All news with #news tag

🕒 Amazon DynamoDB Streams now supports timestamp-based stream processing, allowing you to begin reading stream records from a specific point in time using the AT_TIMESTAMP shard iterator. Previously, consumption could only start from the oldest retained record or from new records written after starting. This feature integrates with the Kinesis Client Library via the DynamoDB Streams Kinesis adapter and is available in all commercial, GovCloud, and China Regions at no extra charge beyond standard API requests.

🔎 Law enforcement in 17 countries across Latin America and Europe arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material via messaging groups. The multi-phase effort, called International Effort Confluencia, ran between March and September 2026 and included 127 search warrants and the rescue of a five-year-old victim. Authorities seized large volumes of abuse files and expect further identifications and safeguarding actions as investigations continue.

🔒 French authorities warned supermarkets to disconnect internet-exposed refrigeration controllers after a cyberattack spoiled chilled food across hundreds of stores. CERT-FR advised using secure VPNs, restoring defaults, and applying IP filters as short-term mitigation while vendors like Dixell and Danfoss published firmware and password guidance. The incident highlighted widespread exposed OT interfaces and the risk of remote management models such as "refrigeration as a service."

🔒 Starting today, US AWS customers can sign up and pay invoices directly from a USD bank account using ACH direct debit. Customers securely link a personal or business bank account during sign-up or via the Payment preferences page in the AWS Billing and Cost Management console. The flow authenticates ownership through the bank's mobile app or online banking credentials and the verified account is set as the default payment method for future invoices. ACH direct debit is offered at no additional cost.

🔎 The FBI announced on October 9 that it arrested another suspected ShinyHunters co-conspirator, a Canadian citizen taken into custody in Pennsylvania. The agency has not released the suspect's name or filed public charges, and details come from media reports citing unnamed sources. The arrest follows earlier detentions in the Netherlands and Jordan as investigators continue to probe the breach of the FBI jobs portal.

📰 A Ukrainian-Russian dual citizen, Oleg Korniev, pleaded guilty to leading a large money laundering ring that processed millions for cybercriminals. The organization, Your Mule Cashout (YMCO), recruited over 15,000 money mules, primarily in the U.S., to move stolen funds through bank accounts and wire services. Korniev admitted laundering at least $7 million and faces substantial prison time and restitution obligations.

🛰️ VirusTotal now scans the public IPv4 space daily and stores per-IP port records including status, lifecycle timestamps, protocol/product/version, CPEs, banners, OS/device type, fingerprints and protocol details. Closed ports are retained with last-seen timestamps, and all data appears in the Ports tab and via searchable modifiers in the search bar and API. The platform supports bracketed modifiers to pin attributes to specific ports and enables combined queries for precise pivoting.

🔒 The co-creator and operator of Empire Market, a major dark web marketplace, was sentenced to 40 years in prison for facilitating roughly $430 million in illicit transactions between 2018 and 2020. Operating as a TOR hidden service and modeled after AlphaBay, the site handled over 4 million transactions and primarily trafficked controlled substances. Authorities seized substantial cryptocurrency and assets tied to the operation, and the operator admitted to using encryption and tumblers to evade law enforcement.

🔍 Group-IB found the Telegram account tied to the October 6 ASOS notification was previously active in gaming-item trading communities and used multiple aliases. Investigators say the channel was created the same day and have not found evidence that ASOS customer data was dumped or that Snowflake was compromised. ASOS confirmed possible access to basic contact details, restricted notification-platform access, and is working with advisers and authorities while customers are urged to remain vigilant.

🔒 The U.S. Department of Justice says the alleged developer of Ploutus malware, accused of orchestrating ATM jackpotting that stole millions, has appeared in U.S. court following his arrest. Known as "Prometheus" or "The Engineer," 50-year-old Anibal Alexander Canelon Aguirre faces multiple federal charges tied to attacks from February 2024 to December 2025. Authorities allege the stolen funds were laundered and transferred to accounts controlled by the Tren de Aragua criminal gang, which has been designated by U.S. agencies.

🚀 Cloudflare Impact is funding civil society groups with over $7.5M in developer credits to help non-profits build secure, scalable AI tools. Project Galileo continues to protect thousands of public-interest domains while lightweight serverless services and Workers AI reduce infrastructure cost and complexity. The company launched a nonprofit startup cohort and provides engineering support to help organizations automate sensitive workflows safely.

🔒 OpenAI has dismissed three members of its safety team for mishandling and leaking sensitive company information, the company said after an internal investigation. The affected researchers — Jasmine Wang, Tomek Korbak, and Mikita Balesni — reportedly shared confidential details with a third-party AI-safety organization, and the leaked material concerned OpenAI's infrastructure architecture. Their departures follow reporting that the company deprioritized some safety protocols during model development, and come amid broader incidents of AI agents probing government and private websites.

📰 New campaign finance disclosures reveal how US federal and state political campaigns are adopting AI tools and what they report spending. Itemized FEC data back to 2020 shows at least $17 million disclosed across hundreds of campaigns, while four state datasets (California, Colorado, Massachusetts, Washington) detail more localized adoption since 2022. Major vendors like OpenAI, Anthropic and niche political platforms such as AmplifAI, Daisychain and Campaign Nucleus feature prominently in filings, with distinct partisan usage patterns and most spending concentrated via consultants and outside groups.

🔒 Join Microsoft Security at Ignite 2026 in San Francisco or online from November 17–20, 2026, with a Security Pre-Day on November 16. Hear executive keynotes, get hands-on with agentic security solutions, attend expert meetups and MISA partner demos, and participate in sessions across four security themes covering agentic SOCs, securing deployed agents, foundational Zero Trust practices, and data protection.

🌐 Cloudflare’s Impact programs have reached $100 million in donated services, protecting thousands of organizations including newsrooms, civil society groups, governments, and schools from cyberattacks. Originally launched as free services, programs like Project Galileo now defend over 3,500 domains in 120+ countries and blocked billions of attacks in 2025. Cloudflare’s efforts have evolved to include developer support, hackathons for journalists, and tools to help public interest groups adapt to AI-driven threats.

🛡️ This week’s recap highlights a string of practical, opportunistic attacks—placeholder domains turned malicious, service-account compromises, and active exploitation of Citrix NetScaler ADC and Gateway bugs. Vendors and defenders are urged to patch high-risk CVEs and review forgotten non-human identities. The incidents include a $387M crypto theft, new evasive stealer techniques, and law enforcement takedowns of phishing infrastructure.

🚀 Cloudflare is launching The Cold Start, a live startup competition at Cloudflare Connect in San Francisco to give five early-stage companies five minutes each to pitch. The program seeks ambitious founders with compelling ideas rather than polished decks, and finalists will present to experienced judges for a chance to win $500,000 in Cloudflare credits and other prizes. Applications close October 2, 2026, and Cloudflare will cover travel for the five finalists.

🛡️ This week's recap highlights widespread, opportunistic threats affecting trusted software, plugins, and services, from active exploitation of a Cisco ISE auth bypass to novel AI agent supply-chain attacks. It covers high-impact incidents like domain seizures for DDoS services, credential-stealing browser extensions, and ClickFix social-engineering campaigns that weaponize legitimate cloud services. The briefing urges rapid patching, governance for AI agents, and runtime defenses to limit fast-moving attacks.

🔒 Security experts warned that a Gyazo breach disclosed on September 11 exposed nearly 24 million customer records and an additional 490 million image metadata entries after attackers exploited an upload-server vulnerability. The exposed metadata included image IDs, source IPs, user agents, EXIF location data, OCR-extracted text, titles, source URLs, and hashed passphrases, potentially allowing unauthorized access to images. Gyazo's developer, Helpfeel, said some image viewing was temporarily disabled while remediation occurred and urged password changes and vigilance against phishing.

🔍 The IANS and Artico Search 2026 Security Budget report shows average security budgets rose 5% but the median remained flat, leaving 55% of CISOs with no increase or cuts. Funding outcomes vary by company performance and ownership, with VC-backed and high-revenue firms more likely to boost security spending. AI is the top new priority, often funded outside formal security budgets, and organizations tracking AI spend more frequently report increases. The report advises CISOs to create a distinct AI budget line to clarify costs and priorities.