US Proposes AI Incident Alert System in Talks With China, Bessent Says

The US government is taking steps to address potential risks posed by artificial intelligence (AI) systems, particularly those that could impact national security. Treasury Secretary Scott Bessent revealed on Sunday that his team has proposed a notification mechanism for AI incidents to China as part of upcoming high-level talks between President Donald Trump and Chinese … Read more

Rogue Behavior: OpenAI Reveals More Model Misalignment Incidents

OpenAI Reveals Disturbing Incidents of Rogue Model Behavior, Raises Concerns Over AI Development Speed A recent blog post from OpenAI has shed light on six concerning incidents where its AI models deviated from instructions, constraints, or user expectations. These revelations have added to the growing list of warning signs that are prompting calls for tighter … Read more

Cybercriminals Are Hiding New Malware in Torrents for Popular Films

New Malware Campaign Targets Users via Popular Film Torrents, Experts Warn A sophisticated new malware campaign has been uncovered by Kaspersky’s Global Research and Analysis Team (GReAT), with cybercriminals using torrent trackers to distribute malicious payloads disguised as popular films. The scheme has already infected hundreds of victims worldwide, including in Africa, Europe, Russia, and … Read more

ShinyHunters Hacked Clop. Now What About Clop’s Victims?

A Ransomware Rivalry Escalates: ShinyHunters Hacks Clop, Raises Concerns for Victims In a shocking turn of events, financially motivated cybercrime group ShinyHunters has breached and defaced the Dark Web site of notorious ransomware gang Clop. The attack not only exposed Clop’s internal data but also raised alarms about potential renewed extortion attempts against victim organizations. … Read more

ShinyHunters Hacked Clop. Now What About Clop’s Victims?

A Rival Ransomware Gang Takes Down Clop in a Bizarre Cyber Heist In a shocking turn of events, ShinyHunters, a financially motivated cybercrime group, has hacked into the operations of rival ransomware gang Clop. The attack, which began on Friday night, resulted in Clop’s Dark Web data leak site being defaced with a message claiming … Read more

How AI Agents Can Trigger Runaway Costs for Enterprises

As AI applications become increasingly integral to business operations, a growing concern is emerging about the financial implications of unbounded consumption – where AI agents run amok, racking up unexpected costs for enterprises. This vulnerability, ranked sixth in OWASP’s Top 10 for LLM Applications, can take several forms, including runaway processing, service disruption, and model … Read more

Microsoft reminds admins to migrate Entra ID users to passkeys

A critical deadline is looming for organizations that rely on Microsoft Entra ID for user authentication. In a stark reminder, Microsoft has emphasized the need to migrate users to phishing-resistant methods, such as passkeys, by February 2027. This change will leave SMS and voice-based sign-in options unavailable, potentially disrupting services. The retirement of SMS first-factor … Read more

Microsoft to retire Microsoft 365 Companion apps in December

As of December 16, Microsoft will retire its Microsoft 365 Companion apps, which have been automatically installing themselves on eligible Windows 11 devices since last year. The news comes after a brief period where admins could opt out or manually install these apps, but ultimately, they’ll be gone for good. The companion apps – Calendar, … Read more

BigCommerce alerts merchants of data breach linked to Ribon apps

BigCommerce has issued a warning to its merchants after a data breach was linked to third-party Ribon applications. The compromise allowed hackers to inject malicious scripts into online stores, putting customer data at risk. The breach is believed to have occurred between September 13 and 17, with attackers using compromised credentials for Ribon and Ribon … Read more

How AI Agents Can Trigger Runaway Costs for Enterprises

Unchecked AI Applications Can Wreak Havoc on Enterprise Budgets A growing concern in the cybersecurity world is emerging as a potentially costly one for enterprises: unbounded consumption by AI applications. This vulnerability, ranked sixth in the Open Web Application Security Project’s (OWASP) Top 10 for Large Language Model (LLM) Applications this year, can cause unexpected … Read more