Policy & SecurityWhen Cyberattacks Breach Physical Building Systems and Hardware
Recent attacks on grocery store refrigeration and hospital HVAC systems show cybercriminals moving past data theft to inflict physical chaos.
Policy & SecurityWindows October 2026 Update Breaks Legacy NTLMv1 Single Sign-On Networks
The October 2026 Windows update flips BlockNtlmSSO from audit to enforce mode, severing legacy NTLMv1 connections and breaking enterprise networks.
Policy & SecurityUS Bankruptcy Courts Paralysed by Cyber Attack on BAE-Managed Systems
US bankruptcy courts face massive disruptions after a cyber security incident hits systems managed by UK-based defense contractor BAE Systems, halting the Bankruptcy Noticing Center.
Policy & SecuritySchool Photo Data Theft Exposes Vulnerabilities in Third-Party Vendor Security
A physical smash-and-grab targeting a school photography vehicle has exposed student data vulnerabilities, highlighting severe third-party vendor risks.
Policy & SecurityWhy Weak Password Policies Break IT Resets After Ransomware
When an incoming IT lead tried to fix a neglected school network after a ransomware strike, staff pushed back on basic credential hygiene for an astonishing reason.
Policy & SecurityIndirect Prompt Injection via HTTP Headers Threatens AI Agents
New research reveals bad actors are using HTTP headers to launch indirect prompt injection attacks against automated AI agents reading the web.
Policy & SecurityWhen Smart Fridges Turn Into Heaters: The Anatomy of the French Supermarket Cyberattack
Unknown attackers exploited vulnerabilities in legacy Danfoss and Copeland refrigeration controllers, cranking grocery store temperatures up to 122°F and spoiling tons of food.
Policy & SecurityBank of America's 1,000-Contractor Fix Exposes AI Vulnerability Backlog
Bank of America hired 1,000 contractors and spent hundreds of millions to remediate vulnerabilities uncovered by Anthropic's Mythos AI model.
Policy & SecurityHow Spyware Vendors Weaponized Programmatic Ad Networks
New research reveals that zero-click mercenary spyware can now be delivered via online ads, turning standard programmatic ad exchanges into distribution channels for device infection.
Policy & SecurityX Purges 13,000 Accounts Ahead of US Midterms Amid Scrutiny
X has removed 13,000 accounts linked to foreign influence operations from Iran, Russia, and China ahead of the upcoming US midterm elections.
Policy & SecurityLegal Aid Agency Breach Exposes Decades of UK Government Data
UK authorities confirm that hackers in a major cyber incident accessed historical Legal Aid Agency records dating back nearly five decades.
Policy & SecurityUS Air Force Pilots Used Compromised USB Drives for Afghanistan Missions
Former Air Force IT security personnel reveal how early tactical missions relied on risky removable media practices, bridging unclassified and classified systems.
Policy & SecurityUK Leaves AI Cyber Safeguards Hanging in Upcoming Resilience Bill
UK officials have delayed cementing AI safeguards into the Cyber Security and Resilience Bill, raising alarms as experts warn of self-replicating worms.
Policy & SecurityMetropolitan Police Reprimanded Over Unvetted Shoplifting Platform Use
London's Metropolitan Police Service has received an enforcement notice and reprimand from the ICO after officers unvetted use of the retail crime platform Auror.
Policy & SecurityWhy Decision Models Fall Victim to Prompt Injection Despite Decoding Limits
TypeSafe AI claimed its Jev decision model was immune to hallucinations, but new security findings reveal it remains vulnerable to indirect prompt injection.