Security
The second coming of Shai-Hulud: Worm returns in massive supply chain campaign
“The scale and speed of the spread resemble some of the most disruptive supply chain incidents we have seen in recent years."
Internet
Security
Why AI and deterministic offensive security tools should be used together, not separately
"Practitioners do not experience their work as a choice between paradigms. They experience it as a sequence of problems."
Security
Nation-state actors now behind majority of serious UK incidents, NCSC security chief warns
" Intelligence and military agencies are displaying an eye-watering level of sophistication in their cyber operations."
Government
Government security leaders are still sharing sensitive information on WhatsApp
"Consumer applications were never designed to protect confidentiality or meet the demands of high-security environments."
AI
"AI agents are like cyborg teenagers": How to responsibly raise autonomous models
"Without appropriate rules and boundaries in place, agentic AI will be left to run riot, with speed and independence spiralling into risk."
AI
Worried about Mythos and the AI apocalypse? Don't panic: The UK government has written a letter
Westminster responds to a new Anthropic model that's been (over)hyped as an omen of imminent cybersecurity doom.
Critical Infrastructure
Ex-Lord Mayor “alarmed” over government's response to Atlantic undersea cable risks
"Was this the first meeting that senior ministers have had with senior industry figures?"
Enterprise
Your SBOM won't save you: Closing the provenance gap in software security
"The industry has spent five years building better autopsies. Now it needs to start building gates."
AI
AI slop is the "ideal cover" for covert agent communications, researchers say
Bots can hide secret information that's invisible to most humans within LLM-generated "synthetic multimedia content".
Cyberwar
Russian cyber-spies target UK and European officials via messaging apps
High-risk figures warned to exercise extreme caution when using WhatsApp, Signal and other third-party applications.
Enterprise
From beerware to the chicken dance: The world's weirdest open source licenses
"It’s tempting to dismiss these licenses as curiosities - but they highlight a fundamental tension and a lesson for technical leaders."
Security
China’s Red Menshen “sleeper cell” spies caught hiding deep inside global telecoms networks
Rapid7 uncovers "ongoing" espionage campaign involving long-term persistence within highly sensitive communications environments.