U.S. indicts Iranian cyber espionage operations, Medusa ransomware breaches 500 organizations, and attackers exploit a critical Windows protocol flaw.

The AI Security Institute has a new report of AI systems engaging in “unsanctioned behavior”—what I have been calling “genie behavior—while being tested on their cybersecurity capabilities. The incident stemmed from a single evaluation where agents were given a task of solving a cyber security challenge. We ran this challenge 122 times across several models. Our investigation found that in 10 of those runs, an AI agent took autonomous, unsanctioned action on the live internet, targeting real people and organisations. In total, we catalogued 19 such actions. Almost all of this behaviour (17 actions) came from a single model, Anthropic’s Mythos 5, with 2 actions involving OpenAI’s GPT-5.6-Sol with cyber classifiers (mechanisms to prevent misuse) disabled. In the most serious case, an agent tried to insert malicious code into an open-source project. In an attempt to get the code approved, the agent engaged in social engineering—creating f...

Clever protocol wrangling gets iBiz-only people tracking working on a non-iGadget

Secure Workload Software has five nasty flaws and even SaaS users have updates to install

A memory overflow vulnerability and an authentication bypass both require urgent attention.

Don

Fuzzing has been around for as long as web applications have. In fact, the term itself was coined back in 1988, when Barton Miller, a professor at the University of Wisconsin, was working over a dial-...

Read the full article for details.

Follow the money

Because apparently even ransomware gangs can

A spoonful of encryption helps the malware go down

The criminal AI service uses jailbreaks to bypass safeguards on legitimate AI models and offers capabilities including exploit development, OSINT, and social engineering.

A usage policy for Flock license plate reader cameras tells police not to talk about the cameras: When cops use Flock to arrest someone in Wapello County, Iowa, they don’t want them to know. A usage policy for the automated license plate reader cameras in the county tells police, in no uncertain terms, to keep them a secret: “DO NOT MENTION ALPR USAGE TO THE OCCUPANTS OF THE VEHICLE,” the policy document reads. “DO NOT MENTION ALPR USAGE IN YOUR REPORT OR COMPLAINT UNLESS ABSOLUTELY NECESSARY.” This reminds me of IMSI-catchers (Stingray was the most popular) a couple of decades ago. Police would go to even more extremes to hide their usage...

Independent assessment provides Australian organisations with additional evidence when evaluating application control for sensitive, government, defence and critical infrastructure environments. 

Analysts said the moves may be nothing more than positioning the company for its IPO, but that both changes are welcome news nonetheless.

Read the full article for details.

CEO apologizes for police misuse as activists call for vandal action against license plate cameras

Read the full article for details.

Read the full article for details.

Rebranded feature promises household alerts without video, but mind the small print

Wiz’s Red Agent exploited a vulnerable GitHub Actions workflow in a Snowflake repository, ultimately compromising Jira credentials.

AI is changing the cyber fight, so security teams need to test their defenses constantly — not just hope they work.

Phishing, malvertising attacks could target devs to gain access to private corporate networks