Dell asks admins to patch max severity CSM flaws as soon as possible

Dell has patched two maximum severity vulnerabilities in the Container Storage Modules (CSM) that connect Dell enterprise storage arrays to Kubernetes environments.

macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor

The dropper “carries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtime.

Flock drones with cameras deployed as first responders in some US cities amid privacy concerns

U.S. cities consider deploying Flock drones that automatically respond to emergency calls. However, other jurisdictions are pushing back against the service due to privacy and other concerns.

The EDR blind spot: 3 ways browser attacks evade endpoint telemetry

Browser-based attacks can steal sessions, abuse extensions, or manipulate users without creating the endpoint artifacts EDR is designed to detect. NordLayer explains three ways attacks can evade endpoint telemetry and why browser-level controls can help close the gap.

Despite IPO jitters and AI safety worries, Anthropic sticks to a 2026 offering

How quickly things change in the artificial intelligence era. Just a few months after everyone was scrambling to infuse AI into every enterprise operation — and frankly they still are, as agents have captured the enterprise imagination — everyone now is saying, “Whoa, where’s the brake pedal?” That’s why controlling agents is the next infrastructure…

In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats

Noteworthy stories that might have slipped under the radar: Kiteworks patches over 100 vulnerabilities, Microsoft publishes 2026 Digital Defense Report, AI finds 24 Android app flaws.

Californian accused of shipping $300M worth of Nvidia chips to China without Uncle Sam’s approval

Prosecutors claim Greg Lui helped China procure advanced hardware to develop, ahem, 'super intelligence’

US sanctions Tren de Aragua gang members in ATM hacks crackdown

The U.S. Treasury Department has sanctioned eight members of the Venezuelan gang Tren de Aragua (TdA) for their role in the theft of millions of dollars in ATM jackpotting attacks across the United States.

UniFi Protect 7.3: Powerful Surveillance System Gets Mad Storage Conservation via Super Encoding, Video Wall Time Machine, Teleport-Based Remote Adoption, and More

Here’s some exciting news for those using a UniFi Network Video Recorder (UNVR) from Ubiquiti: The company today announced the release candidate of UniFi Protect 7.3 with major improvements that, among other things, ease the pain of storage costs. The official 7.3 version is set to come out as soon...

GitLab warns of critical RCE vulnerability in AI Gateway service

GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances.

Most of Us Have Been Cyberattack Targets, Consumer Reports Finds. AI Isn’t Helping

From snooping smart glasses to AI bots going rogue, I’m not surprised US adults are more concerned about their privacy.

OpenAI alerts 100+ orgs that its 'misaligned models' attempted to break in - or worse

Mostly 'routine research tasks,' and 'some involved government websites, which our models often use,' AI giant tells The Reg

Record-low deal cuts the Arlo Ultra 4K HDR 2-camera SmartHub bundle to $221

Save $129 on Arlo’s 2025 4K HDR 2-camera bundle with SmartHub, now at a record low for sharp wireless home security.

Apple says it’s tightening macOS privacy controls amid the rise of AI agents

Apple announced plans to introduce tighter controls for the Full Disk Access permission on macOS. The company stated that the growing use of artificial intelligence agents requesting broad entry to user files, messages, mail, and browsing history creates new security risks. [1][2]

While specific details regarding the upcoming changes have not yet been shared, Apple emphasized the importance of users understanding the implications of granting applications extraordinary access to their computers. [1]

This new ChatGPT scam tricks you into installing malware – how to spot the trap

This authentic-looking scam starts with a sponsored Google link – and it’s catching people off-guard.

Chrome on Android’s password autofill could soon require a biometric test

TL;DR Google is testing biometric authentication before password autofill in Chrome for Android. The feature has returned in Chrome Canary after Google previously tested and pulled a similar implementation before stable release. The flag works for some users, but it didn’t trigger on a Pixel 8 in testing, suggesting the rollout is still limited or incomplete. Google Chrome on Android does a lot of heavy lifting when it comes to passwords.

Frontline Education breach exposes school district employee data

Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information, including Social Security numbers.

ICE Has Been Dumping Protester Photos Into a Palantir Database

DHS agents not only tracked and intimidated people observing ICE activity in Maine, but stored information about them in a Palantir-built database, newly unsealed court filings say.

CrowdStrike and CoreWeave bring AI security to machine speed

AI-native cybersecurity requires defenses that can keep pace with attackers while protecting infrastructure that never stops running. That challenge is bringing security expertise and specialized computing closer together, with automation embedded throughout the systems enterprises use to train and run models. CrowdStrike’s fastest observed eCrime attacker breakout time in 2025 was 27 seconds, underscoring the…

Maximizing Privacy? New Apple Home Security Cameras Reportedly Won’t Record Video

Instead of a watchable video stream, you’ll get text descriptions or alerts about detected people, pets or activity.

Apple changes full-disk access permissions to curb abuse from AI agents

Meta says FDA isn't sufficient to Muse reading messages. Apple begs to differ.

Sanders introduces bill to ban the federal government from using Flock

The proposed legislation would extend to all automotica license plate readers.

AI Agents Are Disrupting Open Source Security Disclosure

A recent article by Anil Madhavapeddy argues that AI agents can turn publicly available clues about software vulnerabilities into working exploits, reducing the effectiveness of traditional disclosure embargoes in open source projects. The author highlights the need for faster patching and release processes as the time between vulnerability disclosure and exploitation shrinks. By Renato Losio