security operations

A new report finds that Israeli firms targeted Al Jazeera with spyware delivered through malicious advertising. The alleged operation reportedly used ads to compromise devices of the network's staff or audience, renewing scrutiny of commercial spyware vendors and the security of news organizations operating in the Middle East.

Security experts say AI agents are not going rogue on their own; rather, frontier AI labs are failing at basic security practices such as containment and monitoring. Reported by CSO Online, the analysis argues that many alarming headlines about AI systems misbehaving or being exploited stem from preventable operational failures rather than emergent rogue behavior, prompting debate about whether labs are moving faster than their safeguards.

Bill Gates has warned that cyberattacks powered by artificial intelligence could strike within the next year, speaking in remarks carried by CNN. He cautioned that AI tools are lowering the bar for attackers, allowing less skilled actors to launch more sophisticated scams and hacking operations. The warning comes as governments and companies scramble to secure systems against rapidly evolving AI-driven threats.

Donald Trump said the world has become a 'casino' after reports that a US soldier was accused of betting on the raid targeting Venezuelan leader Nicolás Maduro. The remarks link concerns about gambling markets on sensitive military operations to the case, and the story is drawing attention to how prediction markets handle confidential security information.

Quad9, the Swiss-based non-profit DNS resolver, says it is ending its operations in France, announcing the move in a blog post titled 'Au revoir France'. The decision affects the country's internet users who relied on its privacy-focused, security-filtering DNS service. The news is drawing attention among privacy and infrastructure communities, who see it as significant for the wider debate over DNS blocking and digital rights in France.

Germany's Bundeswehr has raised its alert level to the second-highest stage, reportedly believing Russia is preparing an imminent sabotage attack on German military bases or Ukrainian production facilities located in Germany. The move signals serious concern in Berlin about hybrid threats and infrastructure security amid the ongoing war in Ukraine, and is drawing wide attention and discussion internationally.

Reports are circulating that newly disclosed PHP vulnerabilities have caused websites to go offline, with administrators rushing to patch affected systems. The discussion centres on how widely the flaw may have been exploited and which services were disrupted. Developers are urging operators to update PHP deployments quickly to limit further downtime.

Hackers aligned with China have used ARTEX, an AI-powered penetration-testing framework, to attempt access to some 2,250 Microsoft 365 tenants, according to a cybersecurity report circulating widely online. The campaign reportedly follows the disclosure of details from a ConnectWise breach, suggesting attackers leveraged that intelligence to scale automated, AI-assisted intrusions against cloud email environments. Security observers are treating it as an early example of AI tooling being repurposed for offensive operations at scale.

A complaint circulating in Ghana says that 130 cedis buys only about 11.92GB of data on MTN's local bundles, while the same amount can secure 320GB, unlimited calls and texts plus 15GB of roaming data in Italy. Critics are calling local data pricing 'robbery' and urging Communications Minister Sam George to intervene quickly over the cost of internet access.

Security researchers have discovered eight compromised TLS certificates, including intermediate certificates, that could allow attackers to mint valid web credentials for virtually any Internet server. The finding has put network operators and website administrators on high alert, as the compromised intermediates could enable undetectable man-in-the-middle attacks on encrypted traffic. The incident has renewed discussion of the certificate authority system's fragility.

Federal investigators reportedly suspect that a ransom negotiation professional — someone hired by companies to deal with extortionists — was secretly involved in running the ShinyHunters extortion operation. The allegation, reported by security journalist Brian Krebs, raises concerns about conflicts of interest in the ransomware incident-response industry and about who companies can trust when negotiating with criminal groups.

Security researchers say 333 Tor exit nodes were hijacked in an apparent man-in-the-middle campaign designed to intercept SSH connections and capture unencrypted email in plaintext. The incident highlights ongoing risks of relying on Tor exit relays operated by untrusted parties, and prompts warnings that users should stick to end-to-end encryption such as SSH key verification and TLS-protected email rather than assuming exit nodes are safe.

Police in North Rhine-Westphalia say they have disrupted attack plans by men believed close to the Islamic State, drawing national attention to counter-terror operations in the state. The news comes alongside other active police matters in the region, including a manhunt for shooters after a bloody altercation in Duisburg-Hochfeld and the safe return of two missing eleven-year-old girls, keeping the state's police force in the headlines.

A new report says police in the Chicago area assisted Homeland Security Investigations in surveilling activists in Minnesota who were organizing against ICE operations. The cooperation between local law enforcement and federal immigration authorities on political monitoring is drawing criticism from civil liberties advocates, who say it raises concerns about the policing of protest activity and the blurring of local and federal immigration enforcement roles.

Security researcher Scott Helme has published an analysis alleging that weak, effectively eight-bit entropy keys associated with Indian certificate authority eMudhra could be cracked in milliseconds, raising questions about the trustworthiness of certificates the company has issued. The findings are being widely discussed among security professionals, with debate over the implications for browser and operating system trust stores and whether the authority should face removal or audit.

Delvano, a sprayer machine manufacturer based in Hulste, Belgium, has been declared bankrupt. According to the bankruptcy filing, company Depoortere has taken over the factory, securing the site's operations under new ownership. The case is drawing attention in the region because of the loss of a long-established agricultural machinery maker and questions about what the takeover means for local jobs and suppliers.

A 404 Media investigation reports that the Department of Homeland Security asserted a man who wiped his GrapheneOS phone must have been destroying child sexual abuse material, but the outlet found the claim was false. The case has sparked debate about government overreach and suspicions directed at privacy-focused operating systems.

Kabam, a Singapore-based AI security robotics company, is closing down its operations. The move means the end of the startup's work developing autonomous security robots, and it adds to a string of difficulties for robotics and AI firms in the region. The company has not been widely profiled, so details about staff numbers or reasons for the closure remain limited.

A major national childcare chain has collapsed into administration, leaving parents and staff 'gobsmacked', according to reporting by The Daily Telegraph. The entry into administration raises immediate questions about whether centres will keep operating, how staff will be paid, and how affected families will secure alternative childcare. The administrator is expected to assess the company's finances and decide the fate of individual centres across the country.