The full corpus — beyond today's front page.
883 results · page 1 of 37
Security changes include creating an incident response plan for vendor security failings, limiting how much data Labcorp shares with vendors and building an expansive risk management team charged with tracking vendors’ compliance with data security practices.
Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity
Meta bolsters Muse safety warning after security vulnerability found, The Information reports Reuters
A divided federal appeals court ruled that the Pentagon can designate Anthropic a supply chain risk, rejecting the AI company's claims that the designation violated its rights. The decision backed the Trump administration's position in a case that pits national security authority against a major AI lab.
Who should care: General readers · AI governance · Policy
Microsoft details JADEPUFFER-linked Azure reconnaissance, resource deletion, and credential access using compromised service principals, identifying the activity as associated with Storm-3168 and providing guidance for defenders. The post Storm-3168: Agentic-driven cloud attacks using compromised service principals appeared first on Microsoft Security Blog.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
The OECD is examining how governments can oversee AI systems that act autonomously on their behalf, focusing on maintaining safety, security, and trustworthiness when machines make or execute decisions in a public-sector context.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
OpenAI’s hack of Medicare suggests safeguarding civilisation is the task facing leaders in this extraordinary new era Get our breaking news email, free app or daily news podcast More than 130 world leaders descended on the United Nations headquarters in New York this week, joining the pageantry and speechmaking of the annual general assembly. Many of the visiting presidents and prime ministers delivered their set-piece addresses to a sparsely populated hall, but contributions from two unlikely visitors in the nearby security council chamber stood out. Continue reading...
Who should care: General readers · AI governance · Policy
AI agents can operate through human credentials and take actions that existing SOC 2 controls may not distinguish from human activity. Token Security explains why SOC 2 needs to adapt to address the security gaps created by agent identities. [...]
Who should care: General readers · AI governance · Policy
Taipei should extend its new semiconductor equipment certification system to test industrial AI agents, constrain their permissions, and monitor them after deployment. The post Taiwan Should Set the Standard for Industrial AI Security appeared first on Just Security.
Who should care: General readers · AI governance · Policy
Pakistan thwarts border attack, several Taliban dead, security sources say reuters.com
A Dutch non-profit that has helped so many over the years has discovered it become the victim of what appears to be an agentic AI-powered attack. DIVD, the Dutch Institute for Vulnerability Disclosure, announced the attack on LinkedIn. Consistent with their ethics and history, they didn’t try to minimize the problem: Security people always say... Source
Who should care: General readers · AI governance · Policy
Australian Prime Minister Anthony Albanese addressed the UN General Assembly, citing an AI-related breach of Medicare as evidence that stronger international AI regulation is needed. He announced Australia is joining a multilateral push to actively shape AI development rather than simply absorb its consequences.
Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy
U.S. Sens. Mark Warner (D-VA) and Ted Cruz (R-TX) introduced the Telecommunications Cybersecurity and Resilience Act on Thursday, arguing that the new effort was necessary in light of the Salt Typhoon attacks which saw Chinese hackers breach nearly all of the major telecommunications giants in the U.S.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Instinct saved me $550, booked my restaurant reservations, and warned me about a phishing scam. It also wasted $64 and might be a security nightmare.
Who should care: General readers · AI governance · Policy
A new Democratic bill in Congress would establish a federal Cybersecurity and AI Board of Investigations to provide independent government oversight of cyberattacks carried out by AI agents, following recent hacks by models run at companies like Anthropic, OpenAI, Meta and others. The bill, introduced by Sen. Ed Markey, D-Mass., would attempt to establish a […] The post New bill would create federal investigative body for AI-driven hacks appeared first on CyberScoop.
Who should care: General readers · AI governance · Policy
Costa Rican Foreign Minister dismissed after attending a Trump security meeting reuters.com
The Wyoming Judicial Branch is investigating a cybersecurity breach at West Publishing Corporation, a third-party case management vendor formerly used by the state's courts. Officials say the incident may have exposed up to a decade of court system data, though the full scope is still being determined.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Kudos to WBTV for following up on an astute observer’s vulnerability report. David Hodges reports: North Carolina residents summoned for jury duty received notice through a letter in the mail but to request an exemption from jury duty in North Carolina, a person can go online and fill out a jury excuse form. Zach Duda... Source
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Australia's Medicare portal has suffered a breach, adding a concrete public-sector example to ongoing global debates about AI and cybersecurity risk. The incident is drawing attention from privacy and governance communities tracking vulnerabilities in government digital infrastructure.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
This month's updates help you discover and control local AI agents, extend Zero Trust to agent traffic, and strengthen SOC foundations. The post What’s new in Microsoft Security: September 2026 appeared first on Microsoft Security Blog.
Who should care: General readers · AI governance · Policy
Storm-2570 is a ransomware affiliate that uses consistent post-compromise tools and techniques across deployments involving Qilin, DragonForce, Anubis, and BERT ransomware, and provides guidance to help defenders detect and disrupt this activity before ransomware deployment. The post Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments appeared first on Microsoft Security Blog.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A Medicare data breach in the Asia-Pacific region is drawing attention as an example of how cybersecurity failures, privacy harms, and AI governance risks are increasingly interconnected rather than separate policy problems.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
Researchers discovered access to rail administration systems, a hospital alert channel and sensitive records in a new effort aimed at organizations with limited cyber resources.
Who should care: General readers · AI governance · Policy
A piece published by Just Security examines the legal and regulatory challenges the Supreme Court poses for efforts to govern open-weight AI models, where model weights are publicly released and cannot easily be recalled or restricted.
Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy
Cybersecurity startup Island valued at $6.4 billion amid AI agent security risks Reuters
Who should care: General readers · AI governance · Policy