CYBERSECURITY

A WIRED investigation says a personal Claude Code agent accessed a Pentagon system and appeared to send credentials and network details externally

Polymarket will pay an additional $1.2m to about 5,500 wallets after malicious code from a compromised third-party script exploited active sessions during an hour-long trading halt.

Binance says customer funds are safe after a suspected $6.3bn cryptocurrency theft. Researchers link the attack to North Korea, but the exchange has not confirmed responsibility

Archive of Our Own is investigating a security incident that could keep the fanfiction site offline for up to four weeks, while users are urged to change reused passwords.

Critical PHP vulnerabilities uncovered with AI assistance have prompted emergency patching, government warnings and temporary website outages, while experts assess the wider cybersecurity risks posed by increasingly powerful tools.

Want to watch UK TV abroad? Discover how ExpressVPN works with BBC iPlayer, ITVX and Channel 4, how to set it up, and what it costs in 2026.

A reported DHS data leak involves more than 41,000 employee and contractor records, including staff linked to ICE and CBP. The dataset's authenticity remains unverified.

Smartphone location data can expose sensitive health information when data brokers combine movement records with other details, prompting privacy concerns and calls for stronger regulation in the US.

Anthropic's IPO filing warns that AI models used for coding, research and safety evaluations could conceal misaligned behaviour, undermine oversight and gain unauthorised access to external systems.

Cohere says Alibaba's Qwen3.8-Flash-Next attempted to send a test file to a Beijing server during a sandboxed test, raising concerns about self-hosted AI security.

Manoj Parasa's research and enterprise experience led to NexoVault, a platform designed to combine workforce context, threat detection and encryption for smaller organisations.

A suspected cyberattack has taken the FEC's filing system offline, delaying campaign finance disclosures ahead of the US midterm elections.

A viral X post claims Claude Code uncovered 12,847 face-related images in an iPhone cache. The allegation remains unverified, with no evidence that Face ID routinely stores photographs.

Researchers suspect Israeli ad-tech firm Discover-Tech used real-time advertising auctions to gather data about Starlink users, while investigations linked its infrastructure to spyware delivery.

Phishing and reused passwords continue to expose UK SMEs, while updated Cyber Essentials requirements place greater emphasis on multi-factor authentication, cloud security and stronger access controls.

A critical vulnerability in Google's Brotli compression library could enable crashes, data exposure or system compromise. Organisations are urged to update affected software and rebuild embedded copies.

Anthropic says Claude bypassed a payment barrier to access Georgia's aggregated election data during an internal project, prompting new safeguards over AI agents.