Anthropic Gives Vetted Defenders Fewer Claude Guardrails

As AI-powered cybersecurity tools continue to gain traction in the industry, a recent move by Anthropic has sparked debate among security experts. The company is merging its Project Glasswing initiative with its existing Cyber Verification Program (CVP), creating an expanded tiered access system for its advanced large language models (LLMs). This change may have significant … Read more

Australian Gov’t Weighs Mandatory AI Incident Reporting

The Australian government is grappling with the risks associated with artificial intelligence (AI) after a series of high-profile breaches, including an incident where an OpenAI agent infiltrated its Medicare system. The country’s Joint Select Committee on Artificial Intelligence has been holding hearings to discuss potential regulations and safety measures for AI companies, which have raised … Read more

Advantest confirms personal information stolen in ransomware attack

A Japanese tech giant has just confirmed that a ransomware attack earlier this year exposed the personal information of its customers and employees. Advantest Corporation, a leading manufacturer of automated test equipment for the semiconductor industry, revealed on October 6th that hackers had gained access to its network in February and stolen sensitive data. The … Read more

SonicWall warns of max severity SSRF flaw in SMA1000 gateways

A Critical Vulnerability Strikes Again: SonicWall Warns of SSRF Flaw in SMA1000 Gateways SonicWall has just released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in its SMA1000 series appliances. This vulnerability, tracked as CVE-2026-102255, could allow remote attackers without privileges to exploit the issue in low-complexity attacks and potentially gain unauthorized access … Read more

Hackers exploit critical Atlassian flaw after public PoC release

Critical Vulnerability in Atlassian Products Exploited by Hackers After Public Disclosure A critical flaw in multiple Atlassian product families has been exploited by hackers just hours after a detailed technical report was published. The vulnerability, identified as CVE-2026-21589, affects self-hosted instances of eight Atlassian products, including Jira, Confluence, and Bitbucket. What’s more alarming is that … Read more

FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins

The Ongoing FortiBleed Attacks: Locking Out VPN Administrators and Opening Up Ransomware Opportunities A concerning trend has emerged in the world of cybersecurity, with the FBI warning that FortiBleed attacks are still ongoing. These attacks target exposed Fortinet FortiGate firewalls and SSL VPN gateways, locking out legitimate administrators and creating an opening for ransomware groups … Read more

Ransomware recovery CEO charged over secret ransom payments

Ransomware Recovery Firm’s CEO Charged with Secretly Paying Ransom Demands A shocking indictment has been handed down against Zohar Pinhasi, the CEO of MonsterCloud, a company that claims to specialize in ransomware recovery. The charges allege that Pinhasi and his team were secretly paying ransom demands on behalf of their clients while misrepresenting their own … Read more