Security
Hollowgraph malware turns Microsoft 365 calendars into secret-stealing "dead drop"
Command-and-control tool targets Israeli entities and shares technical similarities with a backdoor previously linked to an Iranian threat actor.
Internet
AI
"Nine seconds of terror": How to stop AI agents wiping out systems at machine speed
How can organisations protect themselves against bad bots hellbent on destroying core production data?
Critical Systems
The Silicon Age Collapse: Systemic risks that could derail digital civilization
The first part of an ongoing series exploring threats that could trigger catastrophic cascading failures across the modern world.
AI
Bureaucracy-as-a-service: The grim, grey future of AI government
From courts to call centres, AI is spreading across the public sector. We examine the UK government’s plans and the risks of an automated state.
Security
"AI didn’t invent new classes of risk. It poured fuel onto existing ones."
Dr Andrew Bolster sets out new security approaches that respond to the accelerating pace of AI-enabled software development.
Internet
"Speak to human!" AI chatbot doom loops and the strange death of SaaS web apps
"Winners will need auditability, permissions, simulations, escalation paths and a harness that knows when to shut the machine up."
AI
“We’re expanding in one area”: Salesforce reveals the only department still hiring humans
Want a job at Salesforce? Then you'd better start sharpening up those non-automatable people skills...
AI
The evolution of resilience: Driving AI innovation without increasing risk
"Artifical intelligence is altering the threat landscape and unsettling long-held assumptions about security, governance, and resilience."
Financial Systems
European Central Bank summons lenders over AI security threat to banking infrastructure
Financial chiefs rush to address the risk of automated exploits and accelerated cyber attacks following the release of Anthropic’s Mythos.
Security
The second coming of Shai-Hulud: Worm returns in massive supply chain campaign
“The scale and speed of the spread resemble some of the most disruptive supply chain incidents we have seen in recent years."
Security
Why AI and deterministic offensive security tools should be used together, not separately
"Practitioners do not experience their work as a choice between paradigms. They experience it as a sequence of problems."
Security
Nation-state actors now behind majority of serious UK incidents, NCSC security chief warns
" Intelligence and military agencies are displaying an eye-watering level of sophistication in their cyber operations."