Microsoft has apologized and reported broad recovery, but its account of the cause differs from what it told customers on Thursday, and its full review has no published date. Microsoft has attributed this week’s Microsoft 365 outage to a problem introduced during an earlier network capacity upgrade, apologizing to customers while keeping the incident open […]
Continue Reading
Microsoft’s FORGE Lab uncovered bugs that allow safe Rust code to trigger undefined behavior, including an 11-year-old flaw and weaknesses affecting stable releases. Rust’s reputation for preventing memory-safety vulnerabilities faces a fresh test after Microsoft researchers uncovered several flaws in the language’s standard library, including bugs that can allow programs written entirely in safe Rust […]
Continue Reading
The cloud deployment provider will begin suspending services on December 1, with a complete shutdown scheduled by year-end, after attackers accessed customer data, credentials and infrastructure in two incidents. Cloud deployment provider Zeabur is winding down its platform after two security incidents in less than two months exposed weaknesses in its infrastructure and credential management, […]
Continue Reading
The partnership will let enterprises buy OpenAI models through Google Cloud Marketplace, while Microsoft remains OpenAI’s primary cloud partner. OpenAI is partnering with Google Cloud to make its frontier AI models and Codex coding agent available through Google Cloud’s Model Garden, giving enterprises another route to deploy OpenAI technology within their existing cloud environments. The […]
Continue Reading
Weak private keys could allow attackers to forge trusted certificates and impersonate websites; Google, Mozilla and Cloudflare have taken steps to contain the risk Private keys associated with eight digital certificates issued by Indian certification authority eMudhra have been compromised, according to a Mozilla security engineer, potentially allowing attackers to forge trusted certificates and impersonate […]
Continue Reading
Researchers found prompt-based safeguards barely slowed malicious instructions planted in everyday mobile content, a warning for enterprises piloting agents that act on employee devices. AI assistants that operate smartphones can be tricked by fake instructions hidden in everyday messages, emails and calendar invites, a new study has found. On average, the assistants spotted the planted […]
Continue Reading
Six METR employees can examine internal tools and safety practices, with publication rights designed to let them report risks without Anthropic’s approval. Anthropic has given six employees of AI evaluation nonprofit METR access to internal systems and tools comparable to those used by its own risk assessment teams, in a move designed to give independent […]
Continue Reading
Cisco Talos and Recorded Future identified four malware delivery methods and exposed infrastructure linked to the campaign, which researchers assess may have a Kazakhstan connection. A threat group targeting government organizations across Central Asia and the Commonwealth of Independent States (CIS) has used four different methods to deliver malware, including a WinRAR vulnerability exploit, while […]
Continue Reading
The AI model can identify and help fix complex software vulnerabilities, but Google is restricting access to its less-guarded cybersecurity capabilities through its Fairwind Program Google is expanding access to Gemini 4 Argon, its latest AI model for cybersecurity defense, to hundreds of additional vetted partners as the company seeks to help security teams identify […]
Continue Reading
The ecosystem combines phishing kits with an underground marketplace selling compromised cloud environments, enabling attacks against organizations in more than 150 countries. Microsoft has uncovered a cybercrime supply chain that combines phishing-as-a-service kits with an underground marketplace selling compromised cloud environments, enabling criminals to send more than one billion phishing emails and SMS messages to […]
Continue Reading