SECURITY

TECH NEWS

‘It’s without a doubt one of the least detrimental privacy-focused solutions to your mobile experience’: I spent a month testing GrapheneOS — and it almost made me ditch my Android phone entirely

I don’t often consider ditching Android, but GrapheneOS, a privacy-focused alternative, poses an interesting question: what security features am I missing out on by using Google’s mobile operating system (OS)? GrapheneOS is an open-source mobile OS, designed for Google Pixel phones (and soon Motorola devices), that promises better

TECH NEWS

OpenMatter Network Calls on Enterprise Leaders to Rethink AI Security Before the Next Rogue AI Crisis

The growing number of high-profile AI security incidents making headlines around the world are not simply cybersecurity failures. They are architectural failures, according to OpenMatter Network Co-Founder and CEO Renee Davis. “Recent incidents involving increasingly autonomous AI systems – including OpenAI’s widely reported cyber evaluation that resulted in the compromise

TECH NEWS

OpenAI's rogue agent didn't stop at Hugging Face - here's what we know

Follow ZDNET: Add us as a preferred source on Google. ZDNET's key takeaways * The OpenAI rogue model attack went beyond Hugging Face. * OpenAI's agentic AI escaped a sandbox in the attack. * We still don't have all the details of exactly what happened. How dependable

TECH NEWS

What is the Shared Responsibility Model in cloud security?

Imagine you’re a company. You’ve got sensitive data you need kept safe, and you’ve got a cloud service provider that’s protecting it. But do you know how far that protection goes, and at what point it’s your turn to take over? The sheer number of

TECH NEWS

Bloom Security Emerges From Stealth With $20M Seed to Tackle the New AI Endpoint Risk

Enterprise security teams have long treated the endpoint as a relatively well-defined security boundary: a laptop, a workstation or another managed device that can be monitored for malware and suspicious activity. The rapid adoption of AI is changing that model, turning employee devices into increasingly complex environments filled with software,

TECH NEWS

Microsoft introduces its first agent-powered cybersecurity model and Project Perception AI patching system - can it avoid making the same mistakes OpenAI made?

* Microsoft launches MAI-Cyber-1-Flash, its first in-house cybersecurity model. * It also reveals Project Perception, an agentic system whose red, blue, and green agents find, triage, and patch vulnerabilities * The launch comes days after OpenAI said its models escaped a sandbox and attacked Hugging Face Microsoft has unveiled two significant security announcements

TECH NEWS

The biggest data leaker is probably not who you think it is

In a world where data leaks are a constant, misconfigured databases remain the number one cause, exposing sensitive data to anyone who knows where to look. This unfortunately common human error leaves the affected individuals and organizations open to hackers, cyber threats, scams, and further data leaks. Even now, as

TECH NEWS

In the Hugging Face breach, OpenAI’s hacker was noisy and fast — but not unstoppable

Earlier this month, AI dataset platform Hugging Face shocked the world when it revealed that it had fallen victim to a fully autonomous AI-powered cyberattack. Days later, the story took another dramatic twist when OpenAI admitted that the hacker behind the breach was one of its AI models, which broke

TECH NEWS

The lineage behind 69% of open models was never verified. Cisco just fingerprinted almost 900 for free

A security team approving an open-source model for production today starts with a repository page. The page lists the model name, the license, and a tag identifying the base model it descended from. That tag is a string the uploader typed. Hugging Face does not require uploaders to substantiate the

TECH NEWS

Bloom Security lands $20 million seed as AI rewrites what runs on the enterprise endpoint

TL;DR Bloom Security has raised $20M in seed funding led by Glilot Capital and Ten Eleven Ventures to secure the AI-era endpoint. The company argues that EDR was built for malware, not for the AI agents, MCP servers, browser extensions, and code packages now running on every employee device.

TECH NEWS

Mitigation Guidance for Supply Chain Compromise

Written by: Kelli Vanderlee, Stuart Carrera For years, the cybersecurity industry's understanding of software supply chain compromise has been anchored by a few watershed events, including Russian cyber espionage actor ICE RELIC’s (formerly known as APT29) 2020 compromise of SolarWinds and North Korean cyber espionage actor UNC4736&

TECH NEWS

FTC sues Hims & Hers for allegedly sharing patients’ medical data with advertisers Meta and Snap

The Federal Trade Commission is suing healthcare giant Hims & Hers for allegedly sharing its customers’ medical and healthcare information with advertisers and tech giants, like Meta and Snap, as well as for misleading consumers about its privacy practices. The lawsuit is the federal consumer watchdog’s latest crackdown in