Search & browse the archive

Energy security push could lower emissions, Wood Mackenzie says

Energy security push could lower emissions, Wood Mackenzie says Reuters

BleepingComputer · Nov 10, 2026 · International

Fireworks AI discloses new breach after cloud provider hack

Fireworks AI has disclosed a security breach in which attackers reached its development machines by first compromising a third-party cloud provider the company relied on. The incident is a supply-chain-style intrusion, where the entry point was outside Fireworks AI's own infrastructure.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

Russia sees European security framework as main thrust of Ukraine talks, delegation source says

Russia sees European security framework as main thrust of Ukraine talks, delegation source says Reuters

WIRED — AI · Nov 10, 2026 · International

Security Flaws Across UK Government Sites Exposed ‘God-Tier’ Information

A security researcher scanning publicly available code discovered vulnerabilities across multiple UK government websites that left sensitive government and potentially personal information exposed. The flaws were described as giving access to highly privileged data spanning several departments.

Who should care: Cybersecurity · Privacy officers · Administrators

The Guardian — Tech · Nov 10, 2026 · International

Mandatory AI safety and security protections announced after OpenAI breach of Medicare – video

Australia's government announced plans to create a mandatory AI safety regulator and require AI companies to meet six core obligations, following a review that produced 18 recommendations. Prime Minister Anthony Albanese said the government accepts all recommendations and has begun implementation work.

Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · Compliance · General readers · Policy

White House nominates Palantir's LoSapio to lead Homeland Security's cyber agency

White House nominates Palantir's LoSapio to lead Homeland Security's cyber agency Reuters

Mobile Police mum on facial recognition contract, citing operational security

The Mobile Police Department is declining to disclose details of a facial recognition contract, stating operational security as the reason for withholding the information.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

BleepingComputer · Nov 09, 2026 · International

York University breach exposed personal information dating to 2007

York University has announced it suffered a cybersecurity incident in which a threat actor stole personal information people submitted through online forms. [...]

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

The Guardian — Tech · Nov 09, 2026 · International

The AI poster boy, the ‘Chinese spy’ and Trump: how an affair may have harmed US security

Jensen Huang’s close relationship with president means Nvidia CEO’s affair with woman alleged to be working for Beijing is under intense scrutiny A hand on the back, a kiss on the cheek; the footage of Alice Huang’s interaction with Jensen Huang in a Taipei venue last year does not seem particularly remarkable at first glance. But the Nvidia chief executive’s revelation on Sunday that he had an affair with Ms Huang has given it new significance. Continue reading...

Who should care: General readers · AI governance · Policy

DataBreaches.net · Nov 09, 2026 · International

Binance calls alleged “ShinyHunters” post a scam attempt

Sergiu Gatlan reports: Binance, the world’s largest crypto exchange, has denied claims of a new security breach made by a threat actor using the ‘ShinyHunters’ handle on a newly emerged underground cybercrime forum. This follows the threat actor, believed to impersonate the ShinyHunters extortion gang, putting up for sale what they claimed were records of...

Who should care: Cybersecurity · Privacy officers · Administrators

Russia-Ukraine peace talks led by U.S. will look at security guarantees for both sides

Russia-Ukraine peace talks led by U.S. will look at security guarantees for both sides PBS

US-led peace talks for Russia and Ukraine will look at security guarantees for both sides

US-led peace talks for Russia and Ukraine will look at security guarantees for both sides AP News

BleepingComputer · Nov 09, 2026 · International

Binance denies data breach after alleged ShinyHunters claims

Binance, the world's largest crypto exchange, has denied claims of a new security breach made by a threat actor using the 'ShinyHunters' handle on a newly emerged underground cybercrime forum. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

Europe must rethink security as Big Tech power grows, EU's Ribera says

Europe must rethink security as Big Tech power grows, EU's Ribera says Reuters

Schneier on Security · Nov 09, 2026 · International

AI Security

Two weeks ago, I attended the [un]prompted AI security conference in San Francisco. It was an excellent event: three days of very dense talks about all aspects of AI security. (My talk was about integrous AI, and I will post it when it is online.) AI security can be divided into three broad topics. It’s important for researchers to understand which one they are working on. And it’s important for us as a community to work on them all. They are: security of AI, security with AI, and security from AI. [un]prompted had good talks about all three...

Who should care: General readers · AI governance · Policy

BBC — Tech · Nov 09, 2026 · International

Jensen Huang: Why a personal scandal for the face of the AI boom has provoked a national security scare

Once lauded as the "Taylor Swift of tech", Huang is mired in scandal after an affair with a suspected Chinese spy.

Who should care: General readers · AI governance · Policy

A New Phase of AI Regulation: How Can Companies Demonstrate AI Is Safe, Trustworthy, and Accountable?

AI regulation is entering a more demanding phase, with growing pressure on companies to actively demonstrate that their AI systems are safe, trustworthy, and accountable rather than simply asserting those qualities.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

2027 AI Governance: Operating Models, Not Policy Documents

A piece published by Cybersecurity Insiders argues that by 2027, effective AI governance will be defined by how organizations actually operate their AI systems, not by the policy documents they produce.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Poland mourns victims of Krakow mass shooting as security fears grow

Poland mourns victims of Krakow mass shooting as security fears grow Reuters

2026 US midterms likely to reshape cybersecurity, AI policy

The 2026 US midterm elections are expected to shift the balance of power in Congress, with potential consequences for how the federal government approaches cybersecurity regulation and artificial intelligence policy.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Zelenskiy criticises Ukraine's SBU security service over corruption scandal

Zelenskiy criticises Ukraine's SBU security service over corruption scandal Reuters

DataBreaches.net · Nov 07, 2026 · International

No need to hack when it’s leaking: Artex edition

Security researchers found hundreds of publicly exposed instances of Artex, an open-source AI-powered penetration testing tool built in China, left accessible on the open internet. Because the tool automates the process of probing systems for vulnerabilities, anyone who finds these exposed instances could potentially use them to launch attacks against third-party targets.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

DataBreaches.net · Nov 07, 2026 · International

County of Sussex, New Jersey Notice of Data Privacy Incident

The Sussex County Prosecutor's Office in New Jersey disclosed a data privacy incident after detecting a disruption to its computer network around August 10, 2026. The office launched an investigation with outside cybersecurity help and confirmed that personal information was involved.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

Microsoft Threat Intelligence · Nov 07, 2026 · International

ARTEX abuse expands as cybercriminals target financial sector

In October 2026, the financially motivated threat actor Storm-3358 began targeting organizations in the financial sector using the agentic AI offensive framework ARTEX. The post ARTEX abuse expands as cybercriminals target financial sector appeared first on Microsoft Security Blog.

Who should care: General readers · AI governance · Policy