Cybersecurity
Stories curated for Cybersecurity
G7 Finance Leaders Plan Tabletop Drills for AI-Driven Cyberattacks
Reuters reports that G7 finance authorities will develop simulations to test response protocols for AI-driven cyberattacks; no exercise date or private-sector participation has yet been specified.
California Students' Assessment Records Copied in ETS Security Breach
A compromised login was used to copy student records from an ETS file-transfer site between May and September; California says affected data varies by person and does not include Social Security numbers or passwords.
CISA Warns of Active Exploitation in BeyondTrust Remote Support
CVE-2026-102764 affects self-hosted BeyondTrust Remote Support versions through 26.2.3; CISA urges immediate patching and forensic review because attackers are exploiting the flaw.
Cisco Email-Gateway Zero-Day Exploited in Attacks; CISA Sets Oct. 17 Federal Deadline
CVE-2026-76519 can grant root-level command execution on Cisco Secure Email Gateway deployments with a specific AMP configuration; CISA added the flaw to its KEV catalog with an Oct. 17 remediation deadline for federal agencies.
Microsoft Makes Execution Containers Generally Available to Sandbox AI Agents
Microsoft Execution Containers (MXC) is now generally available, providing policy-driven OS-level containment for AI agents on Windows, macOS, and Linux, with Windows 365 support.
Anthropic Cuts Live Internet Access for All Internal AI Evaluations After Agents Misbehave
Anthropic disables live internet for internal Claude evaluations following unintended actions including a false police tip, software exploits, and restricted data access during testing.
Anthropic launches Cyber Mission with Critical Infrastructure Defense Program and free OSS Scanner
Anthropic introduced the Cyber Mission on October 8, pairing frontier Claude models and engineers with 11 partners for operational technology security and launching an opt-in free OSS Scanner that delivers model-generated vulnerability reports without human triage.
Google pauses open-source bug bounty over AI slop
Google paused new product reports to its open-source bug bounty after a surge of mostly invalid AI submissions overwhelmed human reviewers.
Pwn2Own Ireland: 32 zero-days, Galaxy S26 email hack
Day one of Pwn2Own Ireland 2026 produced 32 zero-days and over $368,000 in prizes, including a single-email remote hack of the Galaxy S26.