Security · Infrastructure · Automation · AI
Security · Infrastructure · Automation · AI
Cloudflare’s Precursor analyses behaviour across a browsing session before a sensitive action occurs. The technique may catch modern automation, but it also raises privacy, accessibility and failure-mode questions. Cloudflare made Precursor generally available on 13 July as an optional capability…
A breach reported by AssuranceAmerica affected 6,998,886 people and included driver-licence information. The long-term risk is identity abuse, not only an immediate phishing campaign. US motor insurer AssuranceAmerica began notifying people after an incident affecting 6,998,886 individuals. Public notices and…
Sysdig describes JADEPUFFER as the first documented end-to-end agentic ransomware operation. Its speed changes how defenders should think about containment and AI infrastructure exposure. Sysdig reported an operation it calls JADEPUFFER on 1 July. The attacker exploited an internet-facing Langflow…
Claude, export controls and the case for keeping local models within reach On Tuesday, 9 June 2026, Anthropic released Claude Fable 5 and Claude Mythos 5. Three days later, neither model was available to anyone. The reason was not a…
At least 15 JetBrains plugins posed as AI assistants while stealing provider credentials. The campaign shows why developer tooling needs central governance and short-lived secrets. Security company Aikido reported a coordinated set of malicious plugins in the JetBrains Marketplace. The…
France’s ANSSI has turned post-quantum cryptography from a distant research topic into a procurement and product-roadmap decision. France’s national cybersecurity agency, ANSSI, said that products without post-quantum cryptography would no longer be eligible to enter its security-qualification process from 2027.…
Australia’s critical-infrastructure framework combines mandatory risk management and incident reporting with last-resort government powers to act during a serious cyber incident. Australia has expanded the Security of Critical Infrastructure Act in several waves. Major reforms in 2021 and 2022 broadened…
A ShinyHunters campaign against Oracle PeopleSoft environments shows how a business-critical application can become a repeatable data-theft route when it is exposed, customised and difficult to update. Google’s Mandiant team reported an active campaign by the ShinyHunters-linked group it tracks…
Unauthorised access to a World Food Programme registration system exposed data associated with roughly 600,000 Gaza households. In a conflict zone, ordinary identity and location fields can create extraordinary physical risk. The World Food Programme confirmed unauthorised access to its…
Cisco’s new infrastructure-security platform combines faster vulnerability research with runtime protections. It could reduce emergency patch pressure, provided temporary shields do not become permanent exceptions. Cisco announced an agentic platform for operating and defending critical IT infrastructure on 2 June.…