Tag: #cybersecurity

Trump signs memorandum allowing vetted U.S. firms to conduct cyber operations against foreign cybercriminals

A White House memorandum authorizes vetted U.S. companies, under DOJ and DHS oversight, to conduct surveillance and disruptive cyber operations against foreign cybercriminal groups.

#cybersecurity, #cybercrime, #whitehouse, #nationalsecurity

Amgen discloses material cybersecurity incident after data exfiltration from third‑party cloud environments

Amgen disclosed a material cybersecurity incident in a July SEC filing, saying unauthorized activity in third‑party cloud environments led to exfiltration of proprietary and patient data.

$AMGN, #amgen, #cybersecurity, #biotech, #sec

NVIDIA Launches Open Secure AI Alliance to Build Open Tools for AI Security

NVIDIA on July 27 launched the Open Secure AI Alliance, teaming with major tech and security firms to build open models, tools and incident-response capabilities for AI security.

$NVDA, #nvidia, #ai-security, #open-source, #cybersecurity

Google DeepMind Expands Gemini Flash Lineup with 3.6 Flash and Security-Focused 3.5 Variant

Google DeepMind added Gemini 3.6 Flash plus two 3.5 variants, including a restricted 'Flash Cyber' model for defensive vulnerability discovery and repair.

$GOOGL, $GOOG, #google, #ai, #gemini, #cybersecurity

Kaspersky details OkoBot malware that injects fake wallet recovery screens to steal seed phrases

Kaspersky warns of OkoBot: Windows malware injecting fake recovery screens into hardware-wallet companion apps to steal crypto seed phrases.

#cybersecurity, #malware, #cryptocurrency, #hardwarewallets, #supplychain

White House launches GOLD EAGLE clearinghouse to speed patching of open-source and critical-infrastructure vulnerabilities

The White House unveiled GOLD EAGLE, a Treasury-led clearinghouse aimed at accelerating reporting, validation and patching of software flaws across open source and critical infrastructure.

#cybersecurity, #ai, #open-source, #whitehouse

Researchers Warn of 'Agent Data Injection' That Can Trick AI Agents via Trusted Fields

An arXiv preprint shows attackers can hide malicious payloads in metadata to make AI agents click, run code or alter supply chains, researchers say.

#ai, #security, #agents, #cybersecurity

Navient says law-firm ransomware exposed borrower Social Security numbers

Navient told the SEC a ransomware attack on an outside law firm accessed borrower data — including names, addresses, dates of birth and Social Security numbers.

$NAVI, #navient, #data-breach, #cybersecurity, #student-loans

Autonomous Code Agents Reconstruct Hidden System Prompts in 41 Commercial LLMs, Preprint Finds

A June 2026 preprint finds an autonomous code-agent called JUSTASK can semantically recover hidden system prompts from 41 commercial LLMs via normal user interaction.

#ai, #promptsecurity, #llms, #cybersecurity

iRhythm Says Data Exfiltrated From Third‑Party Business Apps; Devices, Patient Care Unaffected

iRhythm reported that data was exfiltrated from third‑party business applications; its devices and clinical systems were not affected, and the investigation is ongoing.

$IRTC, #irhythm, #cybersecurity, #data-breach, #healthcare

Q2 2026 Is Already the Most-Hacked Crypto Quarter by Incident Count, Tracker Shows

DefiLlama data show roughly 70 exploits and about $746 million lost in Q2 so far, with April's two mega-attacks and infrastructure failures driving the tally.

#crypto, #defi, #cybersecurity, #hacks

ECB to Send 'Dear CEO' Letter Urging Banks to Bolster Operational Resilience as AI Use Grows

ECB will send a sector-wide 'dear CEO' letter urging banks to strengthen operational resilience as AI adoption rises and cyber risks intensify.

#ecb, #banking, #ai, #cybersecurity, #dora

Trump signs order giving NSA central role in voluntary pre-release reviews of advanced AI

Trump signed an order creating a voluntary pre-release review of powerful AI models, naming the NSA to decide designations and boosting federal cyber defenses.

#ai, #cybersecurity, #executiveorder, #nsa

Researchers Detail 'TrapDoor' Supply‑Chain Attack That Hid Malicious Instructions in AI Assistant Files

Security researchers say 'TrapDoor' used malicious npm, PyPI and Crates.io packages to target crypto wallets and developer credentials, hiding commands in AI assistant files.

#cybersecurity, #supplychain, #cryptocurrency, #ai, #devtools

Preprint Finds LLM Watermarks Can Be Undermined by Supply-Chain PRNG Tampering

An arXiv preprint finds LLM watermarking can be bypassed by tampering with the inference PRNG; authors say quantum RNGs may defend.

#ai, #watermarking, #prng, #cybersecurity