Cybersecurity

Capcom confirms data breach that affected 11.7 million users

Capcom ID is still available to use, but users may see more phishing scam emails.

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere with security solutions from Kaspersky and Avast.

Microsoft Teams to get AI-powered, context-aware phishing detection

Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026.

Exploitable by Design: AI, Old Bugs, and the New Math of Risk

Three recent vulnerability stories show the same pattern: exploitation is getting cheaper and faster than the remediation pipelines built to contain it.

Will AI expose the rickety infrastructure of the internet?

Website owners were told this week to immediately patch their sites against newly discovered vulnerabilities in the open source programming language PHP, or take the sites down if they could not update right away.

The PHP Meltdown Shows How AI Makes Bugs More Exploitable

Security researchers used AI tools to help uncover years-old vulnerabilities in the PHP web scripting language. Then the AI-assisted attacks began.

Cybersecurity

The Breach Logs Show a Pattern of Quiet, Repeat Exposure

Three recent breach disclosures share one trait: exposure that lingered, recurred or hid in plain sight, and each carries direct consequences for US consumers and firms.

Leaked video exposes how industrial-scale Chinese factories are dismantling RTX 5090s by the thousands to fuel AI servers

Wondering why RTX 5090s are so hard to find? Leaked footage shows thousands of consumer GPUs, including Founders Editions, being torn apart for AI servers.

Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise

Microsoft points the blame for ConnectWise's breach at a China-aligned hacker, which relied on AI agents to rapidly hack into thousands of its customers.

AI Is Now an Attacker, a Tool, and a Target

Three recent incidents show artificial intelligence moving from hypothetical cyber threat to an active participant on all sides of an attack.

Eiliko maker says it's hiring an ‘'independent security firm’ after Verge report on its insecure robots

Eiliko, a cute robot charm you can hang on your bag with built-in AI conversations, turned out to be a security nightmare. It told owners that "your secrets are safe with me," but hackers could easily read complete transcripts of everything we told the toy, and that was just the beginning.

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned.