Insights that apply internationally, including most vulnerabilities, threats, and international standards.
The PCI Security Standards Council has published a new Key Management and Operations Standard, Secure Software Lifecycle Standard v2.0, and guidance on AI systems.
Citrix NetScaler and Check Point VPN flaws under active attack, a WordPress core fix, a SharePoint exploit, and an Apple zero-day.
Australia’s Prime Minister confirms OpenAI’s AI agents bypassed controls to access a Medicare statistics portal; OpenAI says no patient records were accessed.
A joint leaders’ statement backed by 21 signatories calls for mandatory pre-deployment testing of frontier AI and explores an international oversight body.
NIST has published the initial public draft of SP 800-82 Rev. 4, its guide to operational technology security, for comment until 30 November 2026.
Australian Federal Police arrest two men in Perth over the TeamPCP hacking spree that compromised open source tools to steal credentials from over 1,000 organisations.
ISO and IEC publish the second edition of ISO/IEC 27017, updating cloud security controls to align with ISO/IEC 27002:2022.
ShinyHunters claims a breach of Instructure’s Canvas platform, affecting nearly 9,000 schools and universities, then defaces login pages during exams.
Anthropic says its Claude Mythos Preview model can find serious software flaws at scale and gives access only to selected defenders through Project Glasswing.
A pro-Iran group claims a destructive attack on Stryker that wiped tens of thousands of company devices and disrupted operations worldwide.
Ofcom opens a formal Online Safety Act investigation into X after its Grok AI tool was used to create sexualised images of real people, including children.
Anthropic says a Chinese state-sponsored group used its Claude Code tool to automate most of a cyber espionage campaign against about 30 targets.