Cloud Backup Attack Disrupts Recovery, Plus 2 Stories
ConnectWise suspends Cloud Backup after attackers enter Microsoft 365 tenants. Plus the truth about AI pricing and Meta’s disputed website terms.
privacy
Windows Fixes an Exploited Bypass, Plus 3 Stories
October’s Windows security update fixes an exploited download-warning bypass. Plus a Supreme Court privacy case, an Ivanti VPN zero-day, and a Docker Hub token flaw.
Supermarket Fridges Hacked, Plus 3 Tech Stories
A supermarket refrigeration cyberattack spoiled food and caused fires in France. Plus an exploited Bricksforge flaw, workplace data sales, and bank AI scrutiny.
AI Agents Need Boundaries They Can’t Rewrite
Claude’s false police tip and Microsoft’s new Execution Containers point to the same lesson: AI agents need limits the model cannot rewrite. Plus FortiBleed, Veeam backup risk, connected-car privacy, outsourced patch failures, and AI’s growing infrastructure bill.
FortiBleed Can Lock Out Businesses, Plus 3 Stories
FortiBleed is still using stolen credentials to lock organizations out of Fortinet gateways. Plus voter-data privacy, Cleo AI refunds, and an AI-drafted lawsuit.
Windows Gives AI Agents a Sandbox, Plus 3 Stories
Microsoft Execution Containers give Windows AI agents enforceable limits around files, networks, credentials, and system capabilities. Plus political AI calls, a critical Splunk flaw, and satellite phone service.
Your Car Is Talking to Big Tech, Plus 3 Stories
Connected cars and apps are sharing identifiers and location data with major tech companies. Plus exploited Zammad flaws, charging roads, and AI bug-report spam.
Apple Tightens Mac Data Access, Plus 4 Stories
Apple is tightening macOS Full Disk Access as AI agents raise the stakes. Plus a school-vendor breach, fake Zoom malware, Amazon’s data-center promises, and a hijacked Microsoft account.
California Curbs Web-Tracking Suits, Plus 3 Stories
California narrows one heavily litigated web-tracking theory under CIPA. Plus an exploited FortiMail zero-day, 543,699 live GitHub credentials, and Amazon’s camera-equipped delivery glasses.
FTC Opens AI-Agent Probe, Plus 3 Tech Stories
The FTC is investigating AI-agent risks as researchers report failed government-site probes. Plus an exploited Cisco flaw, rent algorithms, and smart-glasses privacy.
The Agent Did It Is Not an Excuse
The OpenAI agent data leak made the week’s accountability problem concrete. Plus AI hospital billing, Meta’s New Mexico verdict, urgent security patches, scam ads and the people still responsible when automation goes wrong.
Meta Jury Finds 43.9M Violations, Plus 3 Stories
A New Mexico jury found 43.9 million consumer-protection violations involving Facebook. Plus active Check Point attacks, an FTC look at scam ads, and a Cloudflare container flaw.
Google Fined €403M Over Location Data, Plus 3 Stories
Google was fined €403 million over location-data practices. Also: actively exploited Veeam and Zyxel flaws, the FAA’s new SMART traffic AI, and Australia’s fight over AI training and copyright.
Smart Glasses Hit a Privacy Reckoning, Plus 3 Stories
Smart glasses trigger privacy and workplace scrutiny; an exploited Acronis hosting flaw needs patching; Russia’s MAX exposes super-app trust; and Claude now leads 26% of Anthropic’s AI R&D.
220M Travel Records Exposed, Plus 4 Tech Stories
An exposed Vietnam-linked APIS database held 220.8 million passenger and crew records. Plus active MikroTik attacks, Microsoft 365 phishing that steals sessions after MFA, a 1.08-million-person Mathspace breach, and Australia’s plan to let users switch off algorithmic feeds.
PaperCut Is Under Active Attack, Plus 4 Tech Stories
PaperCut NG/MF is under active attack and needs Emergency Patch Release 2. Plus: DHS data demands, McKesson’s breach, a Lucid recall, and Anthropic’s music lawsuit.
1 2