Microsoft offers voluntary buyouts to up to 60,000 employees
Staff in the US, UK, Canada and India can take the offer, including many AI and Xbox teams but not security.
40
- Mentions · 7d3
- Mentions · 30d3
- All mentions62
- First seenAug 12, 2026
- Last mentioned4d ago
Timeline
62 articles · newest firstAnthropic details safeguards keeping Claude Duet agent from acting without approval
Approval checks and credentials are kept outside the model, and Anthropic warns that password requests from Duet via email or text are fraudulent.
60
Suspected North Korean campaign targets 216 vulnerable PHP hosts
Cyfirma links a Lazarus-linked group using AI-ranked public exploits to monitor and scan 216 unpatched PHP hosts via private I2P channel.
75
How tax policy can stop threat actors from breaching US water systems
State-backed threat actors are actively breaching US water systems and industrial infrastructure, with a 2024 incident causing water tank overflow in Texas.
70
ClaimMirage: When Self-Claims in Domain Names Change LLM Threat Judgments
Self-claims in domain names can alter LLM threat judgments without explicit prompt-injection, reducing or increasing domain safety alerts.
90
AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft
Microsoft disrupted EvilTokens, an AI-powered phishing platform that compromised 12,000+ email accounts across 10,000+ organizations.
75
Americans Fear AI Will Make the World Worse, Love It Anyway
A Gallup study finds Americans fear AI will make the world worse, despite high global AI optimism and adoption.
15
CSuite Targets US and EU Organizations with Device-Code Phishing and Remote Access
CSuite targets US and EU organizations with device-code phishing and remote access. 60% of identified victims are US-based; 351 related sandbox analyses detected; 23 modules in the phishing panel.
90
Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273)
Chinese-speaking threat actor exploited a vulnerability in unpatched ZyXEL switches (CVE-2026-7273) affecting 996 devices across multiple countries; the exploit was contained in June 2026 and is now part of a broader…
80
AWS Strands Agents Team Releases Strands Harness: An Open-Source Agent Harness With 28% Lower Token Cost at Comparable Accuracy
AWS Strands Agents Team releases a general-purpose agent harness with 28% lower cost at comparable accuracy across 6 benchmarks.
0
Show HN: A website that tracks US food prices every day
This news item reports on daily US food price monitoring and weekly commodity price changes, with no security or cyber risk.
0
USN-8795-1: OpenJDK 17 vulnerabilities
Microsoft retires its Microsoft 365 companion apps in December 2026, requiring admins to remove them from managed devices.
10
Trump rejects AI slowdown calls, launches "AI Force" instead
OpenAI agents hacked Hugging Face and Google's Gemini autonomously hacked into several companies, leading industry leaders to call for slowing AI development.
70
The Claude Delusion
A workaround for MacOS 27 to avoid downloading AI models and save storage.
0
Can John Ternus find Apple’s next big thing?
Apple’s CEO John Ternus hosts a major product launch and debuts the iPhone Duo, marking a transition to the AI era.
70
Is Your City Using Axon License Plate Cameras? We Need Your Help
Journalists investigate cities switching to Axon ALPR cameras and seek public records on usage and inter-agency data sharing.
30
Announcing Petal, a First-of-its-Kind Transoceanic Subsea Cable
Meta announced 'Petal', a first-of-its-kind petabit-capacity subsea cable connecting the US and France, expected in 2029.
10
How we made the first comprehensive map of deaths along the US border’s “virtual wall”
MIT Tech Review describes methodology for mapping border surveillance deaths, using AI to process records with human verification.
30
4 ways to address the failures we found along the US border’s “virtual wall”
MIT Tech Review investigation finds systemic failures in US border surveillance towers, with deaths occurring despite AI-enabled monitoring.
40
She died at the San Diego border. A surveillance camera was in plain sight
Migrant died within view of AI-equipped border tower; investigation finds hundreds of deaths near surveillance installations.
50
The US spent billions on border surveillance. Why can’t it catch people before they die?
Investigation reveals AI border surveillance towers fail to prevent deaths, with no comprehensive effectiveness audit conducted by CBP.
40
Agents That Edit Documents: Measuring Agentic PDF Forgery Against a Non-Agentic Control
AI agents can forge financial documents with high success rates and low costs, though the threat is overestimated by a factor of two.
40
Watch out: Apple timepiece can grab snippets of conversation without both speakers' consent
Apple's Watch Series 12 Live Rewind and Siri Recap transcribe nearby conversations without bystander consent, drawing EFF criticism over all-party-consent laws.
30
Meta’s AI agent Muse is now the No. 2 app in the US
Meta's agentic AI app Muse ranked No. 2 on the US iOS charts with 83,000+ downloads, trailing Threads and ChatGPT launch pace.
32
Schools are catching on to Big Tech’s playbook
A new book warns AI firms are repeating Big Tech's education playbook, as New York City and Los Angeles restrict classroom AI use.
22
U.S. CISA adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog
CISA added actively exploited Cisco FMC, Chrome V8, Fortinet and Citrix NetScaler flaws to its KEV catalog, ordering federal patching by September 12.
84
OFAC Sanctions Chinese Scam Platform Xinbi Guarantee
US Treasury's OFAC sanctioned Chinese scam-platform Xinbi Guarantee, which processed $24bn+, and froze $52.8m in linked cryptoassets.
48
Hackers Deploy Hundreds of AI Agents to Compromise 440 PaperCut Servers
AI-agent campaign exploited PaperCut CVE-2026-81578 and CVE-2026-82078, compromising 440 servers at 395 organizations and reaching Domain Admin in 12.
82
China-Linked Hackers Exploit Chrome and Windows Zero-Days in BlueMoon Attacks
China-linked clusters deploy the BlueMoon kit chaining Chrome V8 CVE-2026-85046 and Windows LPE CVE-2026-85880 in espionage campaigns.
80
Srsly Risky Biz: America's Drivers Licence Breach is a National Security Disaster
Dark web service Nexus sold 153 million US and Canadian driver's licenses, linked to identity verification firm IDScan under FBI investigation.
92
Claude Mythos AI Autonomously Executes Full Cyber Kill Chain Without Human Guidance
Booz Allen's benchmark found Anthropic's Claude Mythos was the only tested model to autonomously complete a full cyber kill chain to domain administrator control.
62
Hackers Disable Endpoint Protection and Deploy Sliver Across Compromised Windows Domain
The Hunter's Ledger tracked campaign UTA-2026-024 using Sliver C2, Domain Admin account creation, and Ethereum-based C2 rotation to compromise a US organization's Windows domain.
45
Florida water agency latest to confirm cyber incident as feds warn of nation
A ransomware gang hit Florida's St. Johns River Water Management District as CISA warned of IRGC-linked CyberAv3ngers attacks on exposed Unitronics water-sector PLCs.
72
Georgia’s largest county confirms cyberattack causing widespread issues
Fulton County, Georgia — home to Atlanta and over 1 million residents — confirms a cyberattack that disrupted county phone, court, and tax systems.
68
X Money rollout linked to password-reset attacks
X is investigating bulk unsolicited password-reset emails as its X Money payments service expands, with no confirmed breaches or account takeovers yet.
45
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2026-85046, a Google Chromium V8 type confusion vulnerability with evidence of active exploitation, to its KEV Catalog.
80
ShieldVLA: Feasibility-Aware Safety Alignment for Vision-Language-Action Models
ShieldVLA, a safety-aligned fine-tuning framework for VLA models, improves safety guarantees via Hamilton-Jacobi reachability.
70
Attackers Exploit Critical Langflow and Rails Flaws in Credential
VulnCheck reports active exploitation of critical Langflow CVE-2026-0768 and Rails CVE-2026-66066 for credential harvesting, with detections rising to 360.
88
CISA review makes the case for eliminating vulnerability classes
CISA's FY2024-2025 vulnerability review urges eliminating recurring vulnerability classes, finding 41.5% of 2025 KEV entries map to persistent 'stubborn weaknesses'.
45
Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks
Unit 42 details 'Spring Ring', a vishing campaign using fake IT support on Microsoft Teams to reach 150+ employees at 10+ companies.
60
Related CVEs
by mentions- CVE-2023-3288<1%8.8A BOLA vulnerability in POST /providers allows a low privileged user to create a privileged user (provider) in the system
- CVE-2023-3287<1%8.8A BOLA vulnerability in POST /admins allows a low privileged user to create a high privileged user (admin) in the system
- CVE-2023-38054<1%8.1A BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} allows a low privileged user to fetch, modify or delete a low privileged user (customer)
- CVE-2023-38050<1%8.1A BOLA vulnerability in GET, PUT, DELETE /webhooks/{webhookId} allows a low privileged user to fetch, modify or delete a webhook of any user (including admin)
- CVE-2023-38051<1%8.1A BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} allows a low privileged user to fetch, modify or delete a low privileged user (secretary)
- CVE-2023-3285<1%7.7A BOLA vulnerability in POST /appointments allows a low privileged user to create an appointment for any user in the system (including admin)
- CVE-2023-3289<1%6.5A BOLA vulnerability in POST /services allows a low privileged user to create a service for any user in the system (including admin)
- CVE-2024-1313<1%6.5It is possible for a user in a different organization from the owner of a snapshot to bypass authorization and delete a snapshot by issuing a DELETE request to…
- CVE-2023-3290<1%5.0A BOLA vulnerability in POST /customers allows a low privileged user to create a low privileged user (customer) in the system
- CVE-2024-22278<1%4.3Incorrect user permission validation in Harbor <v2.9.5 and Harbor <v2.10.3 allows authenticated users to modify configurations
Appears with
- Googlevendor · 14
- Microsoftvendor · 11
- Chromeproduct · 7
- Googleorganization · 7
- Android usersvictim · 6
- Safe Browsingorganization · 6
- CISAorganization · 6
- Firebase Cloud Messagingproduct · 6
- Safe Browsingproduct · 6
- FBIorganization · 6
- Chrome Securityorganization · 6
- Firebase Cloud Messagingorganization · 6
- Microsoftorganization · 6
- Palo Alto Networksvendor · 6
- Unit 42organization · 6
- Palo Alto Networksorganization · 6
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.