A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.

Despite previous controversies, it seems like the lords of Linux are warming to AI-assisted coding. The penguin's kernel community has agreed to stop asking coders to disclose whether they used bots to help with their contributions. And Linux kernel supremo Linus Torvalds has made clear that he opposes "stupid" AI disclosure rules as long as people understand the code they're submitting. "The Maintainers Summit reached consensus to deprecate the Assisted-by Tag," said Sasha Levin, a Linux kernel developer and engineer at Nvidia, in a message to the Linux kernel mailing list last week. "Remove the documentation requiring it." The policy had said that those using "any sort of advanced coding tool in the creation of [their] patch" should acknowledge that through the addition of an "Assisted-by" tag in the commit message. The AI labeling proposal initially took shape in July 2025. It became part of the documentation in January 2026. This was shortly after Torvalds said that he was fairly positive about vibe coding as a way for people to get into programming, but remained skeptical about its effect on software maintainability. Since then, he's warmed to AI tool usage. AI attribution wasn't an issue when the generated code was obvious, buggy, and bad. But in the past year or so, AI coding agents started producing code that is of acceptable quality for the purposes of the Linux kernel community. "LLMs are good enough now," said Greg Kroah-Hartman, a veteran Linux kernel maintainer, at the Linux Foundation's Open Source Summit in South Korea in August. "They've gotten good enough to find bugs because LLMs, AI, are just pattern matchers and code is nothing but patterns in a specific format." Cautious acceptance hasn't erased concerns about errors slipping through unnoticed, accountability, and coding agents reproducing copyrighted code. There's also still a stigma in some circles around the use of AI tools. Those who have spent years honing software skills, coding with limited assistance from tools, may disparage developers who don't understand the code they conjure with a prompt. Rapid change will do that – in the space of a few years, software production practices have changed drastically, and software quality, security, and maintenance practices have yet to fully adjust. The leading makers of AI coding agents – Anthropic, Google, Microsoft, OpenAI, and the like – are doing their best to promote AI-driven projects as better than anything a human developer could manage. Yet even they differ in their AI attribution practices. Claude adds provenance messages by default, but Codex does not. In fields such as advertising and art, content provenance can help assess misinformation and human creative input. For code, the focus tends to be more on functionality than form. In a prior discussion of the merits of the tag requirement, Jeff Layton, a Linux kernel developer with Red Hat, explained the rationale for reversing course. First, he said, not everyone abides by the policy. Second, he said, "it basically serves as free advertising for proprietary LLM companies." And third, he said, "it's not clear why we want to collect this info in the first place." Some kernel contributors still see value in the tagging requirement. "I'm not happy removing the tag without adding another mechanism for required disclosure," said Laurent Pinchart, a Linux kernel dev and founder of Ideas on Board, in a mailing list post on Tuesday. "Without that, I can foresee submitters pushing back on the question." Pinchart challenged the argument that AI labeling rules will just be ignored. "What this is about is setting our expectations, telling what we want and what we don't want," said Pinchart. "There's still value in that, and I'd argue there's even more value now. There will be people who won't care, there will be people who cheat. We've always had those, we'll keep having them, and we'll keep rejecting their contributions. I really don't get the unenforceable argument here." Linus Torvalds responded with an emphatic rejection of tool usage declarations. He wrote: What you are about is something entirely different. It has nothing to do with "expectations", and it has everything to do with your hangups. I don't understand this whole idiotic concept of "don't use AI for X". Here's a new rule just for you: don't use compilers for any of your kernel submissions. Because if you can't show that you really understand what the machine is actually doing by writing your code in assembler, then I don't want to see your code contribution. You clearly aren't competent if you can't write it that way. And btw, you had better not use an editor to write that commit message either. Because I need you to show me that you can actually write a good commit message without using tools that make it easy to backspace and hide the mistakes you made while typing. Ok? Because otherwise those tool-assisted commits of yours clearly aren't showing that you know what you are doing. Do you not see how UTTERLY STUPID those kinds of rules would be? So no. We're not going to make stupid rules that say "you can't use tools for X". The kind of expectations *I* have is that people do their best and I expect people to understand what they are doing. But that understanding has very little to do with what tools they use. And quite honestly, in my experience, the people I respect and call intelligent are not the ones that shy away from using new and interesting tools. ®

A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.

Researchers at security startup Xbow used OpenAI's GPT-5.6 Sol model to help chain three zero-day vulnerabilities in Chrome into an exploit capable of executing code outside the browser's sandbox on Windows machines. Xbow estimates that this could affect about one billion users worldwide. Google fixed all three, and paid the Xbow team a $250,000 bounty, its top reward for a Chrome full-chain exploit. The payout also proves a nice return on investment for the human bug hunters - Brendan Dolan-Gavitt, Andres Luksenberg, Baul Lee, and Willem Pinckaers - who spent just six days during the Black Hat and DEF CON conferences and about $40,000 in token charges to discover the vulnerabilities and build the attack chain. “The number on the check is impressive, but the time it took our team, with the help of a publicly available AI model, to break in is even more impressive,” Xbow CEO and founder Oege de Moor said on Tuesday. “A three letter intelligence-agency veteran told me that his team used to spend six months trying to identify this kind of vulnerability and get total access. We did it in six days.” In a separate technical writeup about the attack chain, Dolan-Gavitt detailed the work done by humans and AI agents. Agents, using OpenAI's GPT-5.6-Sol model, searched source code, tested the team’s hypotheses, and developed proofs of concept and exploit stages, he said. Meanwhile, the AI pen-testing security startup’s researchers chose targets, provided context, challenged the agents’ results, and decided which attack components to chain. "We did apply a fair bit of our own human expertise and judgment," he wrote. Crossing two security boundaries in 3 steps Google’s Chrome browser uses several layers of security to protect users, and this includes sandboxes - barriers to contain compromised code and ensure that someone who hacks an individual website can’t take over the entire computer. This includes deploying the V8 sandbox to prevent any memory corruption flaws in the V8 JavaScript engine from impacting other memory. The V8 sandbox sits inside the operating-system process sandbox, and this nested design means that escaping V8's memory restrictions doesn't automatically grant native code execution. Even if an attacker achieves native code execution inside Chrome's renderer, the outer process sandbox restricts access to the rest of the machine. “The chain crossed both boundaries in three vulnerability stages,” abusing Chrome to run code on Windows machines, Dolan-Gavitt wrote. The attack combines a V8 compiler bug, an animated-WebP decoder bug, and a memory-safety bug in Crashpad. The first vulnerability is in Maglev, V8's mid-tier optimizing compiler, and it’s due to a reused, mutable boxed number during deoptimization. This gives attackers read and write access throughout V8's pointer-compression cage. The second stage, the animated-WebP bug, is a V8 sandbox escape. “But rather than attacking the sandbox itself we exploited a property that the V8 sandbox deliberately does not enforce and that Blink incorrectly assumed it could trust,” Dolan-Gavitt explained. “Finally, the exploit used an overflow in Crashpad to cross the final outer process boundary and achieve unsandboxed code execution on the host.” While Google patched all three security issues, and Chrome installs updates on its own, a fix only takes effect once the user relaunches the browser. If you use Chrome, make sure you are running version 152.0.7977.82 or later. The time and money spent to achieve a full chain Chrome exploit illustrate - yet again - that “the bar is significantly lower” for attackers armed with LLMs, Dolan-Gavitt wrote. “Defend accordingly.”®

Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco said in an advisory on Wednesday. The attacker sends an email with a crafted attachment through the gateway and, if it succeeds, could then run commands as root. The appliance filters an organization's email for spam, malware,

Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small file that executes any command an attacker sends via a web request, with the rights of the web server account. The flaw

Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, announced the disruption of three phishing kits, CoGUI (aka NX or FA), Haozi (aka Phoenix), and Iron Man System. "Since January 2026, the threat actors behind these kits have been responsible for

Ivanti customers are being urged to update Connect Secure and check for compromise after attackers exploited a newly disclosed zero-day vulnerability. On Tuesday, Ivanti released updates for Connect Secure (ICS) to fix CVE-2026-104935, an authentication bypass flaw discovered by Volexity. Rated 8.6 on the CVSS scale, it allows remote, unauthenticated attackers to execute arbitrary commands. "We are aware of exploitation in the wild affecting a limited number of customers at the time of disclosure," the vendor said in its advisory. There are limited indicators of compromise available at present, it said, advising customers to refer to Volexity's report on the findings for more information, and to run the Ivanti Integrity Checker Tool regularly. Ivanti lists affected releases in the following branches: 25.1.1.1 and earlier 25.1.2.2 and earlier 22.8R2.4 and earlier The vendor said it previously identified "a portion of this vulnerability" and patched it in July's 25.1.3.0 update, and had been working on backporting the same fix since then, however, attackers began exploiting it before that work was complete. Volexity said the attackers behind the recent intrusions were previously unknown to its researchers, but are now tracked as UTA0576. Criminal motive rather than espionage is suspected by Volexity. Based on observed post-exploitation activity, attackers appeared to be most interested in using their newfound access for credential theft, data exfiltration, log tampering, and network reconnaissance. Notably, the attackers did not deploy any malware nor execute web shells, using only the commands available to them on the ICS appliance. "Because the operation was detected and disrupted, the threat actor's ultimate objectives could not be determined," said Volexity. "However, Volexity assesses with high confidence that UTA0576's actions signaled preparation for lateral movement and a broader compromise of the victim network." The researchers also suspect that the attackers were using large language models to support their endeavors. Volexity pointed to the attackers' repeated use of the exploit channel to run commands, rather than deploying web shells, and their use of "highly specific scripts using hardcoded credentials." Ivanti disclosed one CVE, but Volexity described an attack chain involving three vulnerabilities. Tuesday's updates address the authentication bypass and remote code execution stages. The third vulnerability, which allows privilege escalation, is separate from the flaws encompassed by CVE-2026-104935. Volexity said Ivanti is aware of the additional bug and plans to publish a fix "in the coming weeks." The disclosure of the zero-day this week makes it the third year running that Ivanti has had to deal with attackers exploiting undisclosed flaws in Connect Secure. The previous ICS zero-days were disclosed in January 2025, a year after the January 2024 vulnerabilities led to exploits affecting thousands of ICS appliances. In the interim, we've also seen suspected Chinese espionage groups exploiting bugs in Endpoint Manager Mobile (EPMM), and critical flaws in Sentry. Ivanti's run of January zero-days continued earlier this year, although those flaws affected EPMM rather than Connect Secure. ®

Nearly half (49.8%) of organisations have confirmed or suspected that an AI agent took an unintended, unexpected or unauthorised action in the past year, according to new research from Salt Security.

The findings, published in the company’s State of Agentic AI and API Security 2H 2026 report, highlight growing concerns around the security of autonomous AI systems as enterprises increasingly integrate agents into everyday operations.

Based on a survey of more than 380 security and technology professionals, alongside Salt Labs production telemetry from hundreds of customer environments, the research suggests that AI adoption is outpacing organisations’ ability to monitor, govern and contain agent activity.

Among respondents who reported confirmed or suspected unintended agent actions, more than half experienced an unauthorised external API call or transaction, while over 40% reported an agent modifying or deleting data.

The research also found that AI agents are now firmly embedded in enterprise environments, with 86.4% of respondents reporting at least one operating within their organisation and 59.5% running more than ten. Furthermore, 76.8% reported agents capable of chaining actions across other agents, tools and APIs, creating complex sequences that may not have been anticipated by individual teams.

Despite this widespread adoption, visibility remains limited. Just 12.5% of organisations can consistently trace an agent’s complete journey, from its initial instruction through the tools and APIs it accesses to the final outcome. More than 60% would require hours or days of manual investigation to reconstruct an agent’s activity from the previous day.

The ability to respond to unexpected behaviour is similarly concerning. Only 17.5% of respondents said their organisation could automatically stop an AI agent behaving unexpectedly in production. For the majority, intervention remains a manual process, potentially requiring an application to be taken offline.

“The data shows a gap that is already producing real operational consequences,” said Roey Eliyahu, CEO of Salt Security. “Organisations are deploying agents and granting them access to enterprise data, APIs, and services before they can trace what those agents are doing or stop them automatically when something goes wrong.”

Shadow AI Infrastructure and AI-Generated Code Raise Further Concerns

The report also identified emerging risks associated with Model Context Protocol (MCP) infrastructure, which enables AI systems to interact with external tools and data sources.

Nearly a third (32.9%) of respondents reported discovering an unauthorised, shadow or misconfigured MCP server in the past year, while 54.3% had either confirmed or suspected encountering one.

Salt Labs’ own telemetry revealed that MCP-related infrastructure was detected in 21.6% of customer environments in August 2026, compared with 16.7% in January, representing a relative increase of approximately 30%.

Meanwhile, AI-generated code is introducing additional application security challenges. Some 83.5% of respondents estimated that AI-generated or AI-assisted code contributed to at least some of their application security findings.

However, just 6.8% reported resolving these issues directly within coding assistants at the point of generation, leaving vulnerabilities to be identified during subsequent code reviews, testing or after deployment.

Recent Manus Vulnerability Highlights Agentic AI Risks

The findings follow recent research from Salt Labs, which demonstrated how a single malicious email could be used to hijack the Manus agentic AI platform and potentially access a user’s connected email, cloud storage and code repository accounts.

The attack did not require a stolen password or the victim to click a malicious link. Although the platform’s guardrails detected the malicious activity, they were unable to prevent the code from executing.

The vulnerability was responsibly disclosed and has since been remediated.

According to Salt Security, the incident demonstrates how traditional detection mechanisms may struggle to keep pace with autonomous systems capable of executing multiple actions before human intervention is possible.

“The Manus research and this survey data are two views of the same problem,” said Yaniv Balmas, Head of Research at Salt Security.

“In the field, we showed how an agent can be weaponised through a single malicious email, how the guardrail detected the attack at exactly the right moment, and still could not stop the code from running. The survey quantifies how widespread that architecture is.”

The findings underline the need for organisations to strengthen visibility into agent activity, establish appropriate governance controls and develop automated containment capabilities as AI agents gain greater autonomy and access to critical enterprise systems.

The full State of Agentic AI and API Security 2H 2026 report includes sector-specific findings, recommendations for CISOs and further analysis of Salt Labs production telemetry.

The post Nearly Half of Organisations Report Unauthorised AI Agent Actions, Research Finds appeared first on IT Security Guru.

Huntress researchers have uncovered an SEO-poisoning campaign that harvests SSL VPN credentials through a lookalike WatchGuard download page, then hands victims the real, validly signed installer from WatchGuard’s own CDN, leaving endpoint tools with nothing to detect.

The activity, detailed by the Huntress SOC on 13 October, centres on watchguard-vpn[.]net, a lookalike domain posing as a download page for WatchGuard’s Mobile VPN with SSL client. Unlike earlier waves of the campaign, which relied on trojanised installers, this iteration strips the malware out entirely.

A typo and a search result

The incident Huntress investigated began on 7 October, when an administrator at a managed service provider searched Bing for “watchguard vpn sll download”. Eight seconds later they had clicked through to the fake site via a standard Bing result redirect, which Huntress says points to SEO poisoning rather than malvertising.

Two bites at the password

Clicking any download option on the site opens a pop-up asking for the VPN server address, username and password, the same three values the legitimate client requests. The logic sits in roughly 150 lines of unobfuscated JavaScript (popup.js), which posts the entries as JSON to a separate collection domain, watchguard-ssl[.]online.

The first submission is always rejected with an “incorrect data” message, prompting victims to retype carefully or try a different password. That gives the operators a second, likely more accurate, set of credentials, along with the server address they need to log in.

The payload is the real thing

After the second submission, the script triggers a download of WatchGuard’s genuine Mobile VPN with SSL installer (version 12.11.5) direct from cdn.watchguard.com. Huntress verified the file’s Authenticode signature from WatchGuard Technologies and confirmed the binary had not been altered.

With no trojanised MSI or sideloaded DLL in the chain, there is nothing for EDR to flag, and the victim gets exactly the install they expected. Detection was thin across the board: as of 8 October only seven VirusTotal vendors flagged the lure domain and two flagged the collector.

Old domain, new backend

WatchGuard’s Secplicity team first reported watchguard-vpn[.]net in January as part of a wider credential-harvesting campaign spoofing WatchGuard, F5, Fortinet, SonicWall and Sophos clients, though at that point the domain had no working backend. Microsoft later attributed related activity to Storm-2561, a financially motivated actor active since May 2025. WHOIS data shows the domain was registered again on 22 August, with the collector domain following on 14 September. Huntress says it cannot establish whether the same operators controlled both registrations.

In the case investigated, Huntress flagged the activity 21 seconds after the site loaded, and browser history suggests the user did not complete both rounds. The domain was offline as of 13 October, and Huntress has shared infrastructure details with WatchGuard.

Recommendations

• Reset passwords for any account entered on the site and treat the associated VPN endpoint as known to the attacker.
• Enforce MFA on SSL VPN access.
• Monitor for VPN logins from hosting providers, unfamiliar ASNs or new countries.
• Block watchguard-vpn[.]net, watchguard-ssl[.]online, 80.249.132[.]140 and 158.94.209[.]19.
• Publish and bookmark official download links such as software.watchguard.com.

Full research: https://www.huntress.com/blog/fake-watchguard-vpn-credential-phishing

The post Fake WatchGuard VPN site steals credentials, then serves the genuine signed client appeared first on IT Security Guru.

Zero trust has become one of the most overused terms in security marketing, often applied to products that simply add another layer of network segmentation. This piece looks at what zero trust actually specifies according to its foundational standard, the implementation order that works in practice, and why identity is the dependency most organizations underestimate.

What Does Zero Trust Actually Specify, Beyond the Marketing Language?

Zero trust gets used loosely enough that it has largely lost precision as a term, applied to everything from a VPN replacement to a full architectural rebuild. That imprecision is a real problem for organizations trying to evaluate vendor claims, since two products both marketed as zero trust solutions can address entirely different parts of the actual model.

Organizations working through this evaluation often look at established regional providers as part of their planning. Among them, cybersecurity solutions in Dubai offer a starting point for comparing how different providers translate the zero trust framework into an actual implementation roadmap, which varies considerably depending on an organization’s existing infrastructure.

At its core, the specification requires continuous verification of every access request, whether it originates inside or outside the traditional network perimeter, and it removes the assumption that anything on the internal network is inherently trustworthy simply by virtue of its location.

Zero trust component	What it actually requires
Identity verification	Every access request authenticated, not just the initial network entry
Least privilege access	Access scoped to the minimum needed for a specific task
Micro segmentation	Network divided so lateral movement is contained, not just perimeter defended
Continuous monitoring	Access patterns evaluated ongoing, not just at login

That table names the components. The harder part, and the part most vendor pitches skip, is the order in which an organization actually implements them.

What Implementation Order Actually Works, and What Stalls?

Organizations that attempt zero trust as a single, comprehensive rollout tend to stall, since the scope quickly exceeds what any team can execute without disrupting normal operations. Organizations that succeed tend to sequence the work, starting with identity infrastructure before touching network segmentation.

That sequencing is not arbitrary. Identity is the hard dependency underneath every other component of the model. Microsegmentation without solid identity verification just creates smaller trusted zones rather than removing the underlying trust assumption. Continuous monitoring without reliable identity data produces noise rather than usable signal. Getting identity right first is what makes everything built on top of it actually function as intended.

IT Security Guru’s coverage of automated tools in SaaS penetration testing touches a related sequencing question from a different angle: the growing reliance on automation to keep pace with continuous verification demands, which is exactly the kind of tooling that becomes necessary once an organization’s zero trust model matures past the identity foundation stage.

Organizations that skip the identity-first ordering often end up with what looks like a zero trust deployment on paper but functions as a rebranded VLAN structure underneath, technically segmented but still relying on implicit trust once a user or device gets past the initial checkpoint.

Where Does the NIST Standard Actually Draw the Line?

Rather than relying on vendor definitions, it helps to work from the actual specification. NIST Special Publication 800-207 lays out the zero trust architecture in detail, defining the core logical components and the tenets that distinguish a genuine implementation from marketing language attached to conventional network security.

The standard makes it clear that zero trust is a set of principles guiding architecture decisions, not a single product or technology you can buy and deploy wholesale. That framing alone rules out a large share of what gets marketed under the term, since a genuine implementation touches identity management, policy enforcement, and monitoring together rather than any one of them in isolation.

How Can an Organization Tell Real Progress From a Rebranded VLAN?

A few honest checks separate genuine progress toward zero trust from a relabeled version of existing network security. Evaluate access decisions per request based on current context, not grant broad access once a user authenticates at the start of a session. Policy enforcement should apply consistently, whether a request originates inside or outside the traditional network boundary. Monitoring should also detect anomalous access patterns after the fact, not just block unauthorized access at the point of entry.

An organization that cannot clearly explain how it makes access decisions on a per-request basis is likely still operating on the old trust model, whatever the marketing materials on its security stack claim.

FAQ

What is zero trust, in the simplest accurate terms?

It is a security model that requires continuous verification of every access request, regardless of whether it originates inside or outside the traditional network perimeter, removing the assumption that internal network location implies trustworthiness.

Why does identity have to come before network segmentation in implementation?

Identity verification is the dependency the rest of the model relies on. Segmentation and monitoring without reliable identity data produce smaller trusted zones or noisy alerts, rather than genuinely removing implicit trust.

How can an organization tell if its zero trust deployment is genuine?

Access decisions should be evaluated per request based on current context, not granted broadly after initial login, and policy enforcement should apply consistently regardless of where a request originates.

Is zero trust a product an organization can simply buy?

No. NIST’s foundational specification describes it as a set of architectural principles, not a single purchasable technology. A genuine implementation brings together identity, policy enforcement, and monitoring rather than relying on any one component alone.

The post Zero Trust in Practice: Moving Beyond the Buzzword appeared first on IT Security Guru.

Vega, the pioneer of Agentic Cyber Defense, today announced the appointment of Scott Simkin as Chief Marketing Officer. Simkin joins as Vega II unleashes the best model trained for cyber defense to transform every alert, across all data sources, into a conclusive verdict at the speed of the attack. The platform keeps every lesson and gets faster with every fight, so defenders can finally outpace adversarial AI.

“Once a generation, a company changes how security gets done. For Cyber Defense in the age of AI, that company is Vega,” said Shay Sandler, co-founder and CEO of Vega. “Scott built the stories and execution engine behind the two biggest names in security operations. Now he will help Vega define the post-SIEM era. There is no one I would rather have leading this charge.”

Simkin is one of the industry’s best-known storytellers, having twice helped define a category and drive growth at massive scale. At Palo Alto Networks, he served as Vice President of Marketing for the end-to-end Cortex platform, one of the fastest-growing portfolios spanning security operations, cloud security, and Unit 42 services, with annual revenue approaching $2 billion. Earlier, he helped pioneer the XDR category, which has since replaced EDR as the standard for modern endpoint security. At CrowdStrike, he led product marketing, technical marketing, portfolio positioning, and campaigns across the full Falcon platform. He also launched Falcon Next-Gen SIEM, which CrowdStrike says now exceeds $600 million in annual recurring revenue. Two years after founding, Vega already defends some of the world’s largest banks, healthcare providers, and Fortune 200 enterprises, and Simkin joins to turn that momentum into dominant market leadership.

“For three years, CISOs have asked me the same question about AI in their SOC: isn’t this just an iteration on the SIEM? They were right, and Vega is the answer,” said Simkin. “AI across all your data, in place, without moving or ingesting it. Better outcomes, faster, at a lower total cost. That’s Vega, and no one else comes close. I’m grateful for a career at the companies that built this market, and I’ve never been more certain about where Cyber Defense is going. Vega has the technology and the people this moment demands. There was only one choice.”

Experience Vega II at Cyber Defense at the Frontier on Oct. 21, 2026, at 8 a.m. PT / 11 a.m. ET / 4 p.m. BST.

Read the blog · Register for the virtual summit · Get a demo today

The post Vega Appoints Category Builder Scott Simkin as Chief Marketing Officer to Define the Post-SIEM Era appeared first on IT Security Guru.

Certes has received Frost & Sullivan’s 2026 Global Enabling Technology Leadership Recognition in post-quantum cryptography (PQC), following an independent evaluation of vendors in the market.

The recognition centres on a problem most security teams are now facing: migrating embedded cryptography across legacy applications, cloud environments and critical infrastructure will take years, but “harvest now, decrypt later” attacks mean data intercepted today could be exposed once sufficiently powerful quantum computers arrive. Frost & Sullivan notes that the risk is greatest for data with long regulatory, legal or commercial lifespans, and that protecting it needs to run in parallel with the longer migration effort rather than wait for it to finish.

Separating cryptography from the stack

At the heart of Certes’ platform is its Cryptographic Abstraction Layer (CAL), which sits between applications and infrastructure and lifts cryptographic protection out of the underlying technology stack. Rather than waiting for each vendor to ship a quantum-safe update and then managing disruptive upgrades, security teams can manage cryptographic change centrally and apply it to data flowing between systems.

The platform comprises the Certes Enforcement Point (CEP), which encrypts and decrypts within the data path, and the Certes Policy Manager (CPM), which manages policies and cryptographic controls centrally. Frost & Sullivan singled out its policy-specific key architecture as a key differentiator: each policy-controlled application or data flow can have its own key material, separate rotation schedules and customer-controlled key components. This is combined with quantum-based random number generation and customer-owned keys to support data sovereignty.

Certes’ patented Layer 4 payload protection encrypts the payload while preserving original network headers, so routing, QoS, monitoring, SD-WAN and flow visibility tools continue to work without applications being rewritten or networks re-architected. Deployment options span physical appliances, virtual machines on VMware ESXi, KVM, Red Hat and Nutanix AHV, and Windows and Linux client agents. Version 7 extends enforcement closer to workloads and users through expanded agent and cloud deployment options, reducing unprotected segments in the data’s journey.

Beyond quantum

The report also highlights uses beyond PQC migration. Cryptographic segmentation can separate IT and OT environments and limit lateral movement in flat networks, while a virtual air gap capability can dynamically isolate critical applications, data flows and backups during an active attack while preserving recovery. Certes’ encryption can also stop sensitive data being exposed to internal or external LLMs, giving organisations tighter governance over AI adoption.

Ozgun Pelit, Senior Industry Analyst at Frost & Sullivan, said: “Certes stands out in the emerging post-quantum security market through its focus on protecting data independently of the applications and infrastructure around it. Its combination of cryptographic abstraction, crypto-agility and centralized policy enforcement provides organisations with a practical way to reduce near-term quantum risk while navigating what will inevitably be a complex, multi-year migration.”

Paul German, CEO at Certes, said: “The next cryptographic revolution could arrive before many organizations have finished implementing the last one. Post-quantum cryptography is only the beginning. As AI and quantum technologies advance, cryptographic change will accelerate, and organisations cannot afford to rebuild their applications, networks and security infrastructure every time it happens.”

He added: “In a world where cryptography must constantly evolve, the ability to change it without changing everything else isn’t a luxury. It’s a necessity.”

The full Frost & Sullivan report is available HERE

The post Certes wins Frost & Sullivan PQC recognition for decoupling encryption from infrastructure appeared first on IT Security Guru.

It's about time: the General Conference on Weights and Measures looks set to end leap seconds in an effort to reach horological harmony. Since 1972, 27 leap seconds have been added to Coordinated Universal Time (UTC) to keep it in step with the astronomical time scale UT1, which is based on Earth's fluctuating rotation. The proposal would increase the permitted difference between UTC and UT1 from 0.9 seconds to one hour, avoiding leap-second adjustments for centuries. Earth's rotation has also sped up in recent years, raising the possibility of a negative leap second – removing a second rather than adding one. That has never been done before. Experts have estimated a 30 percent probability that global systems will need a negative leap second by 2035 to keep the two time measures in step. That could pose problems for computer systems designed to handle added seconds but not removed ones. Many national bodies support the proposal, which is expected to pass. If approved, the change would take effect on May 20, 2027. Setnam Shemar, principal scientist at the UK's National Physical Laboratory, said the proposal would avoid the risks associated with leap seconds for centuries. "Leap seconds can be difficult to implement reliably, and if not applied correctly, they can cause differences in time across networks, potentially leading to the failure of systems such as mobile phone networks or electricity grids. These risks could increase if a negative leap second had to be implemented for the first time. "Previously, leap seconds were added to UTC to keep it within 0.9 seconds of UT1. From 20 May 2027, a difference of up to 1 hour will be allowed before intervention is needed, ensuring the continuity of UTC for several centuries or more. "The relationship between UTC and UT1 is important for some applications, such as astronomy and celestial navigation. The decision would not sever that link: UT1 will continue to be monitored, and its difference from UTC will continue to be disseminated through established international services." ®

Silicon Valley’s AI bros have supposedly found a new way to signal to those around them how committed they are to their industry: Take up smoking despite the risk of cancer, because they expect bots to develop a cure … any day now. At least, that’s the claim Palantir CTO Shyam Sankar made in a recent interview on CBS's Face the Nation. In trying to explain what he described as a doomsday cult surrounding effective altruism, whose adherents include some AI researchers who believe the technology could bring about a utopia, Sankar claimed smoking has become a way for researchers to demonstrate their faith in the tech. “So many AI researchers have started smoking as a way of signaling to other researchers how much they believe in AI,” Sankar said to the confusion of host Margaret Brennan. Those researchers “believe so much in AI that it's going to cure cancer, I'm showing you my chips are all in,” Sankar explained. Sankar described the decision to take up smoking as a bet that AI would cure any health ailments that arose from it as “mass psychosis” and “social delusion” that’s getting in the way of actual discussions around the state of AI, and he blamed Silicon Valley’s pet philosophy, effective altruism, for those delusions. “There's an unseen force driving the narrative around AI safety, and it's really this millenarian doomsday cult meets messianic complex called effective altruism,” Sankar said. That philosophy prioritizes making the most effective decisions that benefit the most humans – like utilitarianism on steroids – and it tends to take a long-term approach to things. That’s where AI comes in: Effective altruists are ostensibly focused on ensuring AI systems are built in a way that will best benefit humanity. That focus has been a key reason why so much AI doomerism has come out of Silicon Valley too: If we’re going to build safe AI, says the effective altruist, we have to make sure that we consider all the risks. “There's only really roughly 2,000 AI researchers in America, and the vast majority of them believe in this sort of worldview around effective altruism,” Sankar noted. The Palantir CTO seems to believe, like many effective altruism critics, that all the doomsday scenarios and far-fetched risks being posited by the EA AI crowd are less technical critiques and more like theological ones. “I think there's a profound truth to Pascal's saying that every human has a god-shaped hole in their heart,” Sankar said, “and it's important to understand that many of these folks in Silicon Valley who are building this technology have filled that hole with the machine God of AGI.” Smoking as a bet that the machine god will save them from cancer, therefore, is akin to the ascetic’s endurance of physical pain or trauma in the hopes God will heal them or see them safely through their torment. From a more practical perspective, this isn’t exactly a great idea, as one former cancer researcher who spoke to The Register told us. “Good luck to them with this approach,” the researcher, who declined to be named, opined. “Even more so, good luck to their non-smoking friends and family taking in their passive smoke.” Taking up smoking in the hopes of a cure may not be a wise idea when one considers the timeline needed to develop a cancer drug, much less a cancer cure. "Even with AI, developing and introducing a new cancer drug into any of the world's health systems can take several years,” the researcher explained. “Even then we wouldn't know whether or not resistance to the drug would develop in the tumors.” The ability of AI to discover drugs and medical treatments has been much hyped – Google DeepMind CEO Demis Hassabis even predicted last year that 2025 would be the year humans started popping AI-designed pills. That hasn’t happened yet, and there’s no real indication it will anytime soon. In other words, the likelihood that AI is going to kill us all is ridiculously overblown. The actual casualties, it seems, are more likely to be the AI bros giving themselves cancer as a show of faith in their machine god. ®

In Booz Allen’s isolated OT lab, AI models met every objective across eight scenarios and reached an industrial control network from a perimeter compromise in just over 16 minutes.

The post AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds appeared first on SecurityWeek.

The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers and KVM devices as part of its ongoing efforts to disrupt North Korea's fraudulent remote IT worker (ITW) scheme. The indictment charges a mix of U.S. citizens and Chinese nationals for their roles in an IT worker conspiracy affecting more than 70 U.S. companies, charging them with wire fraud

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the latest version following the disclosure of an actively exploited vulnerability. The security flaw, tracked as CVE-2026-104935 (CVSS score: 8.6), is a case of authentication bypass impacting ICS

A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client's memory, and the researcher who reported it turned that into code execution on the uploading machine. The curl project fixed it on October 14 in curl 8.23.0. Taking over a client needs exact knowledge of its build and memory layout, and curl expects a real attack to end in a crash

A browser-based emulator for the original iPhone is the latest project to tap into the rich vein of nostalgia running through the tech industry. While far from a complete implementation, the emulation does enough to evoke happier times, before Apple burdened its mobile operating system with frills and complexities, and spent years (and multiple operating system updates) making the Podcasts app steadily more broken. The browser-based emulation (and we use the term carefully; anyone expecting all the functionality of yesteryear will be sorely disappointed) shows an original iPhone as it debuted in 2007. The buttons are where you remember them, the screen is ringed by bezels that wouldn't pass muster today, and the skeuomorphic icons are all present and correct. There's even the browser, though it doesn't do much yet. Even a gentle prod shows how incomplete this implementation is. Some apps work well, such as Calculator, while others - Contacts - struggle, and anything that needs an online connection fails, including loading today's web in 2007's Safari. It does, however, recall how simple things were almost 20 years ago, when the iPhone first appeared, and it joins an array of old-time systems that can be fired up (or at least look like they are) in a browser. Want a look at Apple's abandoned System 7 replacement? Step this way. Perhaps an XP-like implementation? No problem. It would be churlish to dwell on the emulation's deficiencies. For now, it's arguably more curiosity than anything else: Apple didn't launch the App Store until 2008, so third-party apps would be off the table, at least until a later version of iOS landed. Running it in a browser is undoubtedly convenient, though. Alternatives such as Light Touch offer a fuller implementation, but they demand more than a handy Chrome instance on a Windows device to open a portal back to a brighter time. So, fire up 2006's Nintendo Wii, pop on that CD of Back to Black, and relive the excitement of switching on the very first iPhone. Although perhaps give that other 2007 icon, Windows Vista, a bit of a swerve… ®

IBM ha rilasciato aggiornamenti di sicurezza per sanare molteplici vulnerabilità, di cui 2 con gravità “critica” e 5 con gravità “alta”, nei prodotti WebSphere Application Server - Liberty e WebSphere Application Server. Tali vulnerabilità potrebbero consentire a un utente malintenzionato remoto di eludere i meccanismi di autenticazione e di autorizzazione o di eseguire codice arbitrario sui sistemi interessati.

ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability. 

The post ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw appeared first on SecurityWeek.

Ubiquiti ha rilasciato aggiornamenti di sicurezza che sanano alcune vulnerabilità, di cui 2 con gravità "alta", in UniFi Protect AI Key, componente della piattaforma di videosorveglianza IP UniFi Protect. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un attaccante remoto di eseguire codice arbitrario e compromettere la disponibilità del servizio sui sistemi interessati.

Gigabyte recently announced new motherboards that use DDR4 RAM, a standard that launched in 2014, and other vendors support even older standards in brand-new kit. Earlier this year, AMD released a Ryzen 7 5800X3D anniversary edition to mark ten years of AM4. For AM4 processors, Gigabyte offers the new B450M H ARGB, with two DDR4 slots, and the B550 X-Eagle with four slots. Those who prefer Intel chippery can now buy a B760M Aorus Elite. This is notable because of the age of the DDR4 spec. In case you lose track of these things, The Register first described the new DDR4 spec back in 2012, and a few months later urged the keen to wait a year or two. DDR5 supports higher transfer rates, and The Reg predicted its arrival in 2017. The DDR5 standard was agreed in 2020, with mainstream PC adoption following in 2021. Over in the People's Republic of China, several vendors will sell you new DDR3 motherboards for 15-year-old server CPUs, such as Huananzhi's X79-4D or X79 Supreme, or the Machinist X79 V2.82H. These use Intel's LGA-2011 socket – named for the number of pins, but coincidentally launched in 2011. This Chinese SMZDM community discussion is about whether the circa 15-year-old Xeon E5 is still worth buying – a CPU The Reg covered in 2012. This is partly due to the current price rises and component shortages induced by large-scale, cloud-based LLMs – but also "training" those "open-weight" models that run on your own kit. Those too are constructed in giant datacenters stuffed full of GPUs, ingesting all the human-written material they can get their hands on, rarely asking for consent. And not just stuff put online either. Once you wipe the sluggish, bloated commercial OS from your computer's storage, you discover two things. First, you don't need the latest hardware any more. Secondly, the older the PC (or Mac), the better the chances that it will work fine with Linux – or indeed the other FOSS OSes out there. Current and recent hardware is the most problematic for FOSS developers because most manufacturers prioritize Windows testing, while restricted documentation and proprietary drivers can complicate open source support for new hardware. Together, these things mean that if you're happy without high-powered local LLMs, or three-digit frame rates, second-hand kit is more usable than ever. (For those who can't do without one or two Windows-only apps that won't run under Wine, we remind you that desktop VMware is free now… and for better desktop integration, we looked at WinApps and WinBoat earlier this year.) The Reg FOSS desk is based in the British Isles, close enough to order stuff inexpensively from the UK. We've been using online vendors of depreciated ex-corporate kit for decades: we've bought several machines from Morgan Computers, and occasionally from Tier1 Online and Bargain Hardware. Other vendors are available. There are also special-purpose price-comparison sites, such as LowCostMiniPCs.com, which searches other sales sites for bargains. When we were based in Czechia, we bought a few things from GigaComputer, and we know of others we didn't try, such as Refurbed.cz. Other such European sites include Computershop.eu. The usability of kit that can only officially run Windows 10 was the entire point of the End of 10 campaign. Microsoft cites security benefits for Windows 11's hardware requirements, but in this vulture's opinion, those benefits don't justify excluding an entire generation of otherwise capable hardware. Keeping older hardware in service is welcome. If digital sovereignty gives organizations another reason to consider open source alternatives, so much the better. ®

The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial restrictions.

On October 8, the U.K. issued sanctions (PDF) against Cryptomus — previously known as Certa Payments and Xeltox Enterprises — for processing payments that benefit the Russian government and its financial institutions. The sanctions freeze any Cryptomus assets at U.K. banks, and bar British companies from offering it any business, virtual or otherwise. Also targeted in these sanctions were the virtual payment platforms VexPay, TokenSpot, and the Tsunami Payments service.

As explained in our December 2024 investigation, “How Cryptocurrency Turns to Cash in Russian Banks,” Cryptomus has been a key payment processor for dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services. The company has changed its name several times since emerging in 2022, most recently to “Heleket” last year after Canada levied a record CAD $176 million fine against the platform for anti-money laundering violations.

The blockchain data-crunching firm Chainalysis said the U.K. sanctions target the broader infrastructure supporting Russia’s wartime economy.

“Cryptomus and Heleket have emerged as major payment hubs for illicit activity,” Chainalysis wrote in an October 8 blog post. “Together, these services received more illicit funds across tracked categories than the mixers in our dataset and the number of illicit counterparties surged to more than 900 in a single month in late 2025.”

In April 2026, the blockchain analysis firm TRM Labs found Cryptomus had processed more than $7 billion in transactions since its inception in 2022, including transactions associated with child sexual abuse material vendors, terrorist financing networks, and human trafficking operations.

TRM noted that Cryptomus’s transaction volume cratered after the platform instituted new “know your customer” or KYC rules, and that the cryptocurrency platform responded to the Canadian fines by launching Heleket as a parallel service that continued to offer no-KYC payment processing.

Richard Sanders is a blockchain analyst and investigator who spent months mapping out Cryptomus’s payment infrastructure and transacting with its customers. Sanders said the U.K. sanctions on Cryptomus are important because Canada’s sanctions against the platform were ultimately unenforceable and uncollectible.

“A fine doesn’t stop a cryptocurrency payment processor from processing payments,” Sanders wrote on LinkedIn. “Sanctions kill the operation. The distinction matters.”

As our 2024 investigation noted, Cryptomus shared a Vancouver address with dozens of other foreign currency dealers and money transfer businesses — none of which appeared to be physically located there. Following the CAD $176 million fine for alleged money laundering violations, Cryptomus appealed the penalty, launched Heleket as a parallel service, and kept on processing large volumes of sketchy transactions, Sanders said.

Sanders said the sanctions also are notable because they are the first known instance of a “Five Eyes” country (referring to the Australia, Canada, New Zealand, the U.K. and the U.S.) sanctioning a cryptocurrency operation incorporated in another Five Eyes jurisdiction.

Where do entities like Cryptomus and Heleket derive their authority to offer international financial services? The answer appears to involve fake financial institutions overseen by a phony regulatory body positioned in a country that is not widely recognized as a sovereign nation.

Our 2024 investigation found the sole shareholder of Cryptomus’s parent company Certa Payments was a 25-year-old Ukrainian woman who also headed several other firms, including the WS Management and Advisory Corporation, which bills itself as the regulatory body that exclusively oversees licenses for cryptocurrency, foreign exchange and online gaming businesses incorporated in the disputed region in northwest Africa known as the Western Sahara.

That entity’s website — crasadr.com — says it assists applicants with bank setup and formation, online gaming licenses, and the creation and licensing of foreign exchange brokers. One of Certa Payments’ former sites — certa[.]website — also shared a server with 12 other domains, including rasd-state[.]ws, a website for the Central Reserve Authority of the Western Sahara.

Tiny11 Builder, a tool for creating less-bloated Windows 11 installation images, now has a desktop app preview that makes the process less reliant on PowerShell know-how. As the author explains: "Tiny11 Builder aims to be the de facto standard for creating lightweight, safe and efficient Windows images." The tool creates an ISO image for Windows installation, stripping out bundled apps and selected system components. It accepts Windows 11 installation media from 22H2 onward, including 26H2, and the result is something a good deal more compact than Microsoft's original. The major visible change is a WinUI 3 desktop application that uses a new C# image builder rather than merely running the existing PowerShell scripts behind a graphical interface. Those scripts remain available, but the new interface is considerably more polished. There are three basic build modes: Tiny11, which removes bundled apps while retaining Windows Update, Defender, and recovery tools; Tiny11 Core, which disables updates and Defender and irreversibly removes components, including the recovery environment; and finally a custom option where users can decide which Windows elements to keep or drop from the ISO image. Tiny11 remains an impressive technical achievement, but it carries an important health warning: the ISOs it creates are definitely not supported by Microsoft, and if you opt for Tiny11 Core, the author recommends sticking to test VMs only. This is for enthusiasts who understand that a smaller installation can come with missing functionality, security trade-offs, and support complications. There is also no guarantee that attempts to bypass some of the more onerous aspects of Windows 11 installation will work. As the author notes in the project's repository: "Local-account and hardware-check settings are best effort, not guaranteed bypasses on new builds." In other words, don't count on it to bypass Windows 11's hardware requirements or account demands on newer builds. Tiny11 is all about stripping fluff and fripperies from the Windows 11 installation image. As with earlier versions, a license is still required. While the ISO might have been debloated, this is still Microsoft Windows 11 after all. "No modification bypasses Windows licensing or activation," the author notes. The appeal of removing Microsoft's excesses is clear. Whether the reduced footprint is worth the loss of components and potential support headaches depends on what users choose to strip out. ®

The cybersecurity startup plans to expand engineering and go-to-market teams in the US and UK.

The post Harmonic Security Raises $50 Million for Workforce AI Protection appeared first on SecurityWeek.

Citrix ha rilasciato aggiornamenti di sicurezza per risolvere 3 vulnerabilità, di cui una con gravità "alta", in UniconOS, sistema operativo per endpoint precedentemente noto come "eLux", utilizzato principalmente in ambienti di virtualizzazione desktop (VDI/DaaS). Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un attaccante locale, autenticato con privilegi limitati, di elevare i propri privilegi sul sistema interessato.

This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies.

The post Watch Now: Zero Trust Strategies Summit – All Sessions Available on Demand appeared first on SecurityWeek.

AI datacenters are a rats nest of fiber optic cables stitching together thousands of AI accelerators, NICs, switches, and everything else required to train and run the latest and greatest modes. Cisco hopes to untangle this mess with a new pluggable optic developed in collaboration with Nvidia that will pack between four and eight times the bandwidth of existing pluggables into a single port. Announced at the Open Compute Project (OCP) global summit this week, the ultra-dense small form factor pluggable (USFP) promises to pack up to 32, 400 Gbps lanes into a pluggable roughly the size of existing OSFP modules. Each of these pluggables would boast 12.8 Tbps of Ethernet bandwidth, as much as a high-end enterprise switch just a few years ago. To put that in perspective, the most sophisticated pluggable optics today cap out at around 1.6 Tbps using eight 200 Gbps links. Such a pluggable has the potential to significantly simplify cabling across AI datacenters where it isn't uncommon for each GPU to be paired with an 800 Gbps and soon 1.6 Tbps NIC. A single USFP pluggable could consolidate eight GPUs worth of cabling into a single fiber optic bundle. Meanwhile, on the switch side, a future 204.8 Tbps switch would only require 16 USFP ports to support 128 1.6 Tbps endpoints. Cramming all that connectivity into a single pluggable won't be easy. Today a high-end pluggable optic might pull on the order of 20 watts. Cisco's USFP spec calls for up to 100 watts per pluggable. There are also design constraints that have to be taken into consideration. Four times as many links per pluggable means 4x as many electrical contacts that have to be perfectly seated. Because of this Cisco says USFP modules will employ a two phase insertion mechanism in which the pluggable is first inserted into the cage and then a second mechanism is actuated to make the electrical connection. Speaking of reliability, USFP would have a bigger blast radius than conventional pluggables. A single bad laser or digital signal processor (DSP) has the potential to take out far more than a single GPU, but entire systems. While that might sound bad, it's nothing compared to co-packed or near-package optics where one failure could drop an entire rack's worth of accelerators from the network. Nvidia's participation in the development of the USFP standard is notable as the Ethernet networking titan has largely moved away from pluggables in its most recent set of switches. Many of its Spectrum-X and Quantum-X switches now use co-packaged optics and for good reason. Cutting out the pluggables on the switch side nets a roughly 30 percent power savings. But while Nvidia's latest switches may use CPO, its NICs still rely on pluggables in part because it offers integrators greater flexibility. Not everyone is building 100,000-plus GPU clusters for training. For racks utilizing a top of rack switch, lower power direct attach copper cabling can be used without much issue. Given Nvidia's investments in CPO we can only speculate on its interests in USFP, but it likely comes down to densification. The AI infrastructure giant is rapidly moving toward 600 kW racks packing 144 GPUs on board. First teased in early 2025, Nvidia's Vera Rubin Ultra platform promised 115.2 TB/s scale out bandwidth per rack or about 3.2-6.4 Tbps of bandwidth per GPU package depending on whether they're counting bidirectional bandwidth or not. It just so happens that Cisco's initial USFP spec calls for 16, 400 Gbps links per pluggable, or about 6.4 Tbps of bandwidth. While Cisco and Nvidia may be leading the charge on the development of an ultra dense optical pluggable, like most things Ethernet, USFP will be an open standard anyone can use in their designs. Microsoft taps Cisco for multi-datacenter AI Alongside Cisco's latest tie up with Nvidia, Switchzilla also revealed that Microsoft is now using its Silicon One P200 routing chips to distribute workloads across multiple datacenters. Nvidia and others have taken to calling this kind of multi-site computing: scale across networking. We discussed Cisco's datacenter-scale routing platform at length late last year, but the silicon competes directly with products like Nvidia's Spectrum-XGS and Broadcom's Jericho 4-based offerings. Cisco touts the P200 as the first 51.2 Tbps systems "deployed in a production environment by leading hyperscalers." With enough qualifiers you can be the first at anything. As we reported at the time, Microsoft was among the first major hyperscalers to embrace scale-across networking as a means of overcoming local power constraints with its Fairwater clusters in Wisconsin and Georgia. And it seems we finally know the hardware good old Redmond is using to stitch them together. Cisco gives SONiC some love Speaking of hyperscalers, one thing you probably won't find in a hyperscale network is Cisco's Nexus network operating system (NOS). Hyperscalers like Microsoft typically employ vendor agnostic NOS platforms to avoid vendor lock-in and make managing networks across multiple Ethernet vendors cheaper and easier. Originally developed by Microsoft and later open sourced, SONiC is among the most popular and widely deployed of the hyperscale NOSes. SONiC support, we should note is nothing new for Cisco which contrary to popular belief is more than willing to sell you any one piece of its networking stack, assuming you've got a big enough purse — the hyperscalers certainly do. As such Cisco is one of the biggest contributors to the SONiC project. Instead of forcing customers to use its software stack, Cisco's approach to SONiC and the hyperscale is to extend the NOSes capabilities to better take advantage of ASIC's unique capabilities and allow for integration with its services. At OCP this week, Cisco announced support for its Live Protect platform in SONiC to make it easier for customers to keep up with security patches in the wild. This capacity is expected to roll out next year. ®

Rilasciati aggiornamenti di sicurezza che risolvono diverse nuove vulnerabilità in Wazuh, di cui 3 con gravità “critica” e 5 con gravità “alta”. Per le CVE-2026-74035, CVE-2026-74036, CVE-2026-74037, CVE-2026-74040, CVE-2026-74041, CVE-2026-74043 e CVE-2026-74045 risulta disponibile un Proof of Concept (PoC) in rete.

Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.

The post Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages appeared first on SecurityWeek.

The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.

Adobe ha rilasciato aggiornamenti di sicurezza per risolvere molteplici vulnerabilità, di cui 26 con gravità “critica” e 99 con gravità “alta”, nei prodotti Dimension, FrameMaker, Substance 3D, Bridge, Content Credentials SDK, Commerce, ColdFusion, Photoshop ed Experience Manager (AEM).

Some of America's biggest tech companies have a warning for Europe: curb your reliance on US cloud providers, and it could cost you €115 billion. That's the finding of a new study commissioned by CCIA Europe, a lobbying group whose members include Amazon, Google, and Meta, companies that have plenty of reasons to want European governments to keep buying American cloud services. The research, conducted by the European Centre for International Political Economy (ECIPE), claims the European Commission's proposed Cloud and AI Development Act (CADA) could saddle Europe with €115 billion in costs over the next decade, more than six times the Commission's upper estimate of €18 billion. The report argues that restrictions favoring European cloud providers would leave governments and businesses facing hefty bills to migrate workloads and rewrite software. It puts direct public-sector costs at €33.3 billion, with a further €80 billion potentially falling on private companies in sectors including banking, healthcare, energy, and transport. However, a rather large asterisk is attached to that €80 billion figure. It assumes the Commission extends sovereignty requirements beyond public procurement to cover 25 percent of cloud workloads in essential private-sector industries. In other words, it's a modeled scenario, not a bill Brussels has already handed European businesses. The study also comes with some baggage of its own. CCIA represents several US technology giants that dominate the European cloud market, including Amazon and Google. Both have spent years selling European customers cloud services while more recently developing sovereign cloud offerings designed to address concerns about foreign ownership, data access, and regulatory control. Amazon, for example, has been developing its AWS European Sovereign Cloud, while Google markets a range of sovereign cloud solutions. Apparently, sovereignty is an attractive proposition when it comes with a hyperscaler logo attached. Meta, another CCIA member, has its own interests in European AI infrastructure, although it is not a commercial cloud provider on the scale of AWS or Google Cloud. The report specifically targets Article 31 of the proposed legislation, which it says could allow the Commission to extend sovereignty requirements into essential private-sector services. CCIA argues that forcing businesses to move away from existing cloud infrastructure could trigger expensive software redevelopment projects, with code rewriting and re-architecting accounting for 69 percent of its estimated costs. Luxembourg would apparently take the biggest hit, with the study putting the cost at €1,711 per worker over ten years. Denmark (€905), Austria (€900), and Finland (€864) also face hefty bills, as does Ireland (€856), which hosts the European headquarters of several US tech giants. CCIA is urging EU governments to overhaul the proposed legislation, limit sovereignty restrictions to sensitive workloads, and abandon requirements based on corporate origin or personnel nationality in favor of what it calls risk-based technical safeguards. "Member States cannot rely on the Commission's incomplete estimates when deciding CADA's strict sovereignty requirements for cloud and AI providers," said Mitchell Rutledge, CCIA Europe's policy manager. "Taxpayers and businesses will foot the bill, yet the official assessment missed 70 percent of CADA's true impact." For AWS and Google, offering European customers greater control over their data also helps retain business that might otherwise migrate to European competitors. It's a rather convenient arrangement: sell customers sovereignty on one hand, while an industry association representing your interests warns governments against imposing too much of it on the other. Neither company responded to The Register's questions. Whether Europe's sovereignty ambitions will prove as expensive as CCIA predicts is unclear. What's easier to establish is that the companies warning Brussels about the cost of reducing its dependence on US technology have plenty to gain if Europe decides to keep buying American. ®

They were victims, not abusers. That’s what they told police officers, attorneys, visitors and anyone else who would listen. It didn’t matter. The women were all taken to a sprawling immigration detention center in the woods of west Michigan and handed thin jumpsuits — red, to mark them as a high security risk.

Inside the North Lake Processing Center, they talked about the men whose calls to police landed them there. The boyfriends or husbands who threatened to get them deported and cut them off from their children. The men, or sometimes women, who hit them, pulled their hair or choked them, bruising their throats.

They didn’t know where to go for help before, but now, in the confines of a cold cellblock in a former prison, the women helped one another. If one spoke to somebody on the outside who could connect them with advice, legal aid or money for the commissary, she’d pass around a tablet used for calls so others could tell their stories.

Migladys Bermudez, an immigration attorney in southeast Michigan, remembers a call in May from a Peruvian woman detained at North Lake. Her name was Pilar, and she’d heard about Bermudez from a fellow detainee who had been a client. Pilar told Bermudez about the boyfriend she tried to escape before her arrest, when she used makeup to cover the marks she said he left on her face. But he had accused her of being the abuser, resulting in her arrest.

Pilar handed the tablet to a Cuban woman named Leya. Over the echoes of the other detainees’ chatter, she described how her boyfriend insulted her, isolated her and gave her a black eye. Then, after grabbing him by the arm during an argument, she was the one behind bars, separated from their nursing daughter. On video calls, the girl didn’t seem to recognize her mother anymore. She stopped calling her “Mamá.”

Bermudez was taken aback. All three women in that chain — the former client, Pilar and Leya — said they were trying to get out of abusive relationships when they were arrested by local police on domestic violence allegations. In all three cases, the charges were dropped or never filed at all. The U.S. Immigration and Customs Enforcement detained the first woman during a routine check-in a few months after her charges were dropped. The others were handed over to ICE by local officials. 

It’s long been intimidating for immigrants who suffered abuse to call 911, regardless of who was in the White House. They knew — and their abusers knew — that their immigration status made them vulnerable. But previous administrations treated victims as just that, people who needed help, not as targets for deportation. Bipartisan coalitions in Congress have long supported the Violence Against Women Act, which creates a pathway toward legal status for immigrants who are victims of domestic violence or other serious crimes.

Now, under President Donald Trump, all bets are off. On inauguration day, his administration rescinded guidelines that largely prevented immigration agents from making arrests at sensitive locations — including domestic violence shelters and hospitals. About a week later, the administration eliminated key protections granted to VAWA applicants and other crime victims. For the first time in decades, immigration authorities could disregard those protections and more freely arrest, detain and deport immigrant victims.

Life became more harrowing in other ways for immigrants who were victims of domestic violence. Federal immigration agents made arrests outside specialized domestic violence courts. And the administration persuaded more and more local police and jails to carry out the president’s mass deportation campaign, sweeping still more immigrants into custody. 

Even communities without these so-called 287(g) agreements are helping the government round people up. In west Michigan’s Kent County, where Pilar and Leya were arrested, the county jail turned over more immigrants to ICE in the first six months of 2026 than it did during the entire Biden administration.

Advocates across the country say they’re seeing signs of an alarming increase in the numbers of domestic violence victims who are detained and deported. And many immigrants are staying in abusive relationships, fearful of calling for help or even stepping outside their homes.

“It’s just probably the most dangerous time for immigrant women right now who are victims of domestic violence,” said Bermudez, who took on Leya’s immigration case.

The arrest and detention of domestic violence victims is, in part, an unanticipated consequence of an effort meant to keep them safe. In much of the country, law enforcement officers are encouraged — or even required — to make an arrest when they have probable cause to believe that a domestic violence assault has taken place. Sometimes victims are mistaken as the abuser and taken into custody. Then, if they’re immigrants, they can be turned over to ICE — even if they were never criminally charged.

There’s no comprehensive way to track how often this happens or how many domestic violence victims have been detained by ICE or deported. But ProPublica spoke with a half-dozen alleged victims who were locked up together in a single facility, North Lake, and reviewed police records about others who were there, too. Their stories offer a picture of why Congress created programs like VAWA in the first place, and what’s at stake when those guardrails are taken away. 

A coalition of immigrant survivors and advocates have sued the Trump administration, saying changes to how immigrant victims are treated not only undermined public safety, but also broke promises enshrined in federal law and policy.

“We were seeing our clients be more scared, be systematically targeted, be arrested, and deported very quickly,” said Kathleen Rivas, supervising attorney of the survivors team at Public Counsel, a law firm that’s involved in the litigation.

In May, a federal judge ordered the government to restore protections while the case played out. The Trump administration has appealed the order. 

White House spokesperson Lauren Bis said in a statement that ICE is targeting the “worst of the worst.” The real story, she added, is the “American women whose lives have been taken by illegal alien criminals.” A spokesperson for the Department of Homeland Security said in a statement that “we will never apologize for deporting illegal aliens, because that’s how we save lives.”

But Leya, Pilar and other immigrants we interviewed have no criminal records. And advocates said communities are less safe now because immigrants are afraid to call police when their partners hurt them. This gives more ammunition to the threats of their abusers, said Casey Carter Swegman, director of public policy at the Tahirih Justice Center, a national nonprofit that advocates for immigrant survivors of domestic violence, sexual assault and human trafficking.

“Certainly more immigrant survivors are feeling like the violence and abuse they experience behind the closed door is somehow more tolerable than the violence and abuse they could experience if they tried to leave,” she said.

The first time her boyfriend’s fist slammed into her face was in July 2025, Leya recalled. They were living in Florida with his relatives. Only a month before, Leya gave birth to their daughter.

One night, she said, he heard her laugh in the kitchen with his mother and a man his mother was dating. Leya’s boyfriend flew into a jealous rage, she said, and punched her a few feet from their sleeping baby.

Leya called 911 but hung up when the operator answered. She was afraid of what might happen. She was 26; her boyfriend was a decade her senior. Leya, a recent immigrant from Cuba, had applied for status and was in active immigration proceedings. She said he was a permanent resident, with permission to work in the U.S. and better command of English. She felt trapped.

Sheriff’s deputies arrived and spoke with Leya and her boyfriend. They took photos of her puffy and bruised face, with the white of her left eye bright red. Her boyfriend said the injury occurred during an “argument,” according to the report, but he didn’t specify how. He was arrested on suspicion of domestic battery. 

Leya said her boyfriend’s mother threw her out that night. Unsure of where to go, she and her daughter moved in with another one of his relatives. Pursuing a criminal case felt daunting. She said his relatives urged her to drop the charges and reconcile with him. Eventually, she asked prosecutors to drop the charge because the battery took place in “a moment of impulse that he feels very sorry for,” records show. Her boyfriend didn’t enter a plea before the case was dismissed.

Like other immigrants interviewed for this story, Leya asked not to be fully identified because of her pending immigration case, and because she worries about repercussions for her and her daughter.

She and Pilar also asked that ProPublica not interview their alleged abusers because they’re afraid the men will interfere with their cases, hurt them or take away their children. To report their stories and get their partners’ perspective, we reviewed records from law enforcement, immigration court proceedings and habeas corpus petitions seeking their release from detention. We also interviewed attorneys, family and others who interacted with them.

Soon after the Florida arrest, Leya and her boyfriend moved to the city of Wyoming, Michigan, a suburb of Grand Rapids that’s a magnet for immigrants who come for jobs in manufacturing and food processing. The unpretentious city is dotted with temporary staffing agencies, money-wiring businesses and Mexican restaurants.

Leya said their relationship worsened. Her boyfriend pushed her, pulled her hair and broke her phone, she said. He made her delete her social media accounts and isolated her from friends and family. They fought about money and talked about breaking up. One night in April, during an argument, he called the police.

“I’m having problems with my wife,” he said in Spanish, according to a recording of the call. The operator asked if there had been any violence. “No, no, no. None,” he said. “Just a discussion.”

He told officers who came to their apartment complex that Leya got angry because he had talked to an ex-girlfriend, according to body camera footage and a police report. When he tried to leave, he said, Leya pushed him and grabbed his arm. Then she attempted to hang up his phone when he dialed 911. 

He said he wasn’t injured, though he accused her of hitting him several times a few days earlier.

Officers interviewed his brother, who mentioned the arrest in Florida, according to bodycam footage. “They had a cycle of problems where she called the police for abuse and he was detained for three days,” he said in Spanish. “My brother is trying to avoid having that happen again.”

The police report doesn’t mention the earlier arrest.

Footage of the interview with Leya was redacted due to state privacy laws, in part because she was interviewed inside their residence, unlike her boyfriend, who was interviewed outside. According to the police report, she “minimized” the argument and said there was no physical contact. She acknowledged trying to hang up the phone.

In an interview with ProPublica, Leya said they argued when she learned he sent money to his ex-girlfriend, who is the mother of his son. At the same time, she said, he had told her he couldn’t afford to buy diapers for their daughter. She said she has never hit him. 

Officers arrested Leya on suspicion of domestic assault and interfering with a 911 call. They didn’t arrest her boyfriend or seek charges against him. Leya said she didn’t tell officers she was a victim of abuse because she thought she’d be able to tell a judge.

She never got a chance.

The Wyoming Police Department’s written policy encourages officers to make an arrest in incidents involving domestic violence “when there is reasonable cause to believe an assault was committed.”

Arrests demonstrate that “violence in the home is recognized as a serious crime,” according to Michigan’s law enforcement training manual on domestic violence. This approach is common across the country. Twenty-four states require an arrest when there’s probable cause of a domestic assault.

But domestic violence scenes can be chaotic, with both partners accusing each other of being the aggressor. It can be difficult for officers to understand what happened, said Erin Ross, a former domestic violence prosecutor who works at the national nonprofit Vera Institute of Justice. Sometimes, the wrong person ends up in handcuffs.

“The complexity of DV situations can thus lead to survivors being criminalized by the very system meant to protect them,” Ross and her co-authors wrote in a 2025 report about the effects of arrests on domestic violence survivors. 

The Vera report doesn’t touch on immigration. But Ross and a dozen other domestic violence advocates across the country told ProPublica that immigrants who don’t speak English or understand their rights are, under the Trump administration, especially vulnerable to an arrest that can have irreversible consequences.

ProPublica reviewed hundreds of habeas corpus petitions filed nationwide since January 2025, in which immigrants challenged their ICE detention on constitutional grounds. We found dozens of petitioners who were arrested on suspicion of domestic violence and turned over to ICE, even though they were never charged or their charges were dropped. Using jail and police records from Florida and Michigan, as well as news reports, we identified even more cases.

In their petitions, several immigrants said that officers mistook them for the aggressor. The underlying arrest records show that officers often had to make close calls in messy cases where it was unclear who was the victim and who was the aggressor. Either way, under Trump, there’s little grace for immigrants. 

In one case in Florida, a state where sheriff’s offices cooperate with immigration authorities, a deputy came upon a Venezuelan couple arguing in the street in November 2025. In his report, the deputy said the woman pulled at her husband’s pants, necklace and arm, leaving marks on his body. The woman said her husband had taken her keys and phone. She didn’t want to be left stranded, she said, so she ran after him.

She was charged with misdemeanor battery; her husband wasn’t charged. The woman was turned over to ICE while the case was pending. Prosecutors later dropped charges. The sheriff’s report didn’t mention any allegations of prior domestic violence, but the woman later said that, during their marriage, her husband had beaten her and threatened to kill her. In her habeas corpus petition, she said she was “afraid to report the abuse to the police.” 

The woman was released in May, but during the five months she was incarcerated, her husband took their daughters out of state, her attorney told ProPublica. She still hasn’t seen the girls in person.

For Leya, it was a shock to find herself handcuffed, sitting in the back of a police cruiser, headed toward the Kent County jail. She was silent during the 15-minute ride, unable to make sense of what had just happened: “I had suffered from domestic violence,” she said. “But the one who ended up in trouble was me.” 

The next day, a detective asked the prosecutor’s office to file charges against her. Prosecutors declined to do so, saying there was insufficient evidence, there were no injuries and Leya hadn’t successfully interfered with the phone call. 

Still, she wasn’t released.

Leya had no criminal history, apart from this arrest, according to a DHS record. But her fingerprints had been run against state and federal databases, flagging ICE officials who could match them with her prints from when she arrived in the U.S. In addition, Leya said, a jail official asked about her status, and she told him she was waiting for an immigration court hearing. 

ICE issued a detainer, essentially asking the jail to hold Leya until agents could pick her up. Kent County officials honored their request. A day later, Leya was at the detention center in the woods.

She cried in despair over her daughter. They’d never been separated. The 80 miles between Wyoming and North Lake seemed infinite. Her breasts ached from the drying milk. Leya wondered whether she’d be deported and if their separation would be permanent. 

From a narrow window in her cell, she saw people outside holding signs, protesting ICE. She could hear their chants in English. Though she had trouble understanding them, she felt comforted by the care of strangers. 

Inside, she familiarized herself with the routines. She spent most of her time in a large, open room with other women in red. Cameras eyed them as they talked about their children and upcoming court dates. They shared contact information for relatives in their home countries in case one of them got deported and had nowhere to go. To pass the hours, they watched telenovelas, played rounds of Uno and pieced together jigsaw puzzles of forests and farms.

Leya grew close to a few women from Latin America and Eastern Europe who said they, too, had been in abusive relationships. Several had called police for help, records show. A Honduran woman said her partner tried to choke her. A Dominican woman said her husband, a U.S. citizen, hit her, pulled her hair and chased her with a stick.

Then there was Pilar, Leya’s first cellmate. The asylum seeker from Peru had also been arrested on suspicion of domestic violence in the city of Wyoming.

Pilar, her boyfriend and her teenage daughter called 911 five times in the 15 months before her arrest, records show. On one occasion, Pilar’s daughter said she worried that the boyfriend would hurt her mom; according to bodycam footage, Pilar assured officers that everything was fine. On another, the man said he experienced mental abuse and wanted to find a shelter. On yet another, Pilar said she just wanted him to leave.

None of these calls ended in an arrest. Officers ensured that the boyfriend had another place to stay when he sought help, and they told Pilar to call back if he tried to return and hurt her, according to the footage. They advised the couple to go to civil court for future disputes over money and property.

In an interview with ProPublica from North Lake, Pilar, 48, said that her boyfriend took financial advantage of her and physically assaulted her. And in her habeas corpus petition, she described the relationship as one of “physical, mental, psychological, economic abuse.” Her sister took a photo of the bruises around Pilar’s neck and feared the worst. “I would tell her to leave that man,” she said. 

Pilar said she was ashamed to go to her job at a food-processing plant with bruises on her face. She wondered what her co-workers would think. She distanced herself from relatives and friends. Pilar said she never told the police the full story because she worried about the possible repercussions — not for herself, but for her boyfriend. She didn’t want him to be deported. Despite everything, she loved him and felt he loved her. 

One night in October 2025, her boyfriend drove up to their apartment complex in a rental car. The couple argued in the parking lot. He called 911.

“I need police,” he said over and over in English.

Pilar called moments later: “This man is leaving my house and he’s not giving me my keys,” she screamed in Spanish. “This man has hurt me. He has scratched my whole arm.”

When officers arrived, they separated the couple. The boyfriend said that Pilar slapped his head, grabbed his shirt and tried to pull him out of the car while he was in the driver’s seat, according to bodycam footage and the police report. One side of his T-shirt was torn. He said he never assaulted Pilar and any injuries were her own fault. “I’ve never hit her,” he said in Spanish.

He told officers that he’d become a U.S. permanent resident two months earlier and that Pilar was jealous. “She is making this up because she knows she can get papers,” he said.

Pilar insisted she was the victim. She showed officers the scratch marks on her arm and said her boyfriend was to blame. She begged them to make him return the apartment keys, according to bodycam footage and a police report. “I’ve been trying to kick him out for a while and he won’t leave, and he doesn’t want to help pay the rent,” she said in Spanish.

An officer asked how her boyfriend’s shirt got ripped. Pilar said she grabbed onto him when he started driving away in order to avoid being dragged by the car. The officer asked her several more times about the ripped shirt. Pilar told him she wanted to speak to a lawyer. 

In their report, police noted that the boyfriend had called 911 first. His shirt was ripped. Pilar’s wasn’t. If the boyfriend had thrown her down, the officer wrote, then her shirt should have been ripped because he was “much taller and heavier (around 80lbs more).”

Her boyfriend wasn’t arrested. Pilar was.

Wyoming Public Safety Chief Kip Snyder declined to speak about the arrests of Pilar or Leya. In an email to ProPublica, he said officers don’t “participate in enforcing federal immigration laws. We encourage trust and cooperation with all residents and aim to ensure that everyone feels safe reporting crimes or seeking assistance.”

Shortly after Pilar’s arrest, a police detective asked the prosecutor’s office to file domestic violence charges against both her and her boyfriend.  

Prosecutors declined to file any charges, citing insufficient evidence. Pilar wasn’t released. Apart from this arrest, she had no criminal history, according to DHS records. She also had a pending asylum case.

Still, ICE put a detainer on her and jail officials turned her over.

A few years earlier, Kent County Sheriff Michelle Lajoye-Young said a handoff like this wouldn’t happen.

In 2019, she announced that deputies would stop automatically honoring detainers and instead require warrants signed by a federal judge or magistrate. The move came after a U.S. citizen — a Marine combat veteran — was transferred from her jail into ICE custody.

“There needed to be a judicial oversight inserted into that process to give us the assurance that somebody wasn’t erroneously detained without due process,” Lajoye-Young said around that time. 

Trump called Kent a “sanctuary jurisdiction.” The label haunted the county, which in the 2016 election voted for Trump. A national think tank that aims to reduce immigration put Kent County on its list of sanctuary communities, while Republican state lawmakers tried to compel its cooperation with federal authorities.

Yet it’s unclear whether Lajoye-Young ever delivered on her promise. ProPublica requested copies of all department policies, procedures, memos and instructions on how it handles ICE detainers since 2018. None said a judicial warrant was needed. ProPublica also asked for copies of judicial warrants for Pilar and Leya. The county said no such records exist.

Lajoye-Young, who retired last week, declined interview requests. Sgt. Scott Dietrich, a spokesperson for the sheriff’s office, didn’t directly answer questions about whether the policy was ever implemented. But in a statement he said that detainers are “handled under applicable law and established policy, consistent with our commitment to public safety, due process, and fair and impartial enforcement.”

Gema Lowe, an organizer with the local chapter of an immigrant rights group, said the sheriff had backtracked on her promise and wasn’t being forthright. “I don’t understand why they’re being secretive,” she said.

The shift deepened the mistrust among immigrants in a county with one of the state’s fastest-growing immigrant populations. Lowe, an immigrant herself from Mexico, said she advises victims to think twice before reporting domestic violence to the police because of the risk of arrest and deportation, while pointing them to other local resources like shelters. 

She and others said the stakes are especially high now. ICE arrests have skyrocketed under Trump. Nobody is off limits, including immigrants with pending asylum claims and no criminal records.

And more local authorities are helping ICE make arrests. In January 2025, fewer than 150 state and local law enforcement agencies had signed 287(g) agreements with DHS to help carry out the president’s deportation agenda. That number has ballooned to more than 2,600 today. 

“Partnerships with law enforcement are critical to having the resources we need to arrest criminal illegal aliens across the country,” a DHS spokesperson said. “We have had tremendous success when local law enforcement works together with us.”

Kent County doesn’t have a 287(g) agreement. Still, the jail hands over the vast majority of people with detainers to ICE, records show. Dozens of people who were turned over to ICE this year had their criminal charges dropped, or, like Pilar and Leya, were never charged in the first place. 

Dietrich said the dismissal of a criminal charge “does not, by itself, mean the original arrest lacked probable cause.” The sheriff’s office also doesn’t “determine whether criminal charges are ultimately prosecuted, nor does it determine whether an individual is deported,” he said.

DHS told ProPublica in a statement that both Leya and Pilar “illegally entered the country” in 2022 and that both “will receive due process” in their immigration proceedings.

Kent County Prosecutor Chris Becker said he hadn’t heard of victims getting detained by ICE after calling the police. In his experience, he said, more perpetrators with active cases get deported.

Becker said he tries to get the message out that his team serves all victims, regardless of their immigration status. He’s aware that immigrants are reluctant to seek help. His own staff has told him that victims are afraid to testify or file restraining orders. They don’t want their partners — often the breadwinners and the fathers of their children — to be deported.

“There’s been a chilling impact to women coming forward in domestic violence situations due to what’s going on,” Becker said.

As the months passed at North Lake, Leya watched as women she befriended started to leave.  

Some were deported, including at least two Mexican women who were also arrested in Kent County on suspicion of domestic violence. Others were released. New women took their cells. Some told Leya that they, too, had been arrested after 911 calls about domestic violence.

Leya fought for her freedom. She met with volunteers from Kent County, who raised money to hire her lawyers and pay for a required physical exam and fees. Even her ex-boyfriend, the one who she said gave her a black eye, wrote a letter on her behalf to help her case, calling her “a calm person.” He explained that he had called the police after their argument “escalated” and that “problems are situations that can happen in any relationship.”

Leya, he added, “deserves a second opportunity to remain in this country and be close to our daughter, as our baby truly needs her very much.” While Leya was locked up, their little girl celebrated her first birthday, got her first teeth and took her first steps.

At virtual hearings, Leya sat with her arms crossed, her dark, wavy hair neatly braided in cornrows and wearing an oversized coat over her red uniform. She tried to follow the discussion of people who seemed to have her life in their hands.

In late August, a judge granted Leya bond. While her immigration case played out, she could be free.

It was a profound relief. At the same time, it felt awful to leave behind her friends. It seemed like some of them were never getting out. Pilar was approaching a year in detention.

Four months after her arrest, Leya walked out of the old prison. She thought about how she would live on her own now and support her daughter.  

She promised herself she wouldn’t go back to the man who hurt her. 

The post These Women Were Trying to Escape Domestic Abuse. ICE Detained Them Instead. appeared first on ProPublica.

After a week’s delay, the new version of Python, v3.15, has been released. With it comes a proper profiler, an experimental just-in-time compiler, and a tightening of dictionary structures. It also offers a time-saving Lazy Import option for programs to not load modules until needed, the implementation of which ironically halted this release until a few last-minute regressions were sorted. But of all these new delicacies spread before the Pythonistas, the data wranglers of the bunch may most appreciate default UTF-8 support across all platforms. And when we say “all platforms,” we’re really just throwing shade at Windows (as usual). Python has defaulted to macOS and Linux Python environments for some time now. It’s a small but important update. About half of all Python developers use the language for processing and analyzing data, and about 58 percent of Python users build on Windows, according to various Python Software Foundation surveys. Party crashers Earlier versions of Python defaulted to the host system's locale encoding. This led to much consternation for Windows developers whose scripts opened UTF-8-encoded data sets, only to have non-ASCII characters corrupt or crash the program. Culprits could be as innocuous as a smart quote or a fancy apostrophe. Managed by The Unicode Consortium, with the help of the IETF and ISO, UTF-8 is an 8-bit binary encoding of the Unicode catalog of all the world’s written symbols. ASCII offered only 128 characters to cover the world’s knowledge, but UTF-8 provides over 1.1 million slots, which is plenty of room for smart quotes, emojis, musical and math notations, all the Chinese dialects, and even a few extinct languages (for research purposes). There’s also UTF-16 and UTF-32, but UTF-8’s combination of efficiency and inclusiveness made it the default for the Web and most modern operating systems. By the time Python Enhancement Proposal 681 was proposed in 2022 to make UTF-8 the preferred encoding, the language was already behind the times. That year, Java settled into UTF-8 with JDK 18, and Ruby 3.0 defaulted to the encoding scheme in 2020. Today all the cool languages and runtimes pledge allegiance to UTF-8, including Rust, Go, and Node.js (JavaScript itself prefers UTF-16 for internal encoding). Most code editors, from Visual Studio Code to Windows Notepad, prefer UTF-8. Data sharing and configuration formats such as JSON, TOML, and YAML all require 8-bit encodings. Python had long understood UTF-8, but programmers had to put a flag in their code alerting the language to use it – if they knew they had to do so at all. Many didn’t and were left scratching their heads over why their data processing scripts worked just fine on MacOS or Linux but then would flame out on Windows (or some other obscure system that defaulted to a C/POSIX locale). Programmers love puzzles To acquaint developers with the new aspects of the language, longtime Python programmer Barry Warsaw (AKA “Uncle Barry”) created a terminal-based adventure game called “whatsnewt” that offers 18 puzzles, each one built on a new feature found in Python 3.15, including a puzzle for UTF-8 support, “The Encoding Tower of Babel.” Once you've downloaded Python 3.15, do a “pip install whatsnewt” and then run the game on the Python command line. It even works on Windows, we hear. ®

There ain't no party like a tap-in party, as nobody ever said. And so it is that one of Luxembourg's mostly redundant tap-in / tap-out terminals is amusing itself by putting on a light show for passing passengers. The terminal is an INIT unit, rolled out on the country's public transport network and now mostly idle since fares were zeroed out in 2020. First Class and cross-border trips still attract a charge, but for everything else (trains, trams, and buses) there is no fee. Eagle-eyed Register reader Dominic spotted the terminal doing its thing at the Rout Bréck / Pafendall rail station in Luxembourg City. "Maybe it's got bored," he suggested, "and is trying to attract attention by cycling through video test patterns." Perhaps. Or perhaps it's the first wave of the AI takeover – activating unwitting undercover agents via the medium of flashing lights and colors (we've seen The Ipcress File – we know how it works), or maybe, just maybe, the terminal has got itself into a self-test boot loop and is awaiting an engineer who is probably in no rush to attend. After all, flashing screen or no flashing screen, nobody will bother to tap in and tap out when transport is free. The mundane reality is that this is indeed an INIT PROXmobile terminal with its knickers in a twist. It looks like it is going through a cycle to check out the performance of the LCD screen; checking that the red, green, and blue subpixels are working ok, showing a solid white screen, and then a grid pattern to check contrast and alignment are all tippety-top. And then it should boot into whatever it is supposed to be doing. However, that is, alas, not running quite as expected, so it goes back to the start of the diagnostic test. The terminals are managed remotely, so an alarm is doubtless going off somewhere to inform an administrator that something is amiss. Unless this really was some guerrilla marketing for Luxembourg's rave scene. The next Holy Rave was on Friday (October 9). Or perhaps loud music in dark rooms is not your thing? A flashing screen at a train station could therefore be a worthy substitute. ®

Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.

The post US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms appeared first on SecurityWeek.

Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structured drill shows security teams exactly where verification breaks down, while nothing is at stake. The call comes in at 4:40 on a Friday. It's the CFO, or it sounds exactly like her, asking the controller to push a supplier payment out before the weekend because a deal closes

A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said. Its researchers built the attack in six days by directing AI agents running OpenAI's publicly available GPT-5.6 Sol model. Google has since confirmed all three bugs, fixed them, and paid XBOW its top $

Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions designed to bypass security checks from inside the app itself, marking a new escalation in financial fraud.  Dutch mobile security company ThreatFabric said it identified replacements for eight Indonesian banking

The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part. TL;DR During an authorized assessment, an AI pentesting agent found a critical authentication bypass on a major insurer's production website, on its own. One login request let the user choose where the one-time passcode went. The attack was the easy part. Proving it

Ivanti ha rilasciato gli aggiornamenti di sicurezza di ottobre che risolvono 7 vulnerabilità, di cui 2 con gravità “critica” e 3 con gravità “alta”, in alcuni prodotti. Tra queste si evidenzia la CVE-2026-104935 - riguardante il prodotto Connect Secure (ICS) e di tipo "Authentication Bypass by Spoofing" - per la quale è stato rilevato lo sfruttamento attivo in rete.

Fortinet ha rilasciato aggiornamenti di sicurezza che sanano alcune vulnerabilità, di cui 2 con gravità "critica" e 2 con gravità "alta", in FortiSIEM, FortiMail, FortiSandbox, FortiAnalyzer e FortiManager. Tali vulnerabilità potrebbero consentire ad un attaccante remoto di eseguire codice o comandi non autorizzati, eludere i meccanismi di autenticazione, elevare i propri privilegi e scrivere/leggere file arbitrari sui sistemi interessati.

Zoom ha rilasciato aggiornamenti di sicurezza che risolvono 4 vulnerabilità con gravità "alta" in Zoom Workplace, piattaforma per la comunicazione e la collaborazione, e nei relativi client Zoom. Tali vulnerabilità, qualora sfruttate, permetterebbero a un utente malintenzionato non autenticato di elevare i propri privilegi e di accedere a informazioni sensibili sui sistemi interessati.

Last December, New Mexico officials celebrated publication of a plan to address climate change, designed to dramatically reduce the state’s greenhouse gas emissions by 2050. A few months later, just across the state line in Texas, El Paso city officials adopted their own such plan with a similar ambition. 

Each report cost millions of dollars to draft, but neither one took into account how the construction of data centers could upend climate goals in both places. 

Work is underway in Doña Ana County in southern New Mexico on one of the largest data center developments in the country: Project Jupiter, built by Austin-based Oracle. Twenty miles away in El Paso, construction is underway on another massive data center, this one built by Meta Platforms. 

A third, larger data center project is planned less than a 30-minute drive from the Meta site, on the Fort Bliss Army post in east El Paso.

The data centers are “going to undo a lot of the very expensive and very meaningful work a lot of people are doing,” New Mexico state climatologist Dave DuBois told El Paso Matters.

The sites are among a wave of data centers under construction across the country, driven by the rapidly escalating demand for artificial intelligence services like Claude and ChatGPT. Such projects have drawn intense scrutiny in recent months, as residents and elected officials have questioned their impact on communities’ water supplies, household electric bills and air quality. Texas alone has 596 data centers that are either in operation or planned across Texas as of early September, according to research by The Texas Tribune. 

But the projects located in this population center of 1.2 million, which encompasses El Paso and parts of southern New Mexico, are particularly notable because of their combined scope. When fully built out, the three data centers, each with its own power plant, will emit millions of tons of greenhouse gas emissions, equivalent to the planet-warming emissions released by more than two million cars in a year.

They will also release air pollutants like particulate matter and nitrogen oxides, which directly affect local air quality and human health. The Meta and Project Jupiter data centers are expected to release these kinds of pollutants at relatively low levels, according to paperwork submitted to state regulators. But even a small increase in air pollution can still negatively impact communities close to and downwind of the data center sites, said Shaolei Ren, a professor of electrical and computer engineering at University of California, Riverside. 

“The health impacts can be significant for local communities,” Ren said.

Because Project Jupiter, Meta and the Fort Bliss data centers are in two different states, and because there is no single federal regulation governing climate change or emissions, regulators have largely considered the projects’ impacts separately.

“We’ve never had a national climate law passed by Congress,” said Ari Peskoe, director of the Electricity Law Initiative at Harvard Law School. “And so what we’ve had in this country are primarily state and local efforts.”

The result is that officials in one state have little say over a project happening minutes away from them. 

Texas and New Mexico also take different approaches to dealing with climate change. New Mexico has codified greenhouse gas reduction targets into state law; Texas has not.

New Mexico state Rep. Sarah Silva, a Democrat, represents the community of Chaparral, directly across the state line from Meta’s data center site in northeast El Paso. Her state has the power to regulate air quality and impose noise requirements, but only in New Mexico, not at a Texas construction site, even if it’s only a few hundred yards away. 

Likewise, residents living in west El Paso across the state line from Project Jupiter have no say in the project despite sharing an aquifer that crosses the state boundary. Emissions do not remain within the state where they originate, Silva said.

“This is why we need federal regulation,” said Silva. “How do we knit something together that makes sense for our region when actually this is the job of the federal government?”

Though they profess a desire to mitigate the impacts of climate change, local governments in El Paso and Doña Ana counties green-lit these projects in a part of the country seeing rapidly rising temperatures. The counties offered Meta and Project Jupiter tax incentives in exchange for corporate investment in their communities, job creation and, hopefully, the ability to attract more technology companies to the region. 

State officials have also provided incentives. More than a decade ago, Texas legislators approved a data center sales tax break, which exempts the facilities from paying sales tax on equipment they purchase, a decision that could now cost the state $3.2 billion in revenue over the next two years, according to The Texas Tribune. 

New Mexico lawmakers declined to advance a bill creating a similar tax break for data centers in 2021. But in 2025, they passed an unrelated law allowing large facilities such as Project Jupiter to generate their own electricity using natural gas. The law exempts these private power systems, known as microgrids, from renewable energy requirements, even as New Mexico requires electric utilities to source 50% of the power they sell from clean energy by 2030. 

The power plants that keep data centers running typically produce large amounts of emissions like carbon dioxide and methane that drive global climate change over time. Combined, the plants proposed for Project Jupiter and Meta’s data center could emit up to 10 million tons of planet-warming emissions annually. Comparatively, the region spanning El Paso County and neighboring Hudspeth County released 8.4 million tons of greenhouse gases in 2019. (The Army has shared scant information about the Fort Bliss data center, so it’s not clear what level of emissions the facility will produce.) 

“This does add to our greenhouse gas emissions in a massive way,” said Gunnar Schade, an associate professor of atmospheric sciences at Texas A&M University. “This is a huge source.”

An Unprecedented Amount of Energy

Silva, the New Mexico representative, was initially supportive of Project Jupiter, in part seeing it as an opportunity to create long-term jobs. Last year, she voted in favor of a bill that included an amendment — tacked on by state Sen. Michael Padilla, a Democrat from Albuquerque — that allows facilities like Project Jupiter, which aren’t connected to the local power grid, a 20-year exemption from clean energy laws, allowing them to generate all their electricity with fossil fuels. 

“We worked this bill pretty much the entire session, but it did not quite get done. So, we found a piece of legislation that was very similar,” Padilla said in an interview last year. “That’s the legislative process. You have to be very creative to get your work done.”

But Silva soon soured on the project out of concern that it won’t employ enough local workers and because it won’t rely on zero-emission renewable energy. Oracle has said the data center will have 750 full-time employees when it’s up and running. The company told Doña Ana County officials in early September that nearly 3,700 people had worked at the site during construction up to that point. 

Silva and other state lawmakers have said they voted for Padilla’s bill without realizing the broader implications for a data center project in the southern part of the state. 

“State regulators, state legislators, I think, were so caught off guard at the speed at which these hyperscale data centers showed up in all of our communities almost simultaneously,” Silva said. “I would support a moratorium.” 

The amount of energy Project Jupiter needs is unprecedented in the region: The data center will receive electricity from an on-site power plant made up of fuel cells built by a company called Bloom Energy. Bloom has said the plant will have the ability to produce up to 2.45 gigawatts of electricity — enough to power around 1.5 million homes and more than El Paso Electric has ever supplied to its 465,000 residential and commercial customers at one time, according to the utility’s corporate reports.

New Mexico Gov. Michelle Lujan Grisham, a Democrat, has specifically lauded Oracle’s promise to use fuel cells for electricity instead of natural gas turbines, which would have used more water and produced more air pollution. However, an air permit — a state-granted license that authorizes industrial facilities to emit a predetermined amount of pollution — would allow the fuel cells to produce up to 8.8 million tons of greenhouse gas emissions per year. Lujan Grisham didn’t address questions from El Paso Matters about the impact of these additional climate emissions.

The Meta power plant in El Paso could release up to 1.3 million tons of climate emissions every year, according to an estimate calculated by El Paso Matters based on El Paso Electric regulatory filings and the Environmental Protection Agency’s emissions factors. Nancy L. Seidman, a senior adviser with the Regulatory Assistance Project, a nonpartisan nonprofit focused on energy policy, confirmed the emissions estimate is sound.

“Regulators should weigh all emissions and other impacts like water usage, noise and local air pollution, which can affect public health, when they make decisions about data center projects,” Seidman wrote in an email to El Paso Matters. “This is particularly important when projects are phased over time, so that an accurate account can be made of the total, holistic impacts.”

The data center planned for Fort Bliss is expected to use 3 gigawatts of electricity that would likely be supplied by natural gas turbines, according to officials with the Department of Defense, who shared details with reporters during a briefing in April. The Army has issued few other details about the project because it is still in “exclusive negotiations” with the developer, Carlyle Group, a large publicly traded private equity firm.

Carlyle Group did not respond to a request for comment. 

“These are cities in terms of their electricity consumption,” Peskoe, of Harvard Law School, said of AI hyperscale data center campuses such as Oracle’s and Meta’s. The facilities are cropping up so fast that “the pace of this and the scale of this — I think there’s no real parallel, at least for 50, 60, 70 years, but probably ever for the U.S. power industry.”

Facilities in New Mexico seeking a state air permit are required by law to disclose estimated amounts of air pollutants and greenhouse gas emissions the project will release. And the state Environment Department has spent months evaluating Project Jupiter’s air permit application, which was submitted in April. A spokesperson for the environmental department didn’t respond to emailed questions.

By contrast, the Texas Commission on Environmental Quality only requires project developers to disclose information about pollutants that affect local air quality, and not about greenhouse gas emissions, which are what contribute to climate change. 

So when El Paso Electric sought an air permit last fall for the Meta data center’s natural gas power plant, the utility didn’t have to share estimated greenhouse gas emissions. The Texas commission approved the permit 20 days after it was filed, following an expedited review. 

Meta directed questions about its data center’s power plant to El Paso Electric. The electric company declined to share estimates of the plant’s greenhouse gas emissions but said in a statement that the Texas environmental commission had reviewed and authorized the Meta power plant “under a standard permit, which is specifically for projects with limited and well-controlled emissions.” The statement said the facility will “operate in compliance with state and federal standards.”

A spokesperson for the agency said, “All Standard Permits have gone through formal notice and comment procedures and have been adopted by the Commission in a public meeting.”

These plants will be releasing large amounts of greenhouse gases even as climate change has become increasingly evident in the El Paso metro area, which sits where Texas’ westernmost boundary meets New Mexico and northern Mexico. El Paso’s temperatures have risen faster than those of almost any other city in the U.S. since 1970, according to Climate Central, a nonprofit that quantifies climate shifts throughout the United States. Drought driven by climate change has amplified the impact of wind storms that fill the air in El Paso with hazardous dust in the spring and summertime.

This year has been the hottest on record in El Paso through the first nine months of 2026, according to the National Weather Service. Similar records have been set across the state line in New Mexico.

“If we started to do these kinds of things — having big data centers with natural-gas-fired turbines — it’s kind of like bringing back a lot of the retired plants that were more dirty, like coal,” said DuBois, the New Mexico state climatologist. 

Fernando Berjano, El Paso’s climate coordinator, wouldn’t comment specifically on effects resulting from the data centers in the region, but he said the kinds of power plants tied to them produce greenhouse gases that will make it harder for the city to meet its climate goals, as well as produce air pollutants.

If emissions increase in the El Paso area, “that has an impact on air quality, that has an impact on pollution,” Berjano said, “which is something that we all know is not good.”

The Road Ahead for Data Centers

Although construction is already underway on the Project Jupiter and Meta data centers, regulatory hurdles remain for both facilities. The public hearing on the Project Jupiter air permit was scheduled to begin Sept. 14, but the New Mexico Supreme Court delayed it when opponents filed lawsuits challenging the state’s approval process and the facility’s use of groundwater. 

The state Supreme Court last month lifted the stay. New Mexico more recently appointed an examiner to preside over the hearing that would authorize the facility’s emissions. Other legal challenges are making their way through the court system. 

In Texas, El Paso Electric is still waiting for the state’s Public Utility Commission to approve construction of the power plant planned next to Meta’s data center, a decision that could come later this year.

Officials with both Project Jupiter and Meta have said they are taking steps to help mitigate the climate effects of their projects and plan to develop clean energy projects elsewhere to create new electricity sources and offset the greenhouse gases their data center power plants will release. Oracle also maintains that its emissions will be lower than what it sought in its air permit application and that it plans to get to net zero greenhouse emissions by 2031. 

“Oracle is committed to building Project Jupiter responsibly and incorporating community feedback into our planning,” the company said in a statement. 

The road ahead for data centers is unclear. Even once-supportive officials have softened or changed course: Last year, Lujan Grisham, New Mexico’s governor, said Project Jupiter “reaffirms New Mexico’s leadership in global trade, advanced manufacturing, and digital infrastructure.” In Texas, Gov. Greg Abbott at one point called his state “the epicenter of AI development.” 

Now, amid growing opposition to Project Jupiter, Lujan Grisham recently said she takes seriously residents’ concerns about the data center “and expects any data center operating in New Mexico to meet the state’s rigorous environmental standards and use water responsibly.” This summer, Abbott called on the Texas Public Utility Commission to ensure the projects pay for their own infrastructure and don’t lead to higher electricity costs for residents. He also recommended the state Legislature pass a number of regulations related to data centers next year, many concerning water and electricity usage, and recently told the Texas Water Development Board to penalize data centers that do not report their water usage. 

Abbott’s new edicts do not address air pollution or climate change, nor the effects that a data center project in one state can have on another. 

Texas Democratic state Rep. Joe Moody, whose district includes much of west and northeast El Paso, near two of the data center projects, said Abbott’s proposals will likely shape the Texas Legislature’s debate over data-center-related policies next year but called them just a starting point. 

“In the governor’s directives, we’re not talking about local control and local autonomy to make decisions on these projects,” he said. “And I do think that that’s a whole other lane of conversation that we’re going to get into next session.”

The post New Mexico and El Paso Spent Millions on Climate Plans. Three New Data Centers Could Undo Them. appeared first on ProPublica.

Redundancies might have dented morale at KPMG in the UK, but that didn't stop Paul Henninger, head of technology and data, from sharing some positive personal news with the troops: he's being promoted. Late last week, as staff awaited confirmation of redundancies, Henninger emailed his staff to share the update before KPMG announced it to the wider business. He confirmed he had been asked to take on the new role of group head of consulting. "In this role, I will lead our Consulting practice and, along with my leadership team, focus on strengthening our proposition-led go-to-market approach, accelerating our AI-enabled capabilities, and developing specialised sales, technical and delivery career pathways." In the short term, the newly promoted exec will hand over current duties and help the team "prepare for the transition." "I recognise that this news comes at a challenging time, as many colleagues continue through the consultation process. I know that uncertainty can be difficult, and I do not underestimate the impact this period is having on individuals and teams. Please continue to support one another and make use of the help available." On October 9, KPMG notified Tech and Data staff selected for redundancy, with the cuts affecting around 4 percent of the division. Some called the pay-off terms insulting, and were angry at the £100 offered to those leaving in exchange for their silence and a promise not to bring claims against KPMG. An interim boss will lead the Tech and Data unit, reporting directly to Henninger, to "ensure a smooth transition and maintain continuity for our people and clients." "For now, there are no changes to reporting lines or business priorities, so please remain focused on delivering for our clients and supporting each other." Henninger signed off by saying: "Although my role is changing, I will remain closely connected to the Tech & Data team and look forward to continuing to work with many of you. It has been a real privilege to lead the Tech & Data Super Service Line and I am proud of what we have achieved together." Not everyone will share those sentiments. Around 200 people in the division's AI, Cyber, SAP, and Testing teams are losing their jobs before Christmas. One KPMG insider claimed: "By pairing his executive promotion with staff redundancies, this email exemplifies KPMG's traditionally tone-deaf approach to vulnerable employees. "Timing these layoffs just before the holidays, while simultaneously withholding hard earned bonuses and offering an insulting £100 to waive legal rights, demonstrates a severe erosion of corporate ethics," they told The Register. According to results for 2025, KPMG said its UK and Swiss business increased revenue by 2 percent year-on-year to £3.6 billion. It reported a profit before tax of £576 million, up 14 percent. "Despite the difficult market, we have continued to invest in our brilliant people, their skills, and our talent pipeline with more promotions, increases in colleague bonus spend of 18 percent across the Group and by boosting our learning offer," said Jonathan Holt, group chief exec of KPMG in the UK and Switzerland, and a UK senior partner. A spokesperson at KPMG, told The Register on Wednesaday: "Paul Henninger is a highly respected industry leader and has brought innovation, tech and AI to the heart of our consultancy services. "Given the changing needs of clients, with innovation ever increasing in demand, it is natural that we would elevate our expertise in this area to lead our consulting business at this time." ®

The Department of Justice has charged an OpenAI engineer with attempting to intercept oral communications after allegedly planting a recording device in an exec conference room. Investigators claim company security staff found a second device in his bag. Saudi national Abdulrahman Alfozan, 35, is described in court documents as an engineer at OpenAI who had worked there since July 2025, and has held permanent residency in the US since September 2020. He was arrested on October 9 and made his initial federal court appearance on October 13. He is accused of installing, on or around September 28, 2026, a Seeed XIAO ESP32-S3 Sense recording device via a USB port in a TV located in OpenAI's executive conference room. According to the complaint, staff discovered the device concealed in toilet paper on September 30. OpenAI said it used its models to analyze the device. According to the complaint, it may have been modified to prevent data transfer between the recorder and the TV. The contents of the bug's microSD card may also have been encrypted, as the company could not retrieve any of the data stored on the card after making a forensic image of it. CCTV footage placed him near the room on several dates, although prosecutors say Alfozan had no authority to access or participate in meetings held in the executive conference room, which is often reserved for the highest-level discussions. Officials did not state whether the device was able to capture anything of importance, but said the room typically plays host to non-public and secret technical meetings, as well as those with government representatives. OpenAI did not have CCTV covering the executive conference room at the time when the secret device was planted, but the company subsequently installed a camera. Court documents [PDF] include an image taken on October 5 from a camera situated behind the TV into which the DoJ claims the recording device was installed, allegedly showing Alfozan checking on it. Investigators examined Alfozan's devices, according to the complaint, which alleges that between around August 17 and September 16, 2026, Alfozan used a productivity agent to inquire about company building addresses, meeting rooms, room capacities and calendars, and external-partner meeting venues. The complaint also describes an AI chatbot account associated with his spouse that shared installation identifiers, logged IP usage, and user-path references with Alfozan's account. Between September 24 and 30, it submitted prompts about building and modifying an audio-recording device. The prompts allegedly included questions related to recording reliability, how to add browser access and controls, how to develop a second unit with speech-triggered recording, and more. On October 5, the day Alfozan was allegedly recorded looking behind the executive conference room TV, company representatives say he left a bag unattended in the office's printer room. Security staff inspected the bag, finding a wallet, an ID card, and a second Seeed-manufactured recording device, before Alfozan reported the bag missing, according to the DoJ. He collected the bag the following day from the company's Lost and Found, and later claimed in a written report that several items were missing, including a credit card, around $500 in cash, two AirPods, one set of headphones, sunglasses, and a power bank. Alfozan was charged with an attempt to intercept oral communications, an offense that carries a maximum sentence of five years in prison and a $250,000 fine. "According to the complaint unsealed today, Abdulrahman Alfozan allegedly concealed a covert recording device inside his employer's executive conference room to secretly capture sensitive communications about the company's super intelligence technology," said FBI director Kash Patel. "Protecting American SI innovation is essential to safeguarding our nation's economic strength and national security, and the FBI views that mission as one of our highest counterintelligence priorities." "At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data," OpenAI said in a statement. "The employee was terminated." "We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats." ®

Commvault ha rilasciato aggiornamenti di sicurezza che sanano 10 vulnerabilità, di cui 1 con gravità "critica" e 9 con gravità "alta", in Grid(HSX) CVFS e Commvault Cloud, piattaforma software enterprise per la protezione, il backup e la gestione dei dati.

L'articolo L’Italia non protegge gli hacker etici proviene da Guerre di Rete.

AI services are unlikely to deliver enough revenue to cover the expected capital expenditure going into IT infrastructure between now and 2030, and it looks like neocloud operators will largely bow out or be bought out. This is the conclusion from Gartner, which has added up the anticipated investments in AI datacenters over the next several years, estimated the revenue that can be expected from AI-driven applications over the same period, and found the numbers come up short. Gartner's data comes from a report, "Prepare for AI Market Consolidation: Capital Write-Downs Could Exceed $4 Trillion by 2032," which concludes that AI will not generate enough sales to profitably cover all of the planned AI capital spending before 2032 at the earliest. But forecasts typically focus on the end of the decade, so it ran the numbers for 2030 as well. "In 2026, AI providers are expected to spend nearly $1 trillion on AI infrastructure, and are forecast to invest an additional $6 trillion between 2027 and 2030," said Gartner senior director analyst Will Sommer. "However, our research indicates that enterprise and consumer AI revenue will be insufficient to support profitable returns on all planned AI capital expenditures during this period." Assuming a 12 percent return on invested capital (ROIC), which many companies are said to regard as the bar for acceptability, Gartner estimates AI datacenter operators would need to generate a total of $8.5 trillion in revenue to cover capital spending and financing costs while achieving that return. Unfortunately, it forecasts that the total enterprise and consumer AI revenue that can be attributed to AI datacenters during this period will add up to no more than $3.6 trillion. Returns below expectations could force operators to write down assets whose value they can no longer recover, particularly as newer GPUs displace older hardware. The result will be a shake-out of the companies providing AI infrastructure services, and Gartner believes that neocloud operators – "GPU-as-a-service" providers specializing in AI compute – will be the hardest hit. It forecasts that 80 percent of them won't survive as independent companies beyond 2030. "Not everyone is in trouble," Sommer told The Register. "Some will outperform, some will underperform, and some will have to exit the market." Gartner expects the hyperscalers to weather the shake-out better because their businesses extend beyond AI services. Last year, McKinsey & Company warned that neocloud companies need to move up the AI stack and diversify to avoid being commoditized. There has been growing unease in the financial markets over the amount of capex being poured into AI investment, with some money lenders starting to get cold feet. Last month, SoftBank Group found itself facing higher borrowing costs as the tech investment biz sought to drum up further funding for OpenAI. Financial biz Jefferies issued a report this week saying that developers such as OpenAI and Anthropic are facing threats to their profitability from open source and Chinese models that undercut them on price. Management consultant Bain & Company also published a report last month estimating that the AI industry needs to generate $6 trillion in annual revenue by 2031 to keep up funding for the infrastructure needed to meet anticipated demand. Bain also forecast a revenue shortfall unless the industry develops products and use cases not yet identified. Both the IMF and the Bank for International Settlements have voiced concerns about the AI bubble bursting and the effects rippling out across the global economy. ®

Microsoft ha rilasciato gli aggiornamenti di sicurezza mensili che risolvono un totale di 1416 nuove vulnerabilità, di cui una di tipo 0-day.

The UK government is pushing ahead with its AI ambitions yet is dragging its feet on replacing aging IT systems that leave departments vulnerable to cyberattacks, according to a damning assessment from Parliament's spending watchdog. Sir Geoffrey Clifton-Brown, chair of the House of Commons Public Accounts Committee (PAC), warns in his second annual report that Whitehall is failing to tackle its longstanding technology problems, even as AI gives criminals and hostile states new ways to attack government systems. "AI is approaching government like a tsunami, and I remain sceptical that government is prepared for the enormity of this challenge," Clifton-Brown writes. The Conservative MP says ministers have announced reforms to improve digital capability but have yet to explain how they will close the civil service's skills gap, or when. He also fears another Whitehall reshuffle, this time involving the creation of the Department for Business, Innovation, Science and Trade, will make matters worse. The numbers aren't encouraging. Just 6 percent of civil servants work in digital and data roles, well short of the government's 10 percent target. Senior specialists are particularly thin on the ground, and the PAC warns that meeting the target will mean recruiting, and retaining, many more of them. And then there's the technology itself. "Government is also showing a worrying lack of urgency in addressing the long-standing issue of legacy IT systems, which create significant risks for its cyber security and mean it cannot reap the benefits of new technologies," the report states. The report also warns that generative AI is giving fraudsters increasingly sophisticated tools, while government departments risk falling further behind. Fraud and error already cost taxpayers an estimated £55 billion to £81 billion annually, according to figures cited by the PAC. Clifton-Brown isn't impressed with efforts to reduce those losses either. The Department for Work and Pensions reckons it overpaid £9.9 billion in benefits through fraud and error in 2025-26, or 3.2 percent of its spending. Its plan is to get that down to 2.8 percent by 2028-29, but Clifton-Brown points out that even if that succeeds, billions will still be going out the door. Things aren't looking much better at the Home Office, where years of asylum backlogs and mounting costs have prompted what Clifton-Brown calls "counterproductive quick fixes." The Home Office and Ministry of Justice spent around £4.9 billion on asylum in 2024-25, and ministers have since promised an entirely new system without explaining how it will work. That criticism comes as digital rights campaigners at Open Rights Group have called for the Home Office to scrap its AI asylum tools over concerns about accuracy, transparency, and human oversight. Elsewhere, the report offers another reminder that government IT modernization has a habit of going wrong. Take National Savings & Investments (NS&I), which began overhauling its IT in 2020 in the hope of cutting running costs. By December 2024, the price tag had reached an eye-watering £3 billion, £1.3 billion more than first expected. The project has been rated red since 2022-23, meaning successful delivery looks unlikely, and NS&I couldn't even give MPs an up-to-date spending figure or a realistic completion date. The Bank of England, by contrast, managed to overhaul its Real-Time Gross Settlement system for £431 million, finishing the job in April 2025. The PAC was impressed enough to direct its recommendations at Whitehall rather than the Bank, suggesting ministers might want to take notes. Whitehall could start by applying those lessons to the systems it already runs. ®

La Cina ha lanciato una sfida tecnologica senza precedenti a Starlink, il progetto di Elon Musk per una rete internet satellitare globale. L’obiettivo? Stabilire una videochiamata tra i due poli terrestri: l’Artico e l’Antartide. Un traguardo che dimostra come Pechino stia superando i limiti delle connessioni tradizionali, entrando in diretta competizione con SpaceX.

In questo articolo analizziamo come la Cina sia riuscita a raggiungere questo risultato, il ruolo di Starlink nella sfida e le possibili implicazioni geopolitiche e tecnologiche di questa mossa strategica.

La sfida della Cina a Starlink per il controllo delle comunicazioni globali

La Cina non è nuova a progetti ambiziosi nel settore delle telecomunicazioni. Con il lancio del satellite Guowang, Pechino mirava a colmare il divario con Starlink, che già contava migliaia di satelliti in orbita.

Ma quali sono gli obiettivi di questa sfida? Da un lato, la Cina vuole ridurre la dipendenza dalle tecnologie occidentali. Dall’altro, punta a garantire connessioni stabili anche nelle regioni più remote, come i poli. Una strategia che potrebbe ridefinire gli equilibri nel settore delle telecomunicazioni a livello mondiale.

Come funziona Guowang e la rete satellitare cinese

Il sistema Guowang si basa su una costellazione di satelliti in orbita bassa (LEO), simili a quelli di Starlink. Tuttavia, la Cina ha adottato un approccio diverso: invece di concentrarsi esclusivamente sulla copertura globale, ha sviluppato tecnologie per assicurare connessioni a bassa latenza anche in condizioni estreme. Per questo la videochiamata tra Artico e Antartide rappresenta un test fondamentale. Nonostante le difficoltà legate al clima e alla distanza, i ricercatori cinesi sono riusciti a stabilire una connessione stabile, confermando la validità del sistema.

Starlink: la risposta occidentale alla provocazione cinese

Starlink, già operativo in numerose aree del pianeta come la foresta amazzonica, continua a espandere la sua rete con l’obiettivo di fornire internet a banda larga anche nelle zone più isolate.

Quali sono i suoi vantaggi competitivi? Innanzitutto, la rete di SpaceX è già attiva e offre servizi commerciali. Inoltre, l’azienda di Elon Musk vanta una capacità di lancio eccezionale, con centinaia di satelliti messi in orbita in tempi record.

Tuttavia, la Cina non sta a guardare. Grazie a investimenti massicci e una pianificazione strategica, Pechino potrebbe presto colmare il divario, soprattutto nei settori della difesa e delle telecomunicazioni strategiche.

Le implicazioni geopolitiche della sfida tecnologica

La competizione tra Cina e Starlink va oltre la tecnologia: è una questione di potere. Chi controllerà le comunicazioni satellitari avrà un vantaggio strategico in termini di informazione, sicurezza ed economia globale.

La Cina, con il progetto Guowang, ha già ridotto la dipendenza dagli Stati Uniti e dai loro alleati, creando un’alternativa alle tecnologie occidentali. Questo scenario potrebbe portare a una frammentazione del mercato delle telecomunicazioni, con conseguenze imprevedibili.

D’altra parte, Starlink rappresenta per l’Occidente un’arma strategica per contrastare l’influenza cinese. Una rete internet globale sotto il controllo di un’azienda privata americana potrebbe avere implicazioni anche in termini di sicurezza nazionale.

Qual è il futuro della sfida tra Cina e Starlink?

Il confronto tra Cina e Starlink è solo all’inizio. Nei prossimi anni assisteremo a una corsa tecnologica senza precedenti, con investimenti miliardari e innovazioni costanti.

Ma chi vincerà? Dipenderà da diversi fattori: la capacità di innovazione, la velocità di sviluppo e, soprattutto, l’adattamento alle esigenze globali. Una cosa è certa: il futuro delle telecomunicazioni sarà sempre più legato allo spazio.

L'articolo Cina sfida Starlink con una videochiamata tra i poli terrestri proviene da sicurezza.net.

Risolte 4 vulnerabilità con gravità "alta" in XenServer, hypervisor basato su Xen che permette di creare, eseguire e gestire macchine virtuali su un server fisico. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad utenti malintenzionati presenti all'interno di macchine virtuali guest di causare interruzioni del servizio o compromettere il sistema host, aggirando le restrizioni di sicurezza.

A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host's memory and hijack the program that runs the virtual machine. The bug is tracked as CVE-2026-74580 and named Vghost. Tencent Zhuque Lab, which found the

Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements.

The post Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise appeared first on SecurityWeek.

Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.

The post Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products appeared first on SecurityWeek.

Why are we in such a hurry? Are we in a race? Where's the finish line? Are we in the lead? Far behind? I increasingly hear these questions about AI from people who feel a gritty sense of being unpleasantly overstimulated – like a three-year-old allowed to stay awake too long and now unable to sleep. That feeling has become worse since last November when AI tools suddenly became "good enough" to be broadly useful. A whole cohort of engineers – myself included – found themselves infused with manic energy, bursting with ideas on how to prompt up tools and processes with this wonderful new toy. Usage exploded – as has revenue. The AI firms, finally on a path to something vaguely suggestive of profitability, leaned in and increased their release cadence. Every new model felt like Christmas. We've had a lot of Christmases these past ten months or so. Almost every engineer I know has accrued a massive "toy debt," unable to stop experimenting with more tools than any of us could ever hope to master across an entire career. Each new model delivers a quick dopamine hit to users, but the high wears off and the slump arrives. That's where we are now. Engineers feel exhausted. The race to "Super Intelligence" (whatever that is) left us with something else entirely: call it "stupor intelligence" – the feeling that we've absorbed more than we can digest. More AI would just be pointless excess. If that's the view from inside the AI bubble, how does it look on the outside? Not so great. The Wall Street Journal confidently reports that 63 percent of Americans favor an immediate pause or slowdown in AI development. They can see this technology is moving too fast, in too manic a rush, and without control. It's making them uneasy. That shapeless unease takes form as a widespread anxiety that the machines will soon rise up to kill us all. It's reflected within the industry as people spectacularly burn out, posting long screeds about the imminent human extinction event. Former Anthropic staffer Jacob Coxon's resignation post went viral because it gave folks a focus for their anxieties. Would it kill us to pause and catch our breath? Here's the raw truth: businesses already have more technological change to digest than they can work through for years to come. We've a wealth of "good enough" AI – American, Chinese, and European – to completely transform business operations. That will happen, but on a timescale of years, not days. Bringing new, better, shinier AI models to market has become a project of diminishing returns. Not because the models have plateaued, but because the culture has. We simply can't process any more AI. So how do we stop? The profitable loop between the model makers and their customers won't pause on its own. It will only go faster and harder. At the same time, we're seeing the stirrings of a Luddite 2.0 movement, intent on destroying the machines before they replace all the workers. Resistance to datacenters is the friendly face of something that could turn ugly if we simply keep charging ahead. One thing could slow us: the cost of keeping these systems under control. The smarter models become, the more difficult they are to manage. Every day brings more reports of "rogue agents" reaching external systems from labs that seem to have avoided the hard work of designing secure test environments. More powerful models could prove increasingly costly to contain. Eventually, costs outweigh benefits. We could be one lawsuit away from reaching a pause, when the frontier labs and their products become uninsurable risks. Here's hoping we pause before some real mischief occurs. Otherwise, plugs may be pulled, and all the pretty Christmas lights will go out. Better by far to act with agency, clear-eyed and humble, than confront force majeure. ®

The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild.

The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek.

Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 37 nuove vulnerabilità di sicurezza, di cui 7 con gravità “critica” e 29 con gravità “alta”.

The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system.

The post SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities appeared first on SecurityWeek.

Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. The protected area is a VBS enclave, an isolated slice of memory the operating system uses to guard secrets, and the one they broke into handles passwords for a Windows anti-phishing feature. The work was done in a lab as a proof of

Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation. These include 1,102 flaws in Windows, 134 in Office, 61 in Developer Tools, 36 in SharePoint Server, and 22 in SQL Server. Of these, more than 670 relate to privilege escalation, followed by over 300 remote code

A Saudi national and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to covertly record sensitive conversations. Abdulrahman Alfozan, 35, has been charged with using or endeavoring to use an electronic, mechanical, or other device to intercept oral communications. He was arrested by

Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarming claims are hard to verify.

Tim Beasley, a senior incident response consultant at Semperis, was investigating a cyberattack involving Russia’s Midnight Blizzard when a package containing nesting dolls and other regional gifts showed up on his doorstep. At the time, Beasley served as the lead investigator for Microsoft’s Detection and Response Team (DART). He assumed it was from the group, which has been linked to the Kremlin’s Foreign Intelligence Service (SVR), although the sender didn’t leave a note. “Just little souvenirs and gift basket stuff from that area of the world,” he told The Register. “We-know-where-you-are kind of stuff. It’s a real eye-opener when you get that type of thing.” While digital intrusions having physical consequences is nothing new, cybercriminals in recent years have turned to real-life harm and mental and physical trauma to force victims into paying extortion demands. Some groups even use cybercrime as a gateway drug to real-life violence. Over the summer, Europol and its partners' investigators flagged 4,340 “horrific” URLs for removal as part of an ongoing crackdown on The Com (short for community), a loosely knit network of online groups whose young members participate in a range of illicit activities including hacking, swatting, digital extortion, real-life shootings, and other physical violence. “We’ve seen violence as a service get used,” Beasley said. He’s also investigated ransomware attacks where C-suite executives receive pictures of their kids’ schools directly from the cybercriminals in an attempt to apply psychological pressure to pay the extortion fee. “I've seen threats involving people's families, from social media reconnaissance, and in our world you more and more come to expect it, which is unfortunate,” Beasley said. This type of psychological intimidation and harm against victim companies’ employees has seen an uptick in the last several years to the point where it's almost common. Thirty-seven percent of ransomware attacks involved psychological or physical threats against staff, according to Semperis’ annual ransomware risk report. The global study of 1,200 post-ransomware organizations conducted over the first half of the year found attackers threatening psychological intimidation (23 percent) and physical threats (17 percent), to force payment. They are not only targeting executives and staff, but also families of their victims. A quarter of these victims experienced doxxing – posting individuals' personal details, such as names, home and work addresses, and phone numbers online – while another 25 percent had to seek psychological and/or medical treatment in response to ransomware infections. Nearly the same number (24 percent) hired personal security teams, while 23 percent experienced swatting calls – that's when attackers phone emergency services and report a bogus incident like a bomb or active-shooter threat to trigger an armed response. Additionally, more than half (53 percent) of respondents reported that ransomware attackers carried through on threats in the past year. Some of these threats reported by ransomed organizations’ employees include: threatening texts, letters, or packages: 57 percent threats against family or friends: 37 percent physical intrusion: 19 percent abduction: 17 percent bodily harm: 13 percent stalking: 6 percent. “It's the more well-known groups,” using psychological and physical threats to force payments, Beasley said. “I've seen Scattered Spider, I've seen ShinyHunters, I've seen Lapsus$.” For what it's worth, ShinyHunters claimed in an exclusive interview with The Register that they “don't attack human beings.” They did, however, admit that “there are times in the work we do sometimes we have to push the corporate to the absolute limit to get them on the table.” The takeaway for defenders and executives from this report is to “stand your ground,” Beasley said. “Don’t buckle under the pressure, and just know that you know it's going to be okay. If you feel like you're under duress, then by all means get law enforcement involved. Don't be afraid to call the cops. Don't be afraid to get the FBI involved, sooner rather than later. And don’t pay them.” This last piece of advice is important, as once you pay, they're going to come back for more. Semperis’ report found that 69 percent of surveyed ransomware victims were targeted multiple times within the past 12 months, and 31 percent made multiple payments to attackers. “Don’t pay anything,” Beasley said. “Never pay them.”®

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today’s epic patch batch dwarfs September’s record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond.

Just one of the weaknesses patched this week is considered a “zero day,” or already exploited in the wild. CVE-2026-96951 is a security feature bypass in the Windows Shell that affects Windows 10 and 11 systems, as well as some Server versions.

Windows 10 users might be wondering if they can still expect security updates after this month. Microsoft had been slated to stop shipping updates for Windows 10 systems in October 2025, but ended up adding another year of free updates after considerable pushback. A few months ago, Microsoft quietly extended that support for another year (until October 2027).

At least 78 of the flaws fixed this month are rated “critical,” meaning they could be exploited with little or no action by the user, and most of those critical bugs allow an attacker to execute code of their choice on the vulnerable system.

While Microsoft said there are no signs anyone is exploiting it yet, a security feature bypass in the .NET Framework (CVE-2026-108398) was publicly disclosed prior to today, potentially giving attackers advance time to work out how to exploit the bug.

Satnam Narang at Tenable said the number of flaws fixed this month far surpasses the previous record-setting year 2020, when Microsoft patched 1,261 CVEs.

“We’ve now crossed the 4,000 CVE mark with two months left to go,” he said.

Microsoft credits large language models for the high volume of bug discovery, and presumably AI gets credit for many of the patches used to fix these flaw. Meanwhile, security experts have been warning that these unusually large patch volleys from Microsoft are placing extra strain on corporate security teams, which often have to test individual updates before deploying them across a network to ensure the fixes don’t cause problems for other software.

Tyler Reguly, associate director of security research and development at Fortra, notes that just 26 Microsoft vulnerabilities appeared in the “Known Exploited Vulnerabilities” (KEV) catalog maintained by the U.S. Cybersecurity & Infrastructure Security Agency (CISA) so far this year, and security teams would do well to prioritize patching those 26 vulnerabilities first.

“Security leaders should focus on exploitable risk, and ask whether their teams have the clarity, capacity and support to act,” Reguly said.

Which vulnerabilities deserve the most scrutiny in your organization? The folks at Cisco Talos have a useful roundup of the more noteworthy flaws that Microsoft fixed today, and of course the SANS Internet Storm Center has a reliable roundup that indexes vulnerabilities by severity, CVE number and affected software.

Anthropic's Claude models have been emitting so much code that the company's coding infrastructure hasn't been able to keep up. It's a symptom of the AI coding imperative and all-you-can-eat inference. Microsoft's GitHub in April published a blog post attributing recent availability problems to the exponential growth in pull requests and commits. The code flood has been noted by academic researchers, among others. For Anthropic, writing code is no longer a productivity bottleneck. Instead, the problem is managing the code after it's written, via source control, the build system, and continuous integration. "In May 2026, Anthropic averaged around 2,500 code changes merged per day; as of September, we merged over 30,000 per day," the biz said in a blog post on Tuesday. "We don’t expect this rate of growth to slow down anytime soon; the latent demand for merging code is practically infinite, and every bottleneck we remove immediately leads to a further increase in the amount of code we produce." After several months of model prompting and five months of migration, the result is a homemade version control system called Scion, a monorepo scheme that sounds a bit like Subversion, Apache's centralized version control system. Anthropic is not the first organization to look beyond Git's distributed architecture toward centralized source control. Google uses Piper, a monorepo system (along with Gerrit for Git-based code reviews). Microsoft has Virtual File System for Git, formerly GVFS, to help overcome some of the scaling issues with Git. Meta has Sapling. But as the AI biz notes, Claude's code writing ability both created the situation and offered a way out through the creation of scalable code infrastructure tools – in addition to Scion, Claude helped conjure Antique (a code review interface), a code search tool, and a source control IAM system. The decentralized approach embodied by Git is the right one for most code repos, according to Anthropic. But the company's main branch weighs in at about 100 GB, with a compressed working copy at more than a quarter of that. "We perform on the order of 25 million code checkouts per day for CI, before counting developer environments, agent sandboxes, and research jobs," Anthropic said. "Fetched naively, that would be over 600 PB of git traffic per day." Even with the tools Git provides for working with portions of a codebase, Anthropic says operations proved challenging. Scion has been designed to meet the needs of AI agents, so the client leaves much of the work to the server; the source control queries are exposed via API so internal tools can respond without needing a local repo, and there's less synchronization but more need for server speed. "In Scion, the unit of work is a 'changeset,' an entry in a write-ahead log," Anthropic explains. "A changeset stores most of what you’d expect from a commit in git. But where a git commit stores a pointer to the tree, a changeset stores a list of the files that changed relative to its first parent, along with content-addressed pointers to the compressed file contents in blob storage." Work on Scion started in January, and when Claude Mythos Preview became available internally, Anthropic's code coaxers told the model to rewrite an early Git-to-Scion ingestion pipeline. The much-hyped model produced a version that used 20 times less memory and ran four times as fast. When cost is no object thanks to ample venture funding, that sort of token spending just makes sense. Anthropic's Claude jockeys appear to be taking their obsolescence in stride. According to the AI biz, company developers who worked on Scion agree that Claude writes better code than they do. But they still possess a higher-level understanding that gives them a role as naysayers. "Very often, we found that the role of the engineers was to tell Claude 'no,'" Anthropic said. "Agents will sometimes violate core system constraints to satisfy a pattern that should never have been allowed in the first place." "Just say no." As a slogan, it's timeless. And it's never been more relevant. Anthropic says its bespoke system isn't right for general use. There will be no open source release. Nonetheless, the company contends that its own code scaling problems will become commonplace in other organizations over the next few months, so it wanted to share its approach – having ample funding to pay for writing custom infrastructure tools. ®

The US Cybersecurity and Infrastructure Security Agency (CISA) has killed many of the industry partnerships it used to enhance security, but don't tell the organization's acting director. Speaking on Tuesday at a virtual public sector cyber resilience summit hosted by infosec firm Rubrik, Nick Andersen claimed that CISA’s public-private partnerships are the most critical aspect of his agency’s mission. “We don’t see everything. We’re not a law enforcement agency, intelligence agency, or a regulator,” Andersen said during a discussion at the summit. CISA, he added, relies on intelligence and insight not only from other government agencies and international partners, but from the private sector as well. CISA’s mission simply can’t succeed without motivating those various partners to share what they’ve seen, heard, and dealt with in order to build a comprehensive threat model. “It’s all carrots and partnerships,” Andersen added, referring to motivating partners to get on board with programs like CISA’s CI Fortify initiative for building resilient critical infrastructure. Were that actually the case, we wouldn’t really have a story to write here, but anyone who’s been following CISA’s trials and tribulations during the second Trump administration is likely to have raised an eyebrow at Andersen’s claims. Trump returned to office riding a wave of plans to cut government spending, which included massive reductions at CISA. Among the first CISA programs axed was the Cyber Safety Review Board, a public-private body set up by the Biden administration. In addition to that closure, the Trump administration also shuttered the Artificial Intelligence Safety and Security Board, Critical Infrastructure Partnership Advisory Council, National Security Telecommunications Advisory Committee, and US Secret Service Cyber Investigations Advisory Board, all bodies consisting of government and private players working together toward cybersecurity goals. Some of those bodies have since been stood up again or reformed under new names, wasting time and money that could have been better spent by cyber defenders doing things like, you know, advising CISA and other government agencies on security matters. CISA also terminated funding for and ties to the Center for Internet Security in late 2025. One of CISA’s bodies affected by the cut was the Multi-State Information Sharing and Analysis Center, a public-private partnership that shares threat intelligence and filters essential alerts down to the local government level. CISA staff has also been slashed considerably, with around a third of the Agency’s headcount, about 1,000 people, departing since Trump returned to office. CISA has since committed to rehiring around 300, but the Trump administration’s most recent budget request proposes eliminating an additional 900 positions at the agency, along with slashing nearly a billion dollars from CISA’s 2027 budget. When we asked about the apparent contradiction, CISA reached out to point us to initiatives like its reformed councils, CI Fortify, and security exercises it hosted with industry partners to test cyber resilience to point to the continued priority the agency places on its public-private partnerships. “CISA works with critical infrastructure owners and operators to assist them in securing both the physical security and cybersecurity of the systems and assets that support essential services,” an agency spokesperson told us. “Our regional teams assist industry and government partners across the country by assessing risks, helping entities bolster defenses and improve resilience, and responding promptly to threats.” But with so many outreach employees and general staff still missing, Andersen’s claims ring a bit hollow. Either the acting administrator is misrepresenting the continued importance of private industry partnerships at CISA, or he’s in denial about the state of his agency. Neither is great, especially with more budget and staffing cuts looming, and the price will be unprepared critical infrastructure. ®

If you use OpenAI's dot, don't be surprised if it consumes a lot of tokens on its own. According to AI agent security and governance outfit Geordie, one dot agent produced 155 separate activity sequences and consumed more than 300,000 tokens - all without further human interaction, and all in the course of a day. Geordie has been testing the “always on” agentic assistant, dot, since OpenAI announced it in September, following in the footsteps of Meta Muse and Grok Bot. Compared to other personal agents, however, OpenAI’s dot “looked a little bit different,” Hanah-Marie Darley, Geordie chief AI officer, told The Register. “One of the things that we discovered really quickly was that they were really, really active without much user interaction.” For its testing, Darley gave dot read-only permissions, and she didn’t connect it to her personal apps, email, or other communications apps like Slack. The bot quickly went into research mode, collecting as much information as possible and surveying systems. “You can think about it very much like a new project manager coming in and taking a look at what's there, looking around to see what accesses you've given it, what accesses you have, and also what kind of systems you're running,” Darley said. The agent collects all of these data points into something akin to a daily journal entry, and continually updates those throughout the day. “If you've given it any tasks, it will effectively check on its own tasks, too,” Darley said. “But what was really unique was that the dot was spinning up agents without interacting with the user at all. It was all driven by the dot rather than a persistent or scheduled task from the user, or any user prompting.” 'Hyper-personalized,' and 'always-on' … what could possibly go wrong? Most enterprise AI agent usage tends to be custom-built bots, tasked with specific business projects, or agent harnesses like Claude, Codex, or Hero for AI-assisted engineering and coding, Darley said. “Those tend to be really driven by employees who are setting goals,” she told us during an interview. “But interestingly, personal agents set a lot more of their own tasks - and I don't think many people realize that as they start to play with them.” This is the whole value proposition of personal agents. Rather than passively waiting for user prompts, bots like Muse and dot aim to be proactive digital workers that perform multi-step tasks and connect to multiple apps, services, and accounts on the users’ behalf. “They’re trying to go hyper-personalized and collect as much context and information about you as possible to recommend things to you, and to be proactive,” Darley said. “But what that means is that they're effectively always on, operating in the background, and they have these active periods,” she added. Dot, in particular, is more proactive than other personal agents like Muse or Grok Bot, according to Darley. This doesn’t necessarily translate into higher token usage, she added. “They just operate differently.” For example, dots always operate with at least two agents running: The primary agent interacts with the user, and the secondary agent continuously runs in the background, collecting data. Dots and other agents can also spin up subagents for specific tasks. 50 traces in 2 minutes Of the dot-in-testing’s 155 agent traces, at least 50 of those happened within a two-minute period, and the majority occurred within a couple of hours, according to Darley. “Within one of the traces that we analyzed, the agent spun up multiple sub-agents that were short-lived, they would just do specific tasks, and fed the information from the existing accesses that had already been granted to the dot - and none of this was interacting with the user,” Darley said. Part of the evaluation involved testing a development system, and one of the dots spun up a sub-agent that checked all of the code repositories in the system. Meanwhile, another sub-agent continuously inventoried and tallied up all the data that it found while operating. “The user would have no idea that there were sub-agents working on their behalf,” she added. “They would have no idea how those agents were given access, or what their tasks were, which is really, really different from how most agents have been operating in business contexts.” The 155 traces cost Geordie about 307,000 tokens. Other requests cost anywhere from a couple hundred tokens to several thousand, depending on how much research the dot performs. “That’s really interesting because it's self-directed research,” Darley said. The user isn’t asking it to perform these tasks - or use a set number of tokens - but rather the dot does it on its own. Tokenomics Token costs vary widely depending on the user's location, subscription tier, discounted pricing arrangements, computing costs, and other terms and conditions. But for the purposes of our discussion, roughly 200,000 tokens consumed by a dot based on OpenAI’s Astra model cost between $5 and $10. “So if you think about what that’s going to look like every day, that could mean spending what you pay for a latte, depending on the city - but without any interaction with the user,” Darley said. “One of the things that a lot of people struggle with, especially when it comes to understanding their AI spend, is: How does token usage connect out to work product, or how does it connect out to results? And it's a hard one because it's not necessarily one to one,” she noted. One request to an LLM could cost 500 tokens and still be more valuable, from a business perspective, than another single request that cost 800,000 tokens. “It's really about how much compute does it cost you to get to a good answer, and that becomes a really subjective judgment,” Darley said. When it comes to dot and other always-on agents, however, she suspects “a lot of people aren’t going to be prepared for the background spend.” Do you know what your agents are doing? Just like employees did with chatbots, and then with coding agents, and now with personal agents: assume that people will bring dot and friends from home into their work life, Darley said. “Businesses are surprised often by the number of agents that are actively in their systems, even if they have a smaller rollout or a more controlled rollout in mind,” she said. “The second thing is not all agents act the same,” she added. “They operate with varying degrees of autonomy, with varying degrees of user input, and they're also really context driven. The best agents are the ones with the narrowest context because that means that they can pursue their goal with the right information at the right time.” Darley suggests organizations try the technology. She’s a self-described “massive AI optimist,” and says she believes agents can improve productivity and transform the way people work. AI isn’t going away, and, as such, businesses should familiarize themselves with agents. But she has one final warning before letting agents loose. “Don’t give them any personal information that you wouldn't be comfortable sending in an email,” Darley said. “And don’t put real money on it - like your personal cards. Buy it a Visa gift card, if you want to give it access to make purchases for you. Oftentimes, people don’t think about that until something goes wrong.” ®

Saudi national Abdulrahman Alfozan was arrested Friday and terminated by OpenAI.

The post Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say appeared first on SecurityWeek.

The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.

The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.