NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
New Zealand Moves to Ban Social Media for Under-16s, Threatens 10% Revenue Fines
Prime Minister Christopher Luxon plans legislation requiring age verification on major platforms and creating a new online safety regulator, joining a growing…
Unpatched Calix Router Flaw Lets Anyone Punch Holes Through NAT
An unauthenticated UPnP exposure in Calix GS7 XGS gateways lets remote attackers create persistent port-forwarding rules that expose cameras, NAS boxes, and…
Anthropic Widens Defender Access to Mythos 5, Backs Open Source With $35M Fund
Anthropic is routing its most capable cybersecurity AI model through partner tools and a new Claude Security scanning feature while keeping direct…
Iran-Linked Hackers Knocked Out UK Power Plant for Four Days
A British power generator was reportedly offline for four days in July after an Iran-linked cyberattack, with details only emerging weeks later…
U.S. Bancorp Denies Network Breach After LockBit Lists Bank as Victim
U.S. Bancorp says a LockBit ransomware claim traces back to a fourth-party incident outside its own environment, with no evidence its systems,…
Former NSA Director Paul Nakasone Launches National Security Advisory Firm
Retired General Paul Nakasone, who led the NSA and U.S. Cyber Command until 2024, has founded the Nakasone Group to advise governments,…
Truffle Security Finds Thousands of Live AWS Keys Exposed Across Public Repos
A four-year sweep by Truffle Security uncovered over 9,300 still-valid AWS access keys, including hundreds tied to corporate accounts with full administrative…
Windows Named Pipes: A Trusted-Looking Interface That Often Isn’t
Security researchers warn that Windows named pipes, widely used for local interprocess communication, are frequently misconfigured in ways that let unprivileged or…
Supply-Chain Malware Turns Android Car Head Units Into Proxy Botnet Nodes
Kaspersky links the MoYu group, previously tied to BadBox, to a new infection chain hijacking DoFun automotive head units for ad fraud…
TikTok to Pay $400 Million Settling US Child Privacy Lawsuit
The Justice Department says ByteDance-owned TikTok will pay $400 million to resolve a 2024 lawsuit alleging violations of federal child privacy protections,…
New SynkLoader Malware Spread via Fake IT Help Desk Teams Phishing
A newly identified malware family called SynkLoader is being pushed through Microsoft Teams phishing attacks that impersonate corporate IT support, using a…
Three Banking Trojans, Three Continents: Manic, Grandoreiro, and ToxicPanda 2.0 Escalate
Researchers this week detailed three distinct banking trojan campaigns, ranging from a new Android threat hitting Ukraine to an updated Grandoreiro variant…