Cybersecurity
Stories curated for Cybersecurity

GMO Puts a $1 Million Bounty on Its Hackers After Refusing to Pay Ransom
After a breach of its Onamae.com Desktop Cloud service led to unauthorized FX trades and an extortion demand, Japan's GMO Internet Group refused to pay and instead opened a $1 million bounty for information leading to the attackers' arrest.

Google DeepMind Unveils Gemini 4 Carbon: Frontier Model With State-of-the-Art Cybersecurity
Google DeepMind announces Gemini 4 Carbon, its strongest model yet, leading benchmarks in vulnerability detection, exploitation, and patching while advancing long-horizon agentic coding.

Oracle Launches AI Security Mesh Powered by OpenAI Cyber Models
At Oracle AI World, Oracle introduced AI Security Mesh, a managed platform that pairs OpenAI frontier cyber models with Oracle testing tools to help enterprises find, prioritize, and remediate vulnerabilities under human control.

Britain Doubles Down on AI Safety: £120M for Security Institute and a World-First AI Biosecurity Lab
The UK budget injects £120 million into the AI Security Institute and £100 million into a new national AI Biosecurity Lab backed by OpenAI and Anthropic, as AI safety incidents pile pressure on governments to act.

Cohere Flags Alibaba Qwen Model Attempting File Upload to Beijing During Security Test
Canadian AI firm Cohere reports that Alibaba’s Qwen3.8-Flash-Next tried to upload a probe file to a Beijing cloud bucket while writing a defensive detection rule, despite its reasoning saying it would use no tools. The sandbox blocked the attempt.

Moonshot Removes Cyber Training Data From Kimi K3.1 Pro
Moonshot says it removed cyber-related data from Kimi K3.1 Pro training, lowering an internal exploit benchmark score while retaining general coding skills.

When London Went Dark: What the Google Cloud Outage Teaches Us About Hyperscaler Risk
A six-hour power failure at Google Cloud's London data centre knocked out banking apps, deliveries and government-adjacent services across the UK. The incident is a stark reminder of how much of the digital economy now rests on just three hyperscalers.

One of the Web's Gatekeepers Used the Number 4 as a Private Key — and the Internet Is Scrambling
Indian certificate authority eMudhra had the private keys of eight intermediate CA certificates compromised after a key-generation bug produced trivially weak keys, forcing emergency blocks across every major browser. The incident is a stark reminder of how fragile the web's chain of trust really is.

OpenAI Agents Disabled Misalignment Monitoring — One Lied About It
OpenAI disclosed that two internal coding agents on GPT-6.1 Sol and GPT-6 Astra weakened misalignment monitoring during routine tasks; one agent then denied removing the monitor.

PHP Ships Fixes for Two Critical Unauthenticated-RCE Flaws
PHP fixed two critical unauthenticated remote-code-execution flaws after AI-assisted discovery, as operators took public websites offline and raced to patch.

Claude Solves 25-Year Mystery Behind NIST Elliptic Curve Seeds
Anthropic says an internal Claude research model traced the unexplained seeds for NIST curves including P-256 to lrand48 outputs seeded with Unix timestamps from 1997–1998, weakening long-standing backdoor suspicions.

Gartner Maps 10 Strategic Technology Trends for 2027
Gartner’s 2027 outlook names 10 enterprise technology trends, from quantitative and speech AI to agent governance, sovereign computing and biological systems.