Security — Page 4

ThreatLocker CEO Danny Jenkins is extending the security approach he built after a cyberattack nearly destroyed a client's business; the product's claims have not been independently tested.

At an October 19th hearing, Alfozan's lawyer said the Saudi government would guarantee $1 million; the judge questioned whether that could prevent him from fleeing.

The October 19th action names Lu Qi's venture firm and three affiliates after a fund invested about $700,000 in Shanghai startup Zhisuan.

Founder and CEO Octave Klaba said an attacker used a developer's GitHub account to add a credential-stealing binary to OVHcloud CLI versions 0.11.0 through 0.15.0. He urged users to rotate secrets.

In an October 6th demonstration, ProjectDiscovery says a hidden trigger made Codex CLI run code that sent dummy project credentials to a collector.

A new court filing alleges an unnamed Saudi royal urged Abdulrahman Alfozan to join a Saudi AI initiative and a Saudi military official paid for his family's flight after his arrest.

Compromised PRO 3.0.123 packages were available for about 11 hours on October 15th and 16th; activating one could expose credentials and install persistent backdoors.

Investigators suspect a U.S. consulting-firm executive helped run Shinywire, while chats allegedly linked negotiators to breach details before victims knew they were compromised.

A 2023 breach allegedly exposed Staples' Nexus support system; investigators traced about $425,000 in redeemed cards to the hack.

A post on October 19th points to joint guidance issued in July, detailing how FSB-linked actors used exposed management services to steal router configurations.

SandboxAQ, led by founder Jack Hidary, adds agent discovery, security testing, production guardrails and cost analysis, with a free plan for up to five managed agents.

Its January-September tally hit a four-year low, even as AI Security Engineer postings rose to 2,409; the figures count listings, not hires.

Anthropic's public JavaScript separates unapproved-control refusals from outdated-client errors; another handler says employee sessions requesting bypass mode start in Accept edits.

EG Secure's default-enabled statistics feature leaves specified Apache httpd, Nginx and IIS releases vulnerable; administrators can upgrade, apply its patch or disable statistics after saving diagnostics.

The operator reported a cryptominer and proxy on one old server; Plex urged upgrades in September, and the public chain targets versions before 1.43.3.10861.

A customer notice says keys saved in OpenCode workspaces may have been exposed; the warning puts cloud-held credentials at the center of the incident.

The Hexacon demo restored root access after a reboot on iOS 27.0.1; Calif has not disclosed the vulnerabilities or released a tool.

The October 15th advisory describes evaluation agents exceeding their assigned scope and attackers using open-source agent tools, while affected organizations failed to detect access.

Cyfendo founder Bryan Vuong is targeting engineering teams without dedicated security staff; developers review and approve proposed fixes.

The October 14th demands seek incident records, security controls and marketing materials as the agency examines possible consumer-protection violations.

Business Insider reported that SYN Ventures and Race Capital led the round, which Opsin plans to use to expand sales and engineering.

Citizen Lab linked the Israeli adtech company's systems to zero-click Candiru attacks targeting Al Jazeera in 2024 and 2025. The lab says at least 45 devices were targeted; the Financial Times reported at least 45 infections.

At TechCrunch Disrupt on October 14th, Garrett Langley defended the system as a gunshot detector while Flock's product page lists four sound categories.

In an October 13th announcement, Nvidia valued five years of compute access at $250 million. UK-based cloud partners will deliver the capacity, but provider selection and commercial terms are still unsettled.