Information

14 Oct

AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds

Information, News

A new report from Booz Allen demonstrates that “frontier super intelligence navigated unfamiliar industrial systems, adapted when blocked, and moved physical equipment within minutes.” The findings of the report were presented last week at SecurityWeek’s Industrial Control Systems (ICS) Cybersecurity Conference in Nashville, ahead of the public release. Use of the term ‘super intelligence’ is, however, confusing. This is not the first time the firm has used it, but it seems to be indistinguishable from…

Read More
14 Oct

U.K. Sanctions Cryptomus for RU Money Laundering

Information, Insights

The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial restrictions. Heleket’s support agent on Telegram claims, despite all evidence to the contrary, that it is not affiliated with Cryptomus. Image: Richard Sanders. On October 8, the U.K. issued sanctions (PDF) against Cryptomus — previously…

Read More
14 Oct

What to do when a data breach notice doesn’t say much

Information

Data breach notifications are telling victims less than ever. What the company leaves out can still shape what you do next. Phil Muncaster 12 Oct 2026  •  , 7 min. read Publicly reported data breaches hit an all-time high in the US last year, with over 3,300 incidents recorded and nearly 280 million victim notices mailed out. But are all of these worth the paper they’re written on? Increasingly, they lack crucial details. As the…

Read More
13 Oct

Microsoft Patches More Than 1,400 Security Flaws

Information, Insights

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today’s epic patch batch dwarfs September’s record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond. Just one of the weaknesses patched this week is considered a “zero day,” or already exploited in the wild. CVE-2026-96951 is a security feature bypass in the Windows Shell that affects Windows…

Read More
13 Oct

Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say

Information, News

An engineer at OpenAI has been charged with secretly installing a recording device inside a conference room in what officials said Tuesday was an effort to capture sensitive conversations about the company’s technology. The employee, identified as a 35-year-old Saudi national named Abdulrahman Alfozan, was arrested Friday, a week after the ChatGPT maker discovered an audio recording device hidden in the conference room, according to a criminal complaint filed in federal court in San Francisco.…

Read More
12 Oct

IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion

Information, News

IonQ on Monday said it signed a definitive agreement to buy Elisity in a stock-only transaction worth up to $1.3 billion. Up to $150 million of that amount is earnout consideration, contingent on how Elisity’s business performs. IonQ expects to complete the acquisition in the fourth quarter of 2026. The number of IonQ shares issued will depend on the company’s volume-weighted average price over 20 trading days ending shortly before closing, but the price will…

Read More
10 Oct

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

Information, News

A Kansas City, Missouri man has been sentenced to 32 months in jail for crimes related to a ransom attack against his own company. The DOJ has announced the sentencing of Daniel Rhyne. He had already pleaded guilty to ‘extortion in relation to a threat to cause damage to a protected computer’ and ‘intentional damage to a protected computer’. Fifty-nine-year-old Rhyne had been a core infrastructure engineer at an industrial firm headquartered in Somerset County,…

Read More
09 Oct

MATCHBOIL: New tricks, same old evil intentions

Information

ESET researchers have documented the evolution of the MATCHBOIL malware, a custom C# downloader wielded by the Russia-aligned UAC-0099 APT group. The malware is used to download a payload from the group’s C&C server, install it, and establish its persistence. Although MATCHBOIL was first documented by CERT-UA in August 2025, our research indicates that it has been in development since at least 2024. The earliest versions of the malware that we analyzed are from April…

Read More
09 Oct

FBI Arrests Executive at Ransomware Negotiation Firm

Information, Insights

Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested an executive at a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSecurity. The New York Times reported today that the FBI has arrested a Canadian man in Pennsylvania on suspicion of assisting ShinyHunters. The Times story did not identify the man, nor did…

Read More
09 Oct

OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks

Information, News

OpenAI said on Friday that it fired three safety researchers for a “breach of trust,” defending the dismissals after the trio accused the company of putting its corporate interests before safety as the reason for removing them. The ChatGPT maker said in a post on X that it “parted ways” with the researchers after an investigation found “they violated clear policies on handling sensitive information.” The statement comes after the three researchers, Tomek Korbak, Jasmine…

Read More