An Accenture contractor has been removed from FBI work following a breach that exposed the personal data of thousands of bureau staff. The FBI acted on Monday, Reuters reported, citing two people familiar with the matter. A senior FBI official told Reu…
Security teams at Google, JPMorgan Chase, Weaviate, France’s interministerial digital directorate (DINUM) and the city government of Tangerang in Indonesia have each fixed the same type of flaw in their Model Context Protocol (MCP) servers. Independent…
A 16-year-old set one login field to “admin,” and an estimated 17.3 trillion Microsoft rows became accessible.
US financial services faced nearly 40,000 phishing URLs in just six months as free hosting, AI tools, and Omegatech expanded attackers’ infrastructure options.
The Wikimedia Foundation says AI agents it believes OpenAI runs made unapproved edits to its wikis. They also tried and failed to break into a note-taking tool it hosts. Their traffic may have contributed to a partial outage in May, the foundation, whi…
Microsoft’s X account was used to promote a meme coin scam, and possibly even to distribute malware.
There’s an elaborate scheme making rounds on Facebook and TikTok to get people to websites laden with infostealers.
The Danish government said the breach of names, addresses, and state-issued ID numbers affects 8 million people, including people living abroad and the deceased.
Google says it will reassess in Q1 2027.
A federal judge in Oklahoma has ruled that a deputy’s warrantless search of Flock’s licence plate reader network broke the US Constitution. In an order dated 1 October, Judge Sara Hill called the system “a type of indiscriminate mass surveillance”. Jas…