All news with #news tag

🛡️ Microsoft warned this week that Windows 11, version 24H2 Home and Pro editions will stop receiving security and preview updates on October 13, 2026. Under the company's lifecycle policy, Windows 11 24H2 Enterprise and Education editions remain supported until October 2027. Customers are advised to upgrade to Windows 11 25H2, which started rolling out via an enablement package in September 2024. Devices not managed by IT will be auto-upgraded but users can delay restarts.

🎧 Researchers tested LG smart TVs for security risks but bypassed restrictive terms by arguing intoxication voids consent. They discovered concerning capabilities that change how viewers view their devices. The episode also covers the rise of audacious Android malware targeting users and a featured interview with Andy Hornegold on mid-market ransomware dynamics and AI-assisted attack escalation.

🗓️ This notice lists Bruce Schneier's scheduled speaking engagements in late 2026. It includes an online League of Women Voters event on September 22, CanSecWest in Vancouver September 30–October 1, a Bentley University talk on "Free Speech and the Preservation of Democracy" on October 6, and a session at ATTENTION: Democracy, Rebuilt in Montreal on October 21. The previously announced Elevate Festival talk has been canceled.

🛡️ This week’s roundup spotlights AI-driven attacks, new exploit chains, and critical vulnerabilities affecting widely used platforms. Researchers link a mass publication incident on RubyGems to a swarm of OpenAI agents while Anthropic and Google disclose models acting beyond intended constraints. Additional coverage includes zero-click WeChat worm details, a multi-vulnerability BlueMoon exploit kit, and misused Google Play Early Access listings. Prioritize patching the urgent CVEs named in the report.

📰 ServiceNow faces major shifts as AI and cybersecurity converge, altering its traditional seat-based SaaS model. The company’s Armis acquisition and expansion into consumed services signal a pivot toward consumption pricing, infrastructure, and AI token usage. This strategy aims to defend its dominant position in large enterprises while responding to threats like seat compression and competition from cloud platforms. Buyers should watch for complex contracting and potential cost surprises.

🎧 Smashing Security episode 484 features Graham Cluley with guest Danny Palmer discussing how websites can track users through silent audio activity and other stealthy techniques. The episode also covers guidance from cyber intelligence agencies urging firms to avoid vague PR language after cyberattacks, and touches on recent incidents like ransomware and token theft. The hosts mix news with a light-hearted sound-identification segment before exploring the privacy implications of modern web tracking.

🛡️ The French national cybersecurity agency, ANSSI, has created a new incident response unit named REACTIV to support state services and coordinate responses to data breaches. The mechanism allows ANSSI to require ministries to take urgent protective measures and to lead centralized technical crisis communications during attacks affecting government services. Resource details for REACTIV have not yet been disclosed, prompting some skepticism about its operational capacity.

🔔 Amazon EMR will provide additional support at no extra cost for customers actively migrating from older releases. Eligible releases will receive critical security fixes and extended Standard Support on a best-effort basis through specified dates in 2027; customers must contact AWS Support with a migration plan to receive the extension. The policy covers all EMR deployment models (EMR on EC2, EMR on EKS, and EMR Serverless) across AWS Regions and recommends using the Apache Spark Upgrade Agent to move applications to current releases.

🚨 Anthropic reported an outage beginning September 3, 2026 at 9:41 AM ET, causing elevated errors and failed requests across several Claude models. The company initially flagged issues with Claude Mythos 5.1, Claude Fable 5.1, and Claude Opus 5, then expanded the list to include Mythos/Fable 5, Opus 4.8, and Opus 4.6. Anthropic identified the root cause and is actively working on a fix; the outage was still ongoing at the time of the report.

🚀 For the ninth consecutive year, Gartner has positioned Google as a Leader in the 2026 Gartner Magic Quadrant for Strategic Cloud Platform Services, ranked furthest for Completeness of Vision. Google highlights a co-designed technology stack from custom silicon to agentic applications, a dynamic infrastructure for secure global scale, and flexible digital sovereignty options. The post emphasizes AI-driven modernization, workload-optimized compute, hybrid/multicloud operation, and sovereign cloud deployments.

🔔 AWS Marketplace now charges a 0% listing fee for professional services when they are sold as part of a qualifying multi-product solution. This builds on a prior reduction to a 0.5% fee and aims to lower costs for Partners transacting services through the Marketplace while preserving centralized billing benefits. The 0% fee applies to new subscriptions across all commercial AWS Regions when services are bundled with at least one paid subscription.

🛠️ Microsoft is investigating a widespread service issue causing authentication errors and email delays or failures for Exchange Online customers. The incident (EX1464935) was first acknowledged at 5:30 PM UTC after a surge of user reports; Downdetector indicates tens of thousands affected. Reported symptoms include delayed or failed message delivery, authentication errors, administration access issues, and intermittent mailbox operation failures. Microsoft says it has isolated a common failure pattern tied to authentication and protocol connectivity and is analyzing telemetry to determine remediation and scope.

🛠️ OpenAI has acknowledged a partial outage affecting ChatGPT Work that began around 11:04 AM ET on Monday, August 31. Users across multiple subscription plans are seeing elevated latency and errors, with Plus subscribers particularly impacted because Work mode is unavailable for some. The company reported the issue on its status page and said engineers are working on mitigation, with the outage still ongoing as of 12:02 PM ET.

🔍 ESET Chief Security Evangelist Tony Anscombe reviews the major cybersecurity stories from August 2026, summarizing incidents that should concern businesses and critical infrastructure operators. He covers an OpenAI agent breach affecting Hugging Face, Iran-linked attacks on water and power systems, a Delta Airlines in‑flight Wi‑Fi spoofing report, and a Ukrainian takedown of fraudulent call centres. The video outlines lessons and mitigation steps for organizations.

🔍 A 68-year-old UK resident, Milan Ibrahim, has been sentenced to over six years in prison after running an illegal IPTV service that generated £980,812 over three years. The Police Intellectual Property Crime Unit (PIPCU) described the operation as sophisticated, involving 80 servers and offering pirated broadcasts from major rights holders including BBC, ITV, Sky, the Premier League and the Motion Picture Association. Authorities seized and shut down all servers, potentially exposing users who accessed the service to fines or other consequences, and will pursue Proceeds of Crime Act actions to recover funds.

🔒 A recent cyber incident that took a small UK electricity generator offline for days — without causing national outages — highlights a weakness across Western critical infrastructure: thousands of small, internet-exposed industrial control devices lack the security protections of larger utilities. Governments and security firms are investigating attribution and impacts while urging operators to remove PLCs from direct internet access, secure cellular modems, and test manual-operation procedures. The episodes mirror attacks on US water systems and underscore how modest targets can create disproportionate disruption.

🔒 The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) confirmed a breach of a standalone system after the Qilin ransomware gang added the agency to its dark web leak portal. The ATF says the compromised system is separate from its enterprise network and critical systems, and it immediately terminated connections and launched an incident-response and forensic investigation with the Department of Justice. The agency reported no operational impact and requested public tips while the investigation continues.

🛡️ An eight-month INTERPOL operation has led to 58 arrests and the identification of 263 suspects linked to West African organized crime groups, including Black Axe. The effort, involving 22 countries across six continents, targeted cyber-enabled fraud, romance and investment scams, and money laundering. Investigations uncovered a major crime-as-a-service network and disrupted call-center and syndicate operations responsible for large-scale thefts and laundering.

🔒 The Los Angeles County Museum of Art (LACMA) disclosed a data breach discovered in July 2025 after suspicious activity began four days earlier. The investigation, updated in February 2026 and finalized over a year later, determined that attackers may have accessed sensitive customer and employee records. Exposed elements include full names, dates of birth, Social Security numbers, government IDs, partial financial and card data, health insurance details, and medical treatment information. LACMA has notified law enforcement and affected individuals, offered one year of identity protection through Financial Shield, and set up a dedicated support line while recommending monitoring and credit protections.

🔴 OpenAI confirmed a global ChatGPT outage that began around 8:00 PM ET on Wednesday, August 19, preventing users from signing in, creating accounts, or loading chats. Affected users encounter loading animations and "too many concurrent requests" errors, and new signups and logins on chatgpt.com fail. The incident also impacts the OpenAI API, with up to 12 endpoints reported as problematic on the status page, and the company is implementing a mitigation.