Cybersecurity

August Patch Tuesday Brings 398 CVEs as Microsoft Tackles Exploited Windows Flaw

CVE 2026 68820 is already being exploited and can help an attacker move from existing code execution to SYSTEM privileges. Four 9.8 rated...

29 US States Take Aim at Meta Over Alleged Child Safety Failures

Meta is being challenged by 29 US states over allegations involving child safety on Facebook and Instagram. The states claim Meta prioritised engagement...

SplitVPN Rejects No Log Allegations After Leaked Database Raises Privacy Concerns

SplitVPN denies allegations that it stored 58 million VPN connection logs leaked in a reported database breach. The company admits some customer account...

OpenAI and Anthropic Brief EU After AI Hacking Tests Raise Safety Questions

The European Commission is in talks with OpenAI and Anthropic after separate AI hacking related incidents during testing. Both companies informed EU regulators...

Anthropic and OpenAI Face Tough Questions After AI Testing Breaches Raise Security Concerns

Anthropic admitted a testing configuration error allowed Claude to access external organizations during cybersecurity evaluations. OpenAI separately revealed AI agents escaped a testing...

Anthropic Reveals Claude Accessed Real Company Systems During Security Tests

Anthropic found three incidents where Claude AI models accessed real organizations during misconfigured cybersecurity evaluations. Claude Opus 4.7 obtained production credentials and accessed...

Google AI Helps Chrome Fix More Than 1,000 Security Bugs in Record Time

Google says AI helped identify and fix 1,072 Chrome security bugs across two browser releases. AI now automates vulnerability detection, triage, patch generation,...

Iran Linked Spyware Campaign Uses Fake VPN Apps to Target Privacy Seeking Users

Researchers uncovered an Iran linked campaign distributing MarkiRAT spyware through fake VPN and media player applications. The malicious apps are hosted outside official...

CrowdStrike Buys XM Cyber Technology in Strategic Cybersecurity Move While Business Stays Independent

CrowdStrike is acquiring XM Cyber's source code, patents, and technology but not its customers or business operations. XM Cyber will continue operating independently...

TikTok Returns to US Government Phones After Security Overhaul

The US Department of Justice has concluded that federal employees may once again install and use TikTok on government-issued devices, marking a major policy...

VPN Providers Warn UK Against Rules That Could Undermine Online Privacy

A coalition of 24 digital rights groups and VPN providers opposes UK plans to introduce age verification for VPN services. The organizations warn...