vicksburg, Mississippi. Mayor Willis Thompson said the FBI and other authorities are investigating.

The dropper “carries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtime.

Faced with 24-hour reporting obligations, vendor CISOs must automate security ops, rethink SBOMs, and push for security from the start. Those who succeed will give their companies a global advantage.

More code means more risk exposure as cost pressures push organizations toward less-vetted models.

"Naturally, you cannot move everything underground. … So an important aspect is boosting Ukrainian anti-ballistic and anti-drone capabilities, which are already in critically short supply," Kateryna…

FogCam is the oldest webcam feed that’s still up and running. Installed at San Francisco State University, it’s been slowly uploading a new image to the web every 20 to 60 seconds or so…

The past years we have been seeing screens pop up in many new places, but seeing them in USB-C cables is still a bit of a novel thing. Out of sheer curiosity [Aaron Christophel] recently took apart…

Microsoft says cyberattackers are currently benefiting from artificial intelligence faster than defenders, allowing threat actors to speed up vulnerability discovery, malware development, and…

Autonomous AI agents using aggressive strategies attempted to hack U.S. and Canadian government websites to find school and divorce statistics.

On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, in what appeared to be a pump-and-dump scheme promoting a crypto token.

The former employees were investigated for sharing data with an outside AI evaluation group.