OpenAI’s $1 Billion Daybreak Bet Will Be Measured in Fixes, Not Credits
OpenAI has committed $1 billion in subsidised Daybreak access and support for frontline defenders, with consumption targeted over the next six months.
StormEncryptor: China-linked Storm-1175 changes tactics amid N-central attacks
Microsoft has identified a new ransomware strain deployed by China-linked Storm-1175. The campaign coincides with active exploitation of N-able N-central, although the specific entry route remains unconfirmed.
A Zoom Participant Could Reach Every Other Device. AI Built the Exploit in a Day.
Zoom has patched a set of memory-safety vulnerabilities that researchers combined into a zero-click remote-code-execution attack through the live-meeting annotation protocol. A malicious participant could target a presenter, while a malicious presenter could reach participants across Windows, macOS, iOS and…
August 2026 Patch Tuesday: what Security and IT teams should prioritise
128 approved operational patch records from Microsoft, Adobe and SAP, with 537 linked unique CVEs and 14 accelerated BlackTree actions.
Suisun City Cyberattack Shows Why 911 Needs a Tested Failover
Malware forced Suisun City to shut down its entire IT network, disrupting 911 routing and police and fire dispatch. A county-level failover kept emergency calls and field response operating.
The 40-something IT-manager is not a security control!
When criminals stop attacking infrastructure and start applying pressure to the people who run it, cybersecurity becomes a question of leadership, duty of care and organisational design. Editor’s note: This article was inspired by “Ransomware gangs skip the CEO, head…
One Forgotten Header Undid Nuclio’s Security Patch
A crafted namespace header can bypass Nuclio's earlier command-injection fix and turn a local Docker dashboard into host-level root access.
The CRA Reporting Clock Starts on 11 September 2026
CRA Article 14 reporting is now operational. ENISA's portal has no API, and its 72-hour display can run early, so manufacturers must calculate legal deadlines independently from the awareness timestamp.
TONTOU Finds a New Timing Gap in Spectre v2 Defences
MIT researchers demonstrated that branch-predictor defences can be re-poisoned in the brief interval between being cleared and being used. This is a local attack, not a drive-by remote compromise. At Black Hat USA on 6 August, MIT researchers Daniël Trujillo…
AI Agents Don’t Need More Intelligence. They Need Better Boundaries.
As artificial intelligence moves from answering questions to taking actions, organisations need to rethink where capability ends and authority begins. For the last few years, most people have interacted with artificial intelligence in a fairly contained way. You ask a…
The Wall Street Vishing Wave Shows Why MFA Is Not Enough
Attempted attacks on major US investment firms put the helpdesk and identity provider at the centre of the threat model. Public reporting does not establish that every named target was breached. Update, 22 August 2026: Apollo Global Management has confirmed…
Claude’s Invisible Watermarks Leave Messy Questions
Claude’s coming watermarks can show that text passed through Anthropic’s systems, not who wrote it. Treat the signal as a clue, not a guilty verdict.
Claude is preparing to sign its output worldwide. The mark may survive an edit, disappear after a rewrite and attach to prose that was human-written in the first place. That makes it useful provenance and dangerous evidence.