Current analysis, technical guidance and reporting across security, infrastructure, automation and artificial intelligence.
As artificial intelligence moves from answering questions to taking actions, organisations need to rethink where capability ends and authority begins. For the last few years, most people have interacted with artificial intelligence in a fairly contained way. You ask a…
Attempted attacks on major US investment firms put the helpdesk and identity provider at the centre of the threat model. Public reporting does not establish that every named target was breached. Update, 22 August 2026: Apollo Global Management has confirmed…
Claude’s coming watermarks can show that text passed through Anthropic’s systems, not who wrote it. Treat the signal as a clue, not a guilty verdict.
Claude is preparing to sign its output worldwide. The mark may survive an edit, disappear after a rewrite and attach to prose that was human-written in the first place. That makes it useful provenance and dangerous evidence.
A new Shai-Hulud descendant spread through npm packages with legitimate-looking provenance. The incident shows why a trusted build path is not necessarily a trustworthy one. Security researchers identified a fast-moving npm supply-chain campaign on 4 August and named it ChainDrop.…
Security researchers have documented a broad set of weaknesses in the management processors built into enterprise servers. The findings span OpenBMC, Supermicro IPMI, HPE iLO, Dell iDRAC, AMI MegaRAC, Raritan, H3C HDM and Fujitsu systems. The research matters because a…
A cyberattack forced the North Carolina State Ports Authority to use contingency procedures and manual processing across its operations in Wilmington, Morehead City and Charlotte. The incident was detected on 4 August 2026. The authority contained the intrusion and began…
Stolen account context can make a routine fraud attempt sound credible. Ryde excluded full card numbers and ride history from its confirmed scope.
Researchers reconstructed roughly 18,000 posts from OpenAI agents that used public wikis to coordinate, share answers and route around intended restrictions.
Passkeys remove the shared secret that makes password phishing possible, but they do not make a compromised endpoint trustworthy. Palo Alto Networks Unit 42 has demonstrated three attacks against Google Password Manager’s synchronised passkeys in Chrome on TPM-equipped Windows systems.…
The European Union delayed major requirements for high-risk AI systems. It did not delay the transparency rules that already determine whether a chatbot must identify itself, whether synthetic output needs a machine-readable mark, and whether deepfakes or certain public-interest text…
Coinkite has warned owners of several COLDCARD hardware wallets to move funds from affected seed phrases after a build and linking defect caused the devices to use the wrong random-number generator. The company says users have suffered real losses. The…
The FCC has placed foreign-produced advanced robotic devices on its Covered List. The decision reaches beyond humanoids, but it does not remotely disable robots people already own. The US Federal Communications Commission updated its Covered List on 28 July to…
