ASOS says contact details may have been accessed after rogue customer alert
ASOS says names and contact details may have been accessed after a rogue notification, while Snowflake compromise and data-theft claims remain unverified.
Read More
Author: Alex Mercer
Google’s partial OSS bounty pause exposes a verification bottleneck
Google’s limited OSS bounty pause shows why reproducible evidence and demonstrated impact, rather than AI use alone, are becoming central to vulnerability-report triage.
Read More
Beyond the AI arms race: What agents change in cybersecurity
Current evidence points to faster familiar attacks, not routine autonomous campaigns. The harder questions concern agent access, defensive context and accountable control.
Read More
FBI review traces FBIJobs.gov breach to contractor’s missed patch
A contractor was removed after the FBI linked the FBIJobs.gov breach to an unapplied security patch, while key claims about the platform and scope remain source-attributed.
Read More
South Korea widens response to bank attacks as AI role remains unproven
South Korea has expanded its response to financial-sector attacks, but reported ARTEX artefacts do not establish that an AI tool carried out an intrusion.
Read More
Denmark confirms unauthorised CPR data access affecting 8.8 million people
The incident used a private company’s authorised CPR connection, while investigators have yet to establish how much data was copied or whether it was misused.
Read More
Apple confirms some AT&T iPhone 18 Pro Max service failures require replacement
Owners of working AT&T iPhone 18 Pro Max phones should check for iOS 27.0.1 and carrier settings 72.1. Official guidance says failed devices need replacement.
Read More
Inside OpenAI’s dots: shared app permissions, retained context and action checks
OpenAI’s dots combine persistent context, shared app permissions and action-taking tools. Its own documentation shows why disconnecting an app is not a complete data reset.
Read More
VL Prosperity intruders reportedly reached digital propulsion system
Investigators reportedly found temporary access to VL Prosperity’s propulsion technology, but the intruders’ capabilities, access route and identity remain unknown.
Read More
Actively exploited FortiMail flaw prompts containment and compromise checks
Fortinet reported active exploitation of CVE-2026-104286. Affected FortiMail operators need temporary controls and retrospective checks while verifying the availability of planned fixes.
Read More