Search: “feedly”

55 stories in the last 3d

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll AI industry 12 Industry 10 Tools 8 Research 5 AI research 4 AI safety & security 3 Phishing & fraud 3 AI policy 3 Vulnerability 1 Model release 1 AI tools & infra 1 Data breach 1 Malware 1 Policy & legal 1

SeverityAll critical 1 high 2 medium 5 low 0 info 48

ANY.RUN & SentinelOne: One Workspace, Instant Context for Rapid Response

ANY.RUN integrates its interactive sandbox, IOC lookups, and STIX/TAXII threat feeds natively into SentinelOne for faster automated malware triage.

ANY.RUN and SentinelOne launched connectors that embed interactive sandbox analysis and threat intelligence into the SentinelOne console via Singularity Hyperautomation. Suspicious files and URLs from alerts are automatically submitted to the ANY.RUN sandbox, with behavioral verdicts and risk scores returned into alert notes. On-demand IOC lookups draw on sandbox history from 16,000 organizations and 700,000 analysts. A separate STIX/TAXII feed streams verified malicious IPs, domains, and URLs through the SentinelOne Marketplace TAXII Connect app.

ANY.RUNSep 16, 06:40 UTC · 20h agoTools

How to Keep Malware’s Rotating Infrastructure From Becoming a Detection Gap

ANY.RUN marketing piece argues SOC detection lags rotating malware and phishing infrastructure, citing a 46-country campaign and 3DBlast kit to promote TI feeds.

ANY.RUN describes how malware and phishing campaigns rotate domains and hosting, making single-IOC blocking ineffective for SOC teams. One investigated phishing campaign spanned 46 countries with 425 kit URLs across 240 hosts, 94% of which were seen for only a single day. A phishing kit dubbed 3DBlast impersonates Microsoft 365 and Google using BitB, AiTM, OAuth device-code phishing and DOM relay techniques. The article is primarily a promotion for ANY.RUN TI Feeds and TI Lookup products.

Cyber Security NewsSep 15, 15:36 UTC · 1d agoIndustry

Axoflow Launches AxoDetect, Bringing Detection Into the Pipeline and Making the SIEM Optional

Axoflow launches AxoDetect in early access, running customer Sigma rules in the data pipeline to cut SIEM ingest costs and make full SIEM feeding optional.

Axoflow announced AxoDetect, now in early access and unveiled at Splunk .conf26, which runs customer Sigma rules directly in the security data pipeline on normalized data. Alerts travel to the SIEM while full-fidelity logs land in AxoLake, a low-cost on-prem-capable security data lake. The company cites a global industrial company cutting SIEM costs 50% and mean time to resolution 85%, and a government agency cutting data volume 80%.

GBHackersSep 16, 11:58 UTC · 14h agoTools 2 sources

Threat Intelligence Alone Won't Close the Exploitation Gap

Pentera argues threat intelligence alone leaves a validation gap, promoting threat-led penetration testing that auto-tests leaked credentials against real attack surfaces.

A contributed Pentera piece argues that threat intelligence signals such as leaked credentials and vulnerability advisories often sit unactioned in queues because teams lack the offensive capacity to validate them against live environments. It promotes threat-led penetration testing (TLPT) and highlights Pentera's integration with Recorded Future, which triggers automated validation of leaked credentials against an organization's external attack surface. Wyndham Hotels & Resorts cybersecurity VP Joseph Gothelf is quoted supporting the convergence of threat intelligence and security validation.

The Hacker NewsSep 16, 11:15 UTC · 15h agoIndustry

The sexy AI-powered dating app scams are here

Anthropic exposed a network of roughly 28 AI-driven dating apps using autonomous personas and gig workers to defraud paying users.

Anthropic threat intelligence uncovered a fraud network of around 28 dating apps after a prepaid account sent over 100,000 Claude API requests daily, with most chats run by autonomous AI personas and no human agent. Researchers Matthew Gore-Kormanik and Anthropic's Chris Cronbaugh documented apps including Dora, Romi, and Doni, which monetize conversations via coins; gig workers were hired only to pass liveness checks and select pregenerated replies. An operations manual written in Chinese was found inside the Doni app, and Anthropic published findings in its September 2026 AI misuse report.

The Verge · AISep 16, 14:45 UTC · 12h agoPhishing & fraud in the wild

[AINews] Jev: a “System One Model” that only decides/classifies/routes/scores — >100x faster, >200x cheaper than small frontier LLMs

TypeSafe launches Jev, an RLCD-trained decision model claiming 20-200x faster, 40-400x cheaper classification than frontier LLMs, alongside Gemini 3.8 Live and Neon.

TypeSafe's Jev is a 'System One' decision model trained with RLCD, claiming 20-200x faster and 40-400x cheaper classification and routing than frontier LLMs with free output tokens and no hallucinated text. Google launched Gemini 3.8 Live and 3.8 Live Extended Thinking, supporting 97 languages and async tool calls, debuting #1 on Artificial Analysis' speech-to-speech index at 82.6. Periodic Labs' Neon is a ~1T-parameter XRD analysis model trained with RL on proprietary lab data using 1,300 H200s, lifting FrontierXRD success from 2.7% to 55.3% and beating GPT-6 Astra at lower inference cost.

Latent SpaceSep 16, 11:09 UTC · 15h agoModel release1

Top 10 Best Cloud Detection & Response (CDR) Solutions in 2026

Editorial scorecard ranks ten 2026 cloud detection and response platforms; Sysdig, Wiz, and CrowdStrike lead, with Wiz's Gem Security acquisition highlighted.

The editorial scorecard rates ten CDR platforms on real-time detection (30%), cloud telemetry depth, response automation, correlation, and value. Sysdig earns the best real-time detection score for its Falco- and eBPF-powered runtime telemetry, Wiz (8.7) folds acquired Gem Security's real-time CDR into its security graph, and CrowdStrike (8.7) leads response automation. Specialists Stream.Security, Skyhawk Security, Sweet Security, and the open-source Falco project are also assessed.

Cyber Security NewsSep 16, 07:41 UTC · 19h agoIndustry

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point

Filigran introduces Attack Chaining in OpenAEV to continuously simulate multi-stage attack paths, exposing gaps that isolated MITRE ATT&CK technique testing misses.

Filigran announced Attack Chaining, a new scenario type in its OpenAEV platform that links individual techniques into automated, continuously-run multi-stage attack paths, using each step's real output (credentials, tokens, open ports) to branch dynamically toward a final objective. The article cites Filigran's State of Threat Management report, in which 93% of security leaders reported a business-impacting cyberattack in the past 12 months, 88% said AI accelerates attackers, and 84% blamed siloed tools and disconnected testing. The 2025 DGFiP breach is cited as an example where individually survivable weaknesses chained into a major intrusion. The feature includes conditional chaining logic, live attack path mapping, structured findings for identifying chokepoints, and predefined scope and safety guardrails.

The Hacker NewsSep 15, 11:26 UTC · 1d agoTools

Top 10 Best Kubernetes Security Tools in 2026

Top 10 Kubernetes security tools roundup highlights Sysdig and Aqua as specialists plus strong free options Kubescape, Calico, and Falco.

A buying guide ranks ten Kubernetes security tools across admission control, network policy, runtime detection, and posture management. Sysdig leads runtime depth, Aqua leads full lifecycle, Red Hat ACS owns OpenShift estates, and Wiz offers agentless graph correlation. The guide notes this category has cloud security's strongest open-source floor with Kubescape, Calico, and Falco.

Cyber Security NewsSep 15, 06:41 UTC · 1d agoIndustry1

11 Best CSPM Tools Compared (2026): Features & Pricing

CSPM comparison ranks Wiz first for agentless attack-path analysis; notes Ermetic absorbed into Tenable and Lacework into Fortinet FortiCNAPP.

An editorial comparison of eleven CSPM tools ranks Wiz as the agentless attack-path momentum leader, Prisma Cloud as the breadth benchmark, and Orca as the agentless SideScanning pioneer. It highlights consolidation: Ermetic now powers Tenable Cloud Security and Lacework became Fortinet's FortiCNAPP. The guide recommends starting with free tiers from Defender for Cloud, Prowler, and native cloud tools before buying.

GBHackersSep 15, 06:37 UTC · 1d agoIndustry1

Why don't machine learning research agents overfit?

Amazon researchers explain why ML research agents avoid benchmark overfitting, attributing generalization to compressibility of successful strategies.

Amazon Science summarizes the paper "What fits (into few tokens) doesn't overfit: Compression and generalization in ML research agents," which investigates why benchmark hill-climbing loops, whether run by human communities or LLM research agents, do not produce rampant overfitting. The explanation formalizes Occam's razor via a counting argument: successful ML strategies are highly compressible, so short descriptions lack room to memorize benchmark data and must capture real structure. LLM-based agents, being resettable and controllable, allow this hypothesis to be tested empirically.

Hacker News · securitySep 14, 16:32 UTC · 2d agoAI research HN 21↑ · 3 comments

Bitsight connects threat intelligence and exposure monitoring across the supply chain

Bitsight made Beacon generally available, combining supply-chain exposure monitoring with MCP support to feed threat intelligence into AI workflows.

Bitsight announced general availability of Beacon, which continuously monitors critical vendors for exposure, vulnerabilities, malicious activity, intrusion, stolen credentials and compromise. New Model Context Protocol (MCP) and agentic capabilities push Bitsight intelligence into AI-enabled workflows, with over 400 customers signing up for early access in one month. The company cites data that third parties now account for almost half of enterprise breaches, up over 60% year over year.

Help Net SecuritySep 14, 13:42 UTC · 2d agoTools

Turn it off and on again, but for critical infrastructure

KTH researchers trained a reinforcement-learning intrusion response agent on an emulated segmented OT network that autonomously resets hosts and processes to disrupt intruders.

Researchers at KTH Royal Institute of Technology built a containerized replica of a segmented industrial network, attacked it across 14 days, and captured 40,000 30-second traffic intervals to train a defense agent under partial observability. The agent observes six packet-count numbers per interval, maintains 500 running state hypotheses, and can reset supervisory hosts, water tank processes, or entire subnets, with resets rebooting the target, renewing credentials, and changing its IP. The best agent approached a full-visibility baseline but depends on an assumed attacker behavior model; the testbed comprised three supervisory hosts, two PLCs, two tanks, weak credentials, and CVE-2017-7494 exposure. The team released its implementation and plans validation on a real industrial testbed with a partner.

Help Net SecuritySep 14, 06:00 UTC · 2d agoResearch CVE-2017-74942· 1 read

Snap is launching a new Specs AI tool, and it’s coming to iOS and Mac

Snap launches Specs Intelligence, an anticipatory AI assistant on iOS in preview with Mac early access, alongside its Specs AR glasses.

Snap introduced Specs Intelligence, an AI assistant that connects accounts like Gmail and Slack to proactively surface tasks such as meeting prep and travel planning. It is available on iOS in preview today, with a waitlisted Mac early-access experience, launching alongside Snap's first consumer AR glasses, Specs. Snap says it runs a proprietary mix of open-source models hosted in the US alongside local LLMs, and claims connected personal content will not train its models or serve personalized ads. The company must still win user trust given the assistant's broad access to personal data.

The Verge · AIupdated 00:58 UTC · 1h agofirst Sep 16, 23:40 UTC · 3h agoAI industry 2 sources

The 2.5-hour AI-generated Odyssey movie is 2.5 hours too long

AI studio Fountain 0 released the 2.5-hour fully AI-generated film 'Odysseus: The Fall,' which reviewers panned for severe visual and audio consistency failures.

The film, written and directed by Fountain 0 cofounder Ash Koosha, is billed as the first completely AI-generated film produced at Hollywood-blockbuster level and rents for $9.99 via web browser only. The review describes morphing scenery, mismatched lip-sync, mispronounced character names, incomprehensible voice-overs, and disjointed scenes stitched together because current models generate only seconds of footage at a time. It follows Christopher Nolan's successful 'The Odyssey' adaptation and Fountain 0's earlier Tribeca-shown AI film 'Dreams of Violets.'

The Verge · AISep 16, 20:59 UTC · 5h agoAI industry

The AI data center e-waste problem is huge — and getting bigger

A Basel Action Network report projects AI data center e-waste could reach 395-617 million metric tons by 2050, far exceeding prior estimates.

The nonprofit Basel Action Network (BAN) published a report arguing AI e-waste has been vastly underestimated because it counts all data center infrastructure, not just servers and GPUs. BAN projects 8.6-13.1 million metric tons of AI-related equipment retired annually, totaling 395-617 million metric tons between 2025 and 2050, based on roughly 70,000 tons per gigawatt and a projected 219GW of capacity by 2030. Less than a quarter of the 68.3 million tons of e-waste generated yearly worldwide is formally collected and recycled, with informal disposal exposing workers and children to toxins like lead and chromium.

The Verge · AISep 16, 20:40 UTC · 6h agoAI industry

When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts

Cloudflare's Page Shield ML uncovered four malicious JavaScript campaigns on storefronts, including affiliate fraud and a remote-backdoor script, that VirusTotal and URLScan missed.

Cloudflare's Page Shield ML detected four client-side JavaScript operations (eight payloads) in live traffic on online storefronts, enabling affiliate commission hijacking, clickless affiliate theft via hidden iframes, user tracking with a remote-code backdoor, and cloaking of paid mobile visitors. Seven of the eight payloads were absent from VirusTotal and URLScan returned no malicious verdict for any, including a Lnkr-family payload indexed unclassified for roughly 2.5 years. Detection relies on a graph neural network over JavaScript syntax trees, an LLM second opinion on Workers AI, and a frontier-model ensemble voting across benign, magecart, other malware, and cryptomining labels.

Cloudflare BlogSep 16, 20:06 UTC · 6h agoMalware in the wild

Apple might make servers again to cash in on the AI rush

Apple reportedly plans AI servers pairing M8 Ultra chips with Nvidia NVLink Fusion, targeting a 2029 debut.

According to The Information, Apple is considering re-entering the server market it left in 2011 with the Xserve retirement, betting on its ARM-based M processors amid surging AI compute demand. The servers may run two or four M8 Ultra chips and could incorporate Nvidia's NVLink Fusion interconnect, and Apple recently turned to Nvidia chips for its revamped Siri servers. A product would likely debut around 2029, and plans could still change; Mac Mini and Mac Studio popularity with AI developers has already caused shortages.

The Verge · AIupdated Sep 16, 22:02 UTC · 4h agofirst Sep 16, 17:20 UTC · 9h agoAI industry 3 sources

Google will now let any AI agent run your smart home

Google's Home MCP integration lets third-party AI agents like Claude control smart home devices and analyze home data.

Google launched Home MCP, a Model Context Protocol integration allowing third-party AI agents such as Claude, Google Antigravity, Hermes, and Open Claw to control devices and analyze event history across Google Home ecosystems. Capabilities include cross-camera analysis, device-state reasoning, voice messaging via Nest speakers, and custom dashboards, with rate limits and blocks on actions like unlocking doors. Availability starts with Google Home Premium Advanced users in the US ($20/month or $200/year) and requires setting up a Google Cloud project.

The Verge · AISep 16, 17:00 UTC · 9h agoAI industry 2 sources

Claude comes for Gemini with its own take on Docs and Slides

Anthropic launched Claude Docs and Slides in beta and merged chats with Cowork into 'one Claude', challenging Google's Gemini-powered productivity tools.

Claude Docs and Slides launch in beta, letting users create, edit, share, and collaboratively comment on documents and presentations from any chat, with export options. Anthropic also merged regular chats and Cowork into 'one Claude', bringing Cowork, Design, and Artifacts into a single interface. The update closes ground with Google, which has expanded Gemini inside Docs, Sheets, and Slides, and rolls out to Pro and Max users first across web, desktop, and mobile.

The Verge · AIupdated Sep 16, 18:09 UTC · 8h agofirst Sep 16, 16:30 UTC · 10h agoAI industry 5 sources

Podcast: Humans Are Reading Your ChatGPT Conversations

404 Media podcast examines contractors who read real ChatGPT user conversations, plus Automattic CEO turmoil and a16z's enshittification essay.

404 Media's weekly podcast leads with an investigation into 'Project Lily,' the human contractors who review real ChatGPT users' prompts and conversations; the reporter reviewed internal documents about the program. It also covers leadership upheaval at Automattic, where CEO Matt Mullenweg was put on leave of absence and then claimed he was back in control. A subscriber-only segment discusses a16z's argument that enshittification is not real.

404 MediaSep 16, 14:19 UTC · 12h agoAI safety & security

EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media

EU Commission President von der Leyen warned AI will enable unprecedented hacking and announced Kids Act and Digital Fairness Act proposals regulating social media.

In her State of the European Union 2026 speech, Ursula von der Leyen warned that upcoming AI models 'will allow hacking on a level we never thought possible' and cited dangers of self-improving models, referencing a Hugging Face incident. She reaffirmed the AI Act as the core guardrail framework and pledged cooperation with Canada, the UK, and other partners. She also proposed a Kids Act banning social media under age 13 and personal accounts under 15, plus a Digital Fairness Act to be proposed in autumn.

SecurityWeekSep 16, 14:15 UTC · 12h agoAI policy

TP-Link Cameras 0-Day Vulnerabilities Allow Attackers to Spy on Users

Two zero-day flaws in TP-Link Tapo C200 cameras allowed authentication bypass and denial-of-service; fixed in firmware V5_1.4.6.

OPSWAT researchers Khoi Tran and Thai Do found CVE-2026-15315, an authentication bypass in the Tapo C200's local HTTPS interface that lets network-adjacent attackers replay an authentication value to gain administrator access, and CVE-2026-15316, an unauthenticated denial-of-service in the Wi-Fi onboarding process that crashes the camera's HTTPS service. TP-Link was notified on April 16, 2026, confirmed the flaws on July 10, and released patches on August 18, 2026 in firmware V5_1.4.6. Exploitation requires local network access but no valid account, existing session, or user interaction, exposing live feeds and stored recordings to surveillance risk.

Cyber Security NewsSep 16, 13:27 UTC · 13h agoVulnerability 3 sources CVE-2026-15315 CVE-2026-15316

A brief history of AI executives calling for regulation

The Verge chronicles the history of AI executives, from Samuel Butler and Turing-era warnings to Altman and Musk, publicly calling for AI regulation.

The article traces recurring calls for AI regulation, from Samuel Butler's 1863 warnings and Alan Turing's 1951 lecture to Bill Joy's 2000 essay and Microsoft's 2018 facial recognition stance. Modern examples include Elon Musk's 2017 remarks to US governors, the 2023 Future of Life Institute pause letter, and Sam Altman's 2023 Senate testimony. It argues such appeals from industry leaders who profit from AI warrant skepticism.

The Verge · AISep 16, 12:00 UTC · 14h agoAI policy

N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security

N0va phishkit targets US and EU organizations with trusted-brand lures, capturing tokens via legitimate authentication flows to gain SSO access to corporate resources.

The N0va phishing kit targets organizations in government, technology, consulting, and healthcare across North America and Europe with lures impersonating Microsoft Teams, SharePoint, OneDrive, DocuSign, Google Drive, Dropbox, Zoom, and Adobe Sign. Victims are guided through legitimate authentication flows, including device code phishing, after which N0va captures access and refresh tokens and abuses token-exchange or device-registration mechanisms to establish SSO access. ANY.RUN tracks the campaign via a characteristic /api/verification/init URL pattern and demonstrates detection in its interactive sandbox.

The Hacker Newsupdated Sep 16, 14:54 UTC · 11h agofirst Sep 16, 11:58 UTC · 14h agoPhishing & fraud in the wild 9 sources2

Top 10 Best AWS Security Tools in 2026

Editorial roundup ranking the ten best AWS security tools of 2026, from native GuardDuty and Security Hub to CNAPPs like Wiz and Prisma Cloud.

The article recommends enabling AWS-native services first: GuardDuty for threat detection, Security Hub for posture aggregation, the free IAM Access Analyzer, plus CloudTrail logging and Config rules. It then reviews third-party platforms including Wiz, Palo Alto Prisma Cloud, CrowdStrike Falcon Cloud Security, Trend Micro Cloud One, and Orca Security. It is an editorial vendor assessment with pricing described by model only, highlighting cross-account correlation and attack-path prioritization as third-party differentiators.

Cyber Security NewsSep 16, 09:57 UTC · 16h agoTools

You don’t have to join the hack-back program to inherit its risk

A new US presidential memorandum creates a vetted private hack-back program, leaving participating vendors and their customers with untested legal liability and collateral risks.

The August 12 National Security Presidential Memorandum directs the National Coordination Center, run jointly by DOJ and DHS, to approve covert surveillance and disruptive Cyber Effects Operations by vetted private companies, with a forfeitable bond of at least $1 million required as a contract condition. The analysis argues the criminal shield rests on an untested reading of the CFAA exemption at 18 U.S.C. 1030(f), with no civil safe harbor, no state-law preemption and no foreign-law protection. Non-participating organizations can still inherit risk through shared infrastructure collateral damage, lack of customer disclosure, Lloyd's bulletin Y5381 state-backed attack exclusions, and threat-intelligence pipelines feeding offensive proposals.

CSO OnlineSep 16, 09:00 UTC · 17h agoPolicy & legal

12 Best CASB Solutions Compared (2026): Features & Pricing

GBHackers' 2026 buyer's guide compares 12 CASB-capable vendors, arguing standalone CASB pricing has dissolved into per-user SSE subscriptions.

The article evaluates twelve CASB-capable platforms including Microsoft Defender for Cloud Apps, Palo Alto Networks' Prisma Access CASB, Netskope, iboss, Forcepoint ONE (Bitglass), Trend Micro Cloud App Security, and Skyhigh Security. It frames purchasing around SSE bundle economics, noting Defender for Cloud Apps ships inside Microsoft 365 E5 while Netskope, Zscaler, and Skyhigh price CASB into per-user SSE tiers. It also flags Saviynt, common on legacy roundups, as an IGA vendor rather than a true CASB.

GBHackersupdated Sep 16, 09:52 UTC · 17h agofirst Sep 16, 07:31 UTC · 19h agoIndustry 14 sources

MSPs say nearly half their customers rely on them for CISO services

Sophos survey finds MSPs act as CISOs for an average 46% of customers, mostly with partial compliance offerings and fragmented manual reporting.

A Sophos survey found MSPs estimate that 46% of their customers rely on them to act as CISOs, and most providers deliver only four to six of seven measured compliance services. More than half say they manage customers' full compliance programs, while compliance requirements influence roughly half of customers' security purchases. Nearly nine in ten providers use software, but most juggle multiple tools that cannot feed a central reporting platform, forcing staff to combine data manually. Providers estimated a unified platform would cut time spent on posture, compliance and reporting by about half; Sophos sells CISO Advantage via its Sophos Fusion system for this work.

Help Net SecuritySep 16, 04:30 UTC · 22h agoIndustry

Voters mostly don’t like AI and data centers, but neither party seems to have an edge

NYT/Siena poll of 1,503 likely voters finds 61% oppose AI data center construction, yet the issue ranks below 1% among midterm priorities.

A New York Times/Siena University poll of 1,503 likely voters conducted in early September found 61% oppose constructing data centers to power AI, with only 14% strongly supportive. Opposition drivers include environment/water usage (32%), local community impact (21%), and general distrust of AI (18%); 56% of opponents favor limits while 38% want a total ban. Trump 2024 voters split nearly evenly (49% support vs 45% oppose) while Harris voters opposed at 74%. Despite the sentiment, AI and data centers registered under 1% as a top midterm issue for most demographics, and neither party holds a clear trust advantage (42% Republicans vs 40% Democrats).

The Verge · AISep 15, 23:34 UTC · 1d agoAI policy

CISA and NIST Release Technical Checklist for Safeguarding Identity Tokens From Theft and Misuse

CISA and NIST published NIST IR 8587, final guidance for protecting identity tokens from forgery, theft, replay, and signing-key compromise.

NIST Interagency Report 8587 (September 15, 2026) expands the IA-13 'Identity Providers and Authorization Servers' control from NIST SP 800-53 R5.1.1, guiding federal agencies and cloud providers on SSO, identity federation, and machine-to-machine authentication. It requires hardware-backed signing-key storage for moderate-impact systems, 90-day key rotation for high-impact systems, token lifetimes under one hour, and sender-constrained mechanisms such as mutual TLS and DPoP. The report cites incidents including forged SAML assertions that exposed over 60,000 emails from a federal agency. It also extends guidance to agentic AI systems using signed tokens and urges post-quantum cryptography migration planning.

Cyber Security NewsSep 15, 17:04 UTC · 1d agoAdvisory1

America's Driver's License Breach Is a National Security Disaster

Dark web service Nexus sells 153 million US/Canadian driver's licenses linked to a breach of identity verifier IDScan.

Krebs on Security revealed a dark web service, Nexus, selling access to 153 million driver's licenses and 3 million travel documents from US and Canadian citizens, roughly 63 percent of all US licenses. Circumstantial evidence links the data to identity verification firm IDScan, which confirmed it is investigating a breach, and the FBI is probing the incident. Licenses belonging to senior US officials, including Pete Hegseth, an FBI assistant director, and Krebs's own contacts were verified as genuine. The exfiltration appears ongoing, with the database growing by nearly 400,000 licenses in a single day, and the data carries significant national security value for foreign intelligence services.

Hacker News · securitySep 15, 15:58 UTC · 1d agoData breach HN 26↑ · 4 comments3· 1 read

Présentation de Meta One : Un service d’abonnement offrant davantage de fonctionnalités et d’IA pour créer, se connecter et se démarquer

Meta launches Meta One subscription bundles with expanded Meta AI usage and creator/business tools, already at 15 million subscriptions and trials.

Meta launched Meta One, a new subscription service across Instagram, Facebook, WhatsApp and Meta AI with more than 50 features and 15 million subscriptions and trials to date. Core and Premium bundles add heavier use of compute-intensive AI features, including image creation/editing and video generation via the Muse models, plus tools like Restyle on Instagram. Pricing starts at EUR 2.49/month for single-product plans, EUR 6.99 for bundled consumer plans and EUR 16.99 for creator/business bundles; the core Meta AI experience remains free.

Meta NewsroomSep 15, 15:25 UTC · 1d agoAI industry

Introducing Meta One: A Subscription Service With More Features and AI to Create, Connect, and Stand Out

Meta launches global Meta One subscriptions bundling Instagram, Facebook, WhatsApp Plus with expanded Meta AI and Muse media generation, priced $2.99-$499 monthly.

Meta introduced Meta One, a global subscription service with plans for individuals, creators, and businesses, launching with more than 50 features across Instagram, Facebook, WhatsApp, and Meta AI. Individual bundles Core ($7.99/month) and Premium ($19.99/month) combine the single-product Plus plans with expanded use of compute-intensive AI capabilities, including image/video generation powered by Muse models and Instagram's Restyle. Business tiers range from Essential ($14.99/month) to Expert ($149/month) and Max ($499/month), with expansion planned to Edits, AI glasses, and more.

Meta NewsroomSep 15, 15:00 UTC · 1d agoAI industry

Meta’s new One subscriptions put a price on social media and AI

Meta's new One subscription tiers pair app perks with more Meta AI usage, from $2.99 single apps to $499 monthly business Max plan.

The Verge reports Meta's Meta One subscription bundles are now globally available, following the launch of its Muse AI assistant. Individual bundles include Core at $7.99/month and Premium at $19.99/month, combining Instagram Plus, WhatsApp Plus, and Facebook Plus with expanded Meta AI media generation including Muse images and Instagram's Restyle, cheaper than $11/month for all three standalone subscriptions. Creator and business plans span Essential ($14.99/month) to Expert ($149/month) and Max ($499/month), adding verification badges, impersonation protection, and Meta Business Agent capacity.

The Verge · AISep 15, 15:00 UTC · 1d agoAI industry

Cross-Domain Inference for Human Localization: Applying Wi-Fi RSSI Data to CSI-Trained Models

Researchers show CSI-trained Wi-Fi models can localize people from RSSI data at ~80% confidence, enabling privacy attacks from ordinary IoT devices.

The paper investigates cross-domain inference, feeding RSSI data into an existing CSI-based Wi-Fi pose prediction model. RSSI is accessible on IoT devices without elevated OS permissions or specialized drivers, unlike CSI. Using an RSSI dataset synchronized with video ground truth, the model predicted human locations with approximately 80% confidence when movement was present. The results imply a wide range of commodity IoT devices could be used for privacy invasion in Wi-Fi-dense environments.

arXiv cs.CRSep 15, 13:56 UTC · 1d agoResearch

What Zero-Day Response Should Be in the Post-Mythos Era

Picus Security outlines a zero-day response playbook where defenders simulate exploit technique chains before public PoCs exist.

The article uses PaperCut NG/MF's August incident — exploitation in the wild before any patch, with the first emergency fix bypassed the same day and a third landing September 1 — as the template for AI-accelerated vulnerability response. It walks through a hypothetical CVE-2026-1001 (explicitly made up) to argue defenders should map CVEs to ATT&CK technique chains and simulate them against NGFW, WAF, EDR, endpoint hardening, and SIEM controls within minutes of disclosure. It notes disclosure-to-exploitation time has fallen from 21.5 days to hours.

BleepingComputerSep 15, 13:45 UTC · 1d agoResearch in the wildCVE-2026-1001

Security Data Isn’t the Problem. Security Context Is.

Horizon3 blog argues security context, not data volume, is the SOC bottleneck, promoting its NodeZero integration with CrowdStrike Falcon Next-Gen SIEM.

Horizon3.ai published a vendor blog explaining how its NodeZero Proactive Security Platform integration with CrowdStrike Falcon Next-Gen SIEM brings validated exposure findings into existing security operations workflows. The post argues SOCs are now limited by confidence rather than visibility, needing context to decide which issues matter. It cites a global chemical manufacturer that validated exploitable exposures with NodeZero before completing a $2 billion merger.

Horizon3.aiSep 15, 13:12 UTC · 1d agoTools

Phishing Attacks Abuse Trusted Email Infrastructure and URL Cloaking to Evade Security Filters

VBSpam Q3 2026 test shows phishers abusing DKIM-aligned domains, Amazon SES, and multi-stage URL cloaking to defeat email filters.

Virus Bulletin's Q3 2026 VBSpam test (AMTSO-LS1-TP207) found phishing campaigns moving payloads past the email itself via browser-fingerprinting gates, redirect chains, and hidden POST requests. Examples include a Dutch McAfee/TotalAV scareware renewal scam, a German overdue-payment Web3 fraud delivered via Amazon SES from DKIM-aligned moolaah.com, and Romanian BCR PSD2 credential phishing embedding IPv6-mapped URLs resolving to 103.193.179.223. Net at Work NoSpamProxy ranked first with a 99.995 score while open-source Rspamd caught only 62.55% of phishing mail.

GBHackersSep 15, 13:04 UTC · 1d agoPhishing & fraud in the wild 2 sources

Weekly Cybersecurity Newsletter – Top 50 Biggest Cybersecurity Stories of the Week

GBHackers weekly digest rounds up 50 stories including Microsoft's 973-CVE patch drop, exploited Cisco FMC flaws, and Claude agent attacks.

GBHackers' September 7-12, 2026 newsletter summarizes the 50 biggest cybersecurity stories of the week. Highlights include Microsoft patching a record 973 CVEs with two exploited zero-days, active exploitation of Cisco FMC, Check Point VPN and Ivanti flaws, China-linked crews chaining Chrome and Windows zero-days, AI agents mass-exploiting PaperCut to compromise 440 servers, and the emergence of Panzer cross-platform ransomware. It also covers Anthropic and OpenAI agentic AI incidents and CrowdStrike's SafeMind launch.

GBHackersSep 15, 11:44 UTC · 1d agoIndustry in the wild