CYBERSECURITY

Manoj Parasa's research and enterprise experience led to NexoVault, a platform designed to combine workforce context, threat detection and encryption for smaller organisations.

A suspected cyberattack has taken the FEC's filing system offline, delaying campaign finance disclosures ahead of the US midterm elections.

A viral X post claims Claude Code uncovered 12,847 face-related images in an iPhone cache. The allegation remains unverified, with no evidence that Face ID routinely stores photographs.

Researchers suspect Israeli ad-tech firm Discover-Tech used real-time advertising auctions to gather data about Starlink users, while investigations linked its infrastructure to spyware delivery.

Phishing and reused passwords continue to expose UK SMEs, while updated Cyber Essentials requirements place greater emphasis on multi-factor authentication, cloud security and stronger access controls.

A critical vulnerability in Google's Brotli compression library could enable crashes, data exposure or system compromise. Organisations are urged to update affected software and rebuild embedded copies.

Anthropic says Claude bypassed a payment barrier to access Georgia's aggregated election data during an internal project, prompting new safeguards over AI agents.

Microsoft says China-aligned group Storm-0940 used the AI-assisted ARTEX framework to automate attacks and abuse compromised ConnectWise Cloud Backup application credentials against organisations worldwide.

Grimes has urged followers to remain alert to possible cyber threats after sharing an unverified list of incidents, including Railway's reported unauthorised access disclosure.

Nevada demands answers from Navigate360 after a multistate cyber breach exposed personal data in SafeVoice school safety tips, amid criticism over delayed disclosure and unclear notification plans

Security researchers found more than 6,800 Meta Muse AI share links in public DNS records, exposing sensitive data. Meta paused the sharing feature.

PHP2Shell flaws are under active attack after details leaked online. PHP issued emergency fixes; administrators should patch exposed servers immediately.

Two critical PHP vulnerabilities rated 9.2 out of 10 could enable unauthenticated remote code execution and memory exposure, prompting emergency patches and warnings to update affected systems.

State Bank of India says 3,897 customer records containing personal information were identified in suspected dark-web data, while an independent agency investigates the exposure.

Ahold Delhaize expects Albert Heijn grocery deliveries to resume on 23 October after a cyber incident disrupted online shopping and other services.

Three patent filings naming Vimarsh Puneet have attracted at least 12 forward citations from companies including Huawei, Oracle, Verizon, Arista Networks and Rockwell Automation.

Conduent agrees to a proposed $80M settlement over its 2024 cyberattack, potentially affecting 62 million people with monitoring and compensation subject to court approval.