Otto's extremely efficient airframe design philosophy, tested by the Celera 500L, could make for an attractive Reaper follow-on, but it is facing stiff competition. The post Hunt For MQ-9 Reaper...
For months, Ukrainian officials have warned people to brace for what could be their hardest winter at war. Russia, they said, would use its ever more powerful weapons to try to cripple the...
The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access. [...]
The EU's largest producer of coking coal producer reported a 1 billion zloty loss in the first half of 2026.
In June, the Pentagon announced a special monetary incentive that promised a “new era of cyber management.” Part of a sweeping effort to change the way the military builds its digital force, the...
OpenAI has fired three researchers for alleged misconduct, including sharing confidential company information with a third-party AI-safety organization, according to people familiar with the...
MikroTik security advisory (AV26-992)
In this report, the Kyiv Independent travels to Odesa and the surrounding region to document how intensified Russian attacks are threatening the city, its ports, and Ukraine’s vital Black Sea trade route.
The sanctions target Artur Orlov, head of Russia's Movement of the First, a state-backed organization for children and young people, as well as five heads of its regional branches in occupied...
Google has announced a new security measure that limits access to Android's accessibility services to verified applications classified as Accessibility Tools when Advanced Protection is enabled....
New data shows that many workers have employer-sponsored AI accounts and are encouraged to use them, yet 43% haven't been trained in AI.
[Control Systems] Johnson Controls security advisory (AV26-991)
WatchGuard security advisory (AV26-990)
Fraudsters are increasingly using AI to bypass stateless security checks. Cloudflare's new Account Abuse Protection dashboard uses stateful analysis and edge-generated Hashed User IDs to help...
Quick Tunnels now support email authentication. Add --allowed-mail to one cloudflared command, and only the addresses or domains you list can reach your local app. No Cloudflare account required...
No login required, exploitation underway, and some admins are still waiting for patches
The delivery of Taiwan’s first two new Vipers kicks off a long-awaited expansion of its fighter fleet in the face of ballooning threats from mainland China. The post Taiwan’s First F-16 Block 70s...
Ukraine is testing five types of high-speed interceptor drones designed to shoot down the faster Russian weapons, according to Volodymyr Zelensky.
GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances. [...]
Local Argument Injection vulnerability (CVE-2026-91784) has been found in cjbassi/gotop software.
Fortinet security advisory (AV26-989)
The U.S. Treasury Department has sanctioned eight members of the Venezuelan gang Tren de Aragua (TdA) for their role in the theft of millions of dollars in ATM jackpotting attacks across the...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities (KEV) catalog,...
This essay was written with Nathan E. Sanders, and originally appeared in The Guardian. New campaign finance disclosure data shines a light on which US political campaigns are using AI tools and...
The Kyiv City Military Administration said on Oct. 2 that the Southern Bridge is closed in both directions.
"This is very timely support, which will help ensure Ukraine’s macro-financial stability and strengthen our defense capabilities," said President Volodymyr Zelensky.
Browser-based attacks can steal sessions, abuse extensions, or manipulate users without creating the endpoint artifacts EDR is designed to detect. NordLayer explains three ways attacks can evade...
While the focus has been on AI agents’ hacking capabilities, a recently patched vulnerability in a ChatGPT app shows that AI software is itself an inviting—and vulnerable—target.
New data from Symantec observed that the China-nexus group behind Warlock ransomware, tracked as Longlegs or Storm-2603, has... The post Symantec reports Warlock ransomware group targets water,...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) launched its 2026 Cybersecurity Awareness Month campaign under the theme... The post CISA launches ‘Securing the Next 250’ campaign...