Tech News
← Home  ·  All topics

Security

315 GoKawiil briefs on this topic

King Charles marks NCSC's 10th anniversary with warning on evolving cyber threats

In a letter to the National Cyber Security Centre on its tenth anniversary, King Charles III warned that malicious actors are increasingly using automated technologies to spread disinformation and conduct hostile online activity. He praised the agency's decade of work defending the UK against cyber attacks, protecting democratic institutions and critical infrastructure, saying much of its work goes unpraised publicly.

Weak '123456' password tied to Danish CPR register breach at Pays ApS

Danish newspaper Politiken reported that at least three accounts at Odense-based IT firm Pays, including an administrator account, used the password '123456' when hackers accessed Denmark's CPR civil registration database. The breach reportedly exposed data linked to about 8.8 million CPR numbers, with an anonymous hacker claiming access lasted over 21 days starting 10 September after obtaining a leaked password from a former employee of another small Danish firm.

Fake Claude installer ads abuse Bing redirects to evade Google Ads security checks

Push Security reports that a malvertising campaign is routing Google search ads through Bing's trusted click-tracking domain before funneling victims through a hacked WordPress site to a fake Claude download page. The scheme, found after a malicious ad surfaced for searches like "claude mac," uses layered cloaking checks to hide the malicious payload from scanners and direct visitors, ultimately pushing macOS users toward ClickFix-style attacks that trick them into running malicious commands.

Anthropic launches free AI vulnerability scanner for open-source projects

Anthropic introduced OSS Scanner, a free opt-in service that uses its most capable AI models, including Claude Mythos, to periodically scan open-source software for security vulnerabilities. The company says outputs are fully model-generated without human review, which allows faster, more frequent scans but also raises the chance of incorrect or invalid reports.

OpenAI, Anthropic hire former Trump administration officials for senior roles

Anthropic has appointed at least two former Trump officials this year, including one to its board and another to lead its frontier compute strategy, while OpenAI has hired at least three ex-administration officials for strategy and special projects. The hiring comes as AI companies seek closer ties to the Trump White House amid regulatory pressure and security concerns, following a court ruling that upheld a Pentagon designation of Anthropic as a supply-chain risk.

Microsoft releases Execution Containers (MXC) 1.0 to sandbox AI agents on Windows

Microsoft has made Microsoft Execution Containers (MXC) generally available, a Windows platform feature that lets developers and IT admins restrict which files, applications and network destinations an AI agent can access at runtime. The company says MXC is the first piece of a broader security framework that will also include Entra-based identity separation for agent versus user activity, and Agent 365 controls for managing on-device agents.

Microsoft sets 2027 deadline tied to Windows Update certificate rotation

Microsoft announced that Windows Update certificates will expire on May 17 and June 19, 2027, and devices running unsupported Windows versions at that point will lose access to update services entirely. The company has already pushed replacement certificates to supported systems, but it listed specific security updates that must be installed on various Windows 10, 11 and Server versions before the deadlines to maintain update access.</br>Microsoft urged IT administrators to inventory devices on outdated or unsupported Windows versions now and ensure monthly updates are deployed across their fleets ahead of the rotation.

ICE emails show DHS explored Palantir-linked tool for voter fraud probes

Documents obtained by Democracy Forward via a FOIA request reveal that DHS officials examined using a Palantir-supported tool to investigate alleged illegal voting. The records show ICE's Homeland Security Investigations division, through its Innovation Lab, has been developing systems that combine DOJ voting rolls and USCIS data, with plans to later add criminal history records. The same document cache shows DHS has investigated more than 150 nonprofits over suspicions they helped noncitizens register to vote.

Microsoft launches containment tool to limit AI agent access on Windows PCs

Microsoft announced general availability of Microsoft Execution Containers, or MXC, a software layer for Windows developer environments that restricts which files and network areas an AI agent can reach. CEO Satya Nadella revealed the rollout during the company's Surface Laptop Ultra event, offering three access levels: Recommended, Locked Down, and Unprotected.

Anthropic rolls out free OSS Scanner for automated open-source security checks

Anthropic has introduced OSS Scanner, a free opt-in service that runs periodic security scans on open-source projects using its most capable AI models, including Claude Mythos. The company says the reports are fully model-generated with no human review, which speeds up scanning but raises the risk of inaccurate or invalid findings.

Amazon cuts Arlo Pro 6 four-camera security kit price by 25%

Amazon is selling the Arlo Pro 6 four-camera indoor/outdoor security kit for $180.49, a 25% discount from its regular price. The system includes 2K HDR video capture, color night vision, and wire-free installation for flexible placement.

National Security Archive: CIA funded right-wing Mexican student groups before 1968 massacre

Researchers at Washington's National Security Archive say declassified CIA records show the agency ran at least five projects over two decades to influence student politics in Mexico, including funding right-wing groups like MURO and the IISE and working through ties to Mexican security officials Fernando GutiƩrrez Barrios and Miguel Nazar Haro. The findings, drawn from a partially declassified 539-page internal CIA history, were reported by La Jornada reporters Jim Cason and David Brooks, who note the agency still withholds key documents about its role around the 1968 Tlatelolco massacre.