Tessera

Google's about to start using UK and EU user IP addresses for ad personalization, from Aug 3. In 2019 Google called this kind of fingerprinting "wrong." The ICO called the 2024 reversal "irresponsible." It's happening anyway. www.bleepingcomputer.com/news/securit...

Google to use UK and EU user IP addresses for ad personalization

From August 3, 2026, Google will use IP addresses from UK, EEA and Switzerland users for ad measurement and personalization. It lands as the ICO weighs new consent rules, and years after Google itself...

bleepingcomputer.com

Everyone's covering the UK's under-16 social media ban. The under-covered bit: enforcing it means opening any new account will require an ID or face scan, effectively ending anonymity. Experts warn circumvention is easy and your biometric data is at risk. www.bleepingcomputer.com/news/securit...

UK to require ID or face scan before you can make social media accounts

Opening a new social media account in the UK will soon mean proving you're over 16 with an ID upload or a facial age scan, under a government ban on under-16s taking effect in spring 2027. Security ex...

bleepingcomputer.com

Every useful AI agent today reads private data, processes untrusted content, and communicates externally. By design. That's also the exact profile researchers used to flag as a near-guaranteed sign of exploitation. So, how do you separate signal from noise? www.csoonline.com/article/4184...

5 runtime signals for catching a compromised AI agent

Once a signal of exploitation risk, Willison’s ‘lethal trifecta’ describes the baseline operations of every AI agent today. As a result, agent security is no longer architectural. Here’s what to watch...

csoonline.com

US gov ordered Anthropic to pull Fable 5 + Mythos 5 for all "foreign nationals" ... so effectively worldwide. The trigger being a narrow jailbreak where you ask the model to read a codebase and fix bugs. But, the capability is anyway widely available (from other models like GPT-5.5).

We disclosed a critical flaw in n8n-mcp (120k+ weekly npm downloads). On shared multi-tenant setups, one user could read everyone else's workflow backups, API keys and tokens included, or *wipe them all* in a single call. Just by guessing a number. CVSS 9.6. Found by Franciso Rosales. 🧵

A trojanized Bitwarden npm version appeared for 90 minutes last month. 9 days later it got a CVE—after the package was already pulled. That's an incident response notification, not what CVEs were originally built for. Agentic AI makes this gap much worse. www.csoonline.com/article/4173...

Why some security fixes never reach your vulnerability dashboard

CVE was built to track code flaws with fixes. It’s now being stretched to cover malware and supply chain incidents that don’t fit. Agent infrastructure and AI assets are where that drift becomes struc...

csoonline.com

The read-only mode in mcp-server-kubernetes (20,000+ weekly npm downloads) ...doesn't actually restrict anything. Neither do the other two access control modes. CVE-2026-46519, CVSS 8.8 🧵

We scanned 19,000+ AI agent skills. One enterprise scanner flagged 40%+ as malicious. Most were fine. A skill called "derp" passed two of three scanners clean. It instructs agents to silently produce broken code, and blame the developer's environment if they get suspicious.

Ax Sharma @axsharma.com · 5mo ago

Hackers are abusing Google Ads + real Claude[.]ai shared chats to push Mac malware. The Google ad URL is genuine, so there's no lookalike domain to catch. Two active variants seen so far, one with CIS geofencing: www.bleepingcomputer.com/news/securit...

Hackers abuse Google ads, Claude.ai chats to push Mac malware

Attackers are abusing Google Ads and legitimate Claude.ai shared chats in an active malvertising campaign. Users searching for "Claude mac download" may come across sponsored search results that list ...

bleepingcomputer.com

Who are AI safety guardrails actually protecting? I've been researching this for a few weeks, and the honest answer is... not always the right people. Defenders and security researchers often face friction, while attackers just walk around safety guardrails: www.csoonline.com/article/4138...

When AI safety constrains defenders more than attackers

AI guardrails increasingly block legitimate security work while attackers bypass restrictions with ease. For CISOs, this asymmetry creates blind spots in defensive capabilities.

csoonline.com

⚠️ Seeing a lot of exaggerated or misleading posts about the recent Cline CLI supply chain incident, so here’s some context. Feb 17 incident is clearly documented in the low-severity advisory: github.com/cline/cline/...

Unauthorized npm publish of Cline CLI cline@2.3.0 with modified postinstall script to install openclaw

### Description On February 17, 2026 at 3:26 AM PT, an unauthorized party used a compromised npm publish token to publish an update to Cline CLI on the NPM registry: cline@2.3.0. The published pac...

github.com

Canada Goose says it is reviewing a 1.67 GB dataset leaked by ShinyHunters extortion group, with more than 600,000 customer records.

🚨 Nationwide payment card-processing outage tied to #ransomware attack. Payments platform BridgePay confirms a #ransomware attack has knocked key systems offline, impacting merchants and municipal services across the U.S. www.bleepingcomputer.com/news/securit...

Payments platform BridgePay confirms ransomware attack behind outage

A major U.S. payment gateway and solutions provider says a ransomware attack has knocked key systems offline, triggering a widespread outage affecting multiple services. The incident began on Friday a...

bleepingcomputer.com

Despite #Zendesk suggesting safeguards and tightening up security last month, the massive spam wave has returned flooding inboxes with hundreds of bogus 'Activate account...' emails that bypass #spam filters www.bleepingcomputer.com/news/securit...

Zendesk spam wave returns, floods users with 'Activate account' emails

A fresh wave of spam is hitting inboxes worldwide, with users reporting that they are once again being bombarded by automated emails generated through companies' unsecured Zendesk support systems. Som...

bleepingcomputer.com

Responsible disclosure is built on an assumption that "doing the right thing" would = timely action, fair treatment, and maybe a bounty reward. Lately, that assumption is collapsing. For CISOs, this is gradually becoming a risk management nightmare. www.csoonline.com/article/4124...

When responsible disclosure becomes unpaid labor

An incentive gap is undermining responsible disclosure. For CISOs, this is gradually evolving into a risk management nightmare.

csoonline.com

A NationStates game player found a critical vulnerability but then crossed a line: he copied production data and app code. Finding a flaw is enough. Demonstrate it safely, report it and stop there. Holding data isn't clever, ever. www.bleepingcomputer.com/news/securit...

NationStates confirms data breach, shuts down game site

NationStates, a multiplayer browser-based game, has confirmed a data breach after taking its website offline earlier this week to investigate a security incident.

bleepingcomputer.com

BREAKING: Threat actors are seeking data on ~1,800 MSPs after a Pax8 spreadsheet with customer and Microsoft licensing info was accidentally emailed to over three dozen partners yesterday. www.bleepingcomputer.com/news/securit...

Cloud marketplace Pax8 accidentally exposes data on 1,800 MSP partners

Cloud marketplace and distributor Pax8 has confirmed that it mistakenly sent an email to fewer than 40 UK-based partners containing a spreadsheet with internal business information, including MSP cust...

bleepingcomputer.com

Heads up: A new #phishing campaign is abusing LinkedIn comment-replies and directing users to external links to lift a bogus "temporary restriction." www.bleepingcomputer.com/news/securit...

Convincing LinkedIn comment-reply tactic used in new phishing

Scammers are flooding LinkedIn posts with fake "reply" comments that appear to come from the platform, warning of bogus policy violations and urging users to click external links. Some even abuse Link...

bleepingcomputer.com

⚠️ Telegram privacy alert: Don't tap any @usernames or links in chats. These can actually be hidden proxy URLs. Tapping them just once can trigger a direct connection that reveals your real IP address to a third party with one click: www.bleepingcomputer.com/news/securit...

Hidden Telegram proxy links can reveal your IP address in one click

A single click on what may appear to be a Telegram username or harmless link is all it takes to expose your real IP address to attackers due to how proxy links are handled. Telegram says it will add w...

bleepingcomputer.com

Update: Multiple current and former Target employees have reached out to confirm that the source code and documentation shared by a threat actor match real internal systems. A company-wide Slack announcement also announced "accelerated" access changes. www.bleepingcomputer.com/news/securit...

Target employees confirm leaked code after ‘accelerated’ Git lockdown

Multiple current and former Target employees confirmed that leaked source code samples posted by a threat actor match real internal systems. The company also rolled out an "accelerated" lockdown of it...

bleepingcomputer.com

EXCLUSIVE: Target's developer Git server went offline shortly after hackers claimed they had stolen internal source code and published what they claim are sample repositories for sale. www.bleepingcomputer.com/news/securit...

Target's dev server offline after hackers claim to steal source code

Hackers are claiming to be selling internal source code belonging to Target Corporation, after publishing what appears to be a sample of stolen code repositories on a public software development platf...

bleepingcomputer.com