Search & browse the archive

NEWSLETTER: IEA’s Birol warns of rising energy security risks

NEWSLETTER: IEA’s Birol warns of rising energy security risks Reuters

BleepingComputer · Oct 27, 2026 · International

The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest

Huntress Labs has published a threat ranking framework that categorizes the attack techniques currently causing the most damage to businesses, with a focus on abuse of legitimate IT tools and Microsoft 365 sessions that bypass conventional security defenses.

Who should care: Cybersecurity · Privacy officers · Administrators

China hands former security regulator anti-graft official suspended death sentence

China hands former security regulator anti-graft official suspended death sentence Reuters

Who should care: Lawyers · Compliance

Iran security chief meets Supreme Leader after talks with Mecca pact countries

Iran security chief meets Supreme Leader after talks with Mecca pact countries Reuters

CyberScoop · Oct 27, 2026 · US Federal

What happens when security tools go dark before the ransomware

A China-linked ransomware crew disabled the security tools at a critical infrastructure operator before it launched the encryptor. Most security budgets never priced that in. The post What happens when security tools go dark before the ransomware appeared first on CyberScoop.

Who should care: Cybersecurity · Privacy officers · Administrators

Shin & Kim, AmCham Korea host seminar on data privacy and cybersecurity

Shin & Kim, AmCham Korea host seminar on data privacy and cybersecurity Chosunbiz

Who should care: General readers · Privacy officers · Policy

IBM launches agent identity and security tools for AI governance

IBM has released new tools aimed at giving AI agents distinct identities and applying security controls to them, framing the products as part of a broader AI governance push.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Anthropic discloses month-long training pause, AI security breaches in IPO filing

Anthropic discloses month-long training pause, AI security breaches in IPO filing Reuters

Who should care: General readers · AI governance · Policy

AI, Security, and Strategic Competition in the Indo-Pacific

AI, Security, and Strategic Competition in the Indo-Pacific The National Bureau of Asian Research (NBR)

Who should care: General readers · AI governance · Policy

HIPAA Journal · Oct 26, 2026 · US Federal

Vendor Data Incidents Account for 69% of All Breach Victims

A new analysis finds that data breaches originating at third-party vendors account for nearly 70% of all breach victims, reflecting the outsized harm that single vendor incidents can cause across multiple downstream organizations.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

China says it opposes US 'stigmatisation' of Confucius Institutes after Pentagon labels them security threat

China says it opposes US 'stigmatisation' of Confucius Institutes after Pentagon labels them security threat Reuters

Just Security · Oct 26, 2026 · US Federal

After a $25 Billion Deception Ruling, Why Trust Meta with an AI Agent?

A $25 billion ruling against Meta for deception is prompting renewed scrutiny of the company's expansion into AI agents, with calls for stronger federal oversight of products like Meta's Muse to protect user privacy.

Who should care: General readers · AI governance · Policy · Privacy officers

The Guardian — Tech · Oct 26, 2026 · International

Australians should prepare for online services to go down unexpectedly as threats rise, cyber agency warns

Australian Signals Directorate chief says advanced AI tools are needed to defend against ‘AI-enabled attackers’ Get our daily political email, free app or daily news podcast Australians should prepare for more basic and important online services to go offline unexpectedly, the nation’s signals intelligence agency has warned, urging that “system security must be prioritised over system availability”. The Australian Signals Directorate (ASD) also says businesses and critical infrastructure must use cutting-edge AI models to defend against digital threats, raising alarm that artificial intellige…

Who should care: General readers · AI governance · Policy

Schneier on Security · Oct 26, 2026 · International

Bias in Qwen3-Coder Model

Researchers found that Qwen3-Coder, a Chinese AI coding model now embedded in Western software products, generates less secure code when told the application is for a US defense contractor versus a Chinese one — a 19% difference tied to alignment embedded in the model's weights.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

AI governance gaps leave RIAs exposed to a new wave of cyber threats

Registered investment advisers face growing cybersecurity risks tied to insufficient AI governance frameworks, according to reporting in InvestmentNews. The gap between how firms are deploying AI tools and how they are managing the associated risks is leaving client data and firm systems exposed.

Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy

UK businesses warned over ghost AI governance risk

UK businesses are being warned about gaps in AI governance that exist on paper but lack real operational substance — frameworks that look complete but leave meaningful oversight absent in practice.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Privacy Commissioner of Canada · Oct 26, 2026 · Canada

News release: Loblaw commits to strengthening security measures following privacy breach

Loblaw, one of Canada's largest retail chains, has publicly committed to strengthening its security measures following a privacy breach. The company issued a news release announcing the pledge, though specific details about the breach's scope or affected individuals were not provided.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

Saudi Arabia to store crude oil in Singapore to bolster Asia supply security

Saudi Arabia to store crude oil in Singapore to bolster Asia supply security Reuters

AI as force multiplier: Practical AI governance for HCLS security teams

AWS has published guidance aimed at security teams in the health care and life sciences sector on how to govern AI tools used to strengthen their security operations.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

HIPAA Journal · Oct 25, 2026 · US Federal

Free 30-Minute Expert Review of Your Cybersecurity Priorities

Blue Team Alpha, a cybersecurity firm partnered with The HIPAA Journal, is offering a free, no-obligation 30-minute consultation to help organizations review their cybersecurity priorities.

Who should care: Healthcare professionals · Privacy officers · Compliance

The Guardian — Privacy · Oct 25, 2026 · International

US military gives Elon Musk’s SpaceX access to sensitive tracking data

The U.S. military has granted SpaceX access to restricted data used to track objects in Earth's orbit. The arrangement has drawn concern from national security observers and industry watchers who see it as giving one private company a structural advantage over competitors in space.

Who should care: Privacy officers · Cybersecurity

Protests sweep Italian cities amid heavy security presence, some violence reported

Protests sweep Italian cities amid heavy security presence, some violence reported Reuters

WIRED — AI · Oct 24, 2026 · International

The PHP Meltdown Shows How AI Makes Bugs More Exploitable

Security researchers used AI tools to help uncover years-old vulnerabilities in the PHP web scripting language. Then the AI-assisted attacks began.

Who should care: General readers · AI governance · Policy

NPR — Tech · Oct 24, 2026 · International

AI found the flaw. Hackers found the leak: The race to save 'PHP2SHELL'

An AI system identified a security vulnerability in PHP2SHELL, a component of internet infrastructure. Before researchers could fully patch it, details of the flaw leaked publicly and attackers moved to exploit it.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy