https://threattimes.com/Bits, bytes and breaking security newsenTue, 13 Oct 2026 09:39:04 +0000https://threattimes.com/category/ai/atlassian-ceo-confirms-no-chinese-ai-models-in/https://threattimes.com/category/ai/atlassian-ceo-confirms-no-chinese-ai-models-in/Tue, 13 Oct 2026 09:37:07 +0000AIAtlassian chief executive states the company relies on Nvidia and Mistral models, dismissing concerns about Chinese AI while noting customer pushback exists.https://threattimes.com/category/ai/naboo-rebrands-to-target-procurement-teams-claims/https://threattimes.com/category/ai/naboo-rebrands-to-target-procurement-teams-claims/Tue, 13 Oct 2026 09:37:07 +0000AIParis-based corporate event platform Naboo has rebranded to serve finance teams, claiming its AI agents reduce event spending by 12 percent.https://threattimes.com/category/tech/doyensec-chains-sfape-dll-flaws-to-break-windows/https://threattimes.com/category/tech/doyensec-chains-sfape-dll-flaws-to-break-windows/Tue, 13 Oct 2026 09:37:06 +0000Tech NewsResearchers exploited multiple vulnerabilities in a Windows VBS enclave to achieve code execution within the protected Isolated User Mode environment.https://threattimes.com/category/vulnerabilities/cve-2026-44415-flaw-in-siemens-industrial-edge/https://threattimes.com/category/vulnerabilities/cve-2026-44415-flaw-in-siemens-industrial-edge/Tue, 13 Oct 2026 09:35:53 +0000VulnerabilitiesA newly published critical vulnerability in Siemens Industrial Edge Device Kit - arm64 V1.10 carries a CVSS score of 9.1. Here is what is affected and how to respond.https://threattimes.com/category/vulnerabilities/cve-2026-63350-flaw-in-siemens-simatic-drive/https://threattimes.com/category/vulnerabilities/cve-2026-63350-flaw-in-siemens-simatic-drive/Tue, 13 Oct 2026 09:35:53 +0000VulnerabilitiesA newly published critical vulnerability in Siemens SIMATIC Drive Controller CPU 1504D TF carries a CVSS score of 9.6. Here is what is affected and how to respond.https://threattimes.com/category/vulnerabilities/cve-2026-63353-cross-site-scripting-flaw-in/https://threattimes.com/category/vulnerabilities/cve-2026-63353-cross-site-scripting-flaw-in/Tue, 13 Oct 2026 09:35:53 +0000VulnerabilitiesA newly published critical vulnerability in Siemens SIMATIC Drive Controller CPU 1504D TF carries a CVSS score of 9.6. Here is what is affected and how to respond.https://threattimes.com/category/vulnerabilities/siemens-simatic-drive-controller-cpu-1504d-tf/https://threattimes.com/category/vulnerabilities/siemens-simatic-drive-controller-cpu-1504d-tf/Tue, 13 Oct 2026 09:35:53 +0000VulnerabilitiesA newly published critical vulnerability in Siemens SIMATIC Drive Controller CPU 1504D TF carries a CVSS score of 9.6. Here is what is affected and how to respond.https://threattimes.com/category/vulnerabilities/one-in-five-cisos-skip-patch-tuesday-to-avoid/https://threattimes.com/category/vulnerabilities/one-in-five-cisos-skip-patch-tuesday-to-avoid/Tue, 13 Oct 2026 09:24:40 +0000VulnerabilitiesA new survey reveals cybersecurity leaders are calling in sick or taking leave to evade the stress of monthly security update deployments.https://threattimes.com/category/vulnerabilities/github-fixes-npm-trusted-publishing-flaw-exposing/https://threattimes.com/category/vulnerabilities/github-fixes-npm-trusted-publishing-flaw-exposing/Tue, 13 Oct 2026 09:24:40 +0000VulnerabilitiesResearchers found that npm’s Trusted Publishing feature allowed attackers to publish malicious updates without stealing credentials by claiming abandoned repository names.https://threattimes.com/category/ai/character-ai-files-chapter-11-bankruptcy-as/https://threattimes.com/category/ai/character-ai-files-chapter-11-bankruptcy-as/Tue, 13 Oct 2026 09:24:40 +0000AICharacter.ai has entered Chapter 11 bankruptcy proceedings, with Disney leading a $20 million bid for a non-exclusive IP license. The platform faces shutdown if no buyer acquires operations.https://threattimes.com/category/cyber-attacks/fake-web3-accelerator-distributes-malicious-npm/https://threattimes.com/category/cyber-attacks/fake-web3-accelerator-distributes-malicious-npm/Tue, 13 Oct 2026 09:24:40 +0000Cyber AttacksThreat actors posing as an accelerator used free AI credits to lure crypto founders into installing macOS backdoors and Windows stealers via fraudulent packages.https://threattimes.com/category/cyber-attacks/malwarebytes-labs-warns-that-replying-to-scam/https://threattimes.com/category/cyber-attacks/malwarebytes-labs-warns-that-replying-to-scam/Tue, 13 Oct 2026 09:20:43 +0000Cyber AttacksCybercriminals use brief, personalized texts to trick recipients into confirming their phone numbers are active and willing to engage.https://threattimes.com/category/cloud-security/microsoft-reshapes-azure-leadership-expands-maia/https://threattimes.com/category/cloud-security/microsoft-reshapes-azure-leadership-expands-maia/Tue, 13 Oct 2026 09:09:19 +0000Cloud SecurityMicrosoft is merging Azure units and expanding Arun Ulag’s scope as it prepares to make custom Maia chips its primary AI platform by 2027.https://threattimes.com/category/ai/ai-summaries-now-define-online-reputation-for/https://threattimes.com/category/ai/ai-summaries-now-define-online-reputation-for/Tue, 13 Oct 2026 09:09:19 +0000AIChatGPT, Gemini and Perplexity generate single-paragraph answers that replace traditional search links, making source management critical for reputation control.https://threattimes.com/category/tech/cmf-by-nothing-launches-milk-carton-shaped/https://threattimes.com/category/tech/cmf-by-nothing-launches-milk-carton-shaped/Tue, 13 Oct 2026 08:52:48 +0000Tech NewsThe sub-brand debuts two portable Bluetooth speakers featuring detachable panels, Bluetooth 6.0 support and up to 18 hours of battery life.https://threattimes.com/category/cyber-attacks/gta-6-leaker-threatens-full-release-if-crypto/https://threattimes.com/category/cyber-attacks/gta-6-leaker-threatens-full-release-if-crypto/Tue, 13 Oct 2026 08:43:06 +0000Cyber AttacksThe hacker known as CyberLeek demands a $30 million valuation for its cryptocurrency before releasing a playable build of Grand Theft Auto 6.https://threattimes.com/category/malware/kimsuky-uses-github-infrastructure-for-operation/https://threattimes.com/category/malware/kimsuky-uses-github-infrastructure-for-operation/Tue, 13 Oct 2026 08:43:06 +0000Malware & RansomwareNorth Korea-linked group targets Ukrainian policy experts with malware delivered via trusted code hosting platforms.https://threattimes.com/category/cyber-attacks/european-supermarkets-hit-by-cyberattack/https://threattimes.com/category/cyber-attacks/european-supermarkets-hit-by-cyberattack/Tue, 13 Oct 2026 08:43:06 +0000Cyber AttacksHackers remotely raised freezer temperatures to 50C in hundreds of stores across Europe, spoiling food and causing significant losses for major retail chains.https://threattimes.com/category/tech/apple-integrates-flexible-graphite-cooling-pipes/https://threattimes.com/category/tech/apple-integrates-flexible-graphite-cooling-pipes/Tue, 13 Oct 2026 08:41:53 +0000Tech NewsApple engineers used the iPhone Duo hinge for thermal management, adding a second display engine to the A20 Pro chip for simultaneous screen operation.https://threattimes.com/category/ai/ntt-data-nears-deal-to-build-anthropics-first/https://threattimes.com/category/ai/ntt-data-nears-deal-to-build-anthropics-first/Tue, 13 Oct 2026 08:32:55 +0000AIReports indicate NTT Data is close to agreeing with Anthropic to construct a dedicated AI facility in Osaka, marking the AI firm’s first standalone site in Japan.https://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-5/https://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-5/Tue, 13 Oct 2026 08:19:53 +0000VulnerabilitiesThe National Vulnerability Database lists a critical OS command injection flaw in Wavlink router firmware, noting that the exploit has been published and the vendor was notified early.https://threattimes.com/category/tech/wow-player-accuses-husband-of-deleting-mythic/https://threattimes.com/category/tech/wow-player-accuses-husband-of-deleting-mythic/Tue, 13 Oct 2026 08:18:40 +0000Tech NewsA World of Warcraft user reports her spouse is destroying valuable in-game items after she maintains a separate social life, sparking community concern.https://threattimes.com/category/tech/dayone-secures-3-67-billion-in-financing-for/https://threattimes.com/category/tech/dayone-secures-3-67-billion-in-financing-for/Tue, 13 Oct 2026 08:18:12 +0000Tech NewsSingapore developer DayOne obtained roughly $3.67 billion from seven banks to fund new facilities in Malaysia, according to a report by Techmeme.https://threattimes.com/category/cyber-attacks/us-embassy-in-fiji-links-chinese-hackers-to/https://threattimes.com/category/cyber-attacks/us-embassy-in-fiji-links-chinese-hackers-to/Tue, 13 Oct 2026 08:07:31 +0000Cyber AttacksWashington says hackers tied to Beijing infiltrated a Suva-based group in July and August. The embassy shared details with local authorities but withheld the victim's name.https://threattimes.com/category/data-breaches/only-24-of-breach-notices-disclose-attack-vectors/https://threattimes.com/category/data-breaches/only-24-of-breach-notices-disclose-attack-vectors/Tue, 13 Oct 2026 08:07:31 +0000Data BreachesNew data shows breach notifications are increasingly vague, omitting attack vectors and forcing recipients to guess their actual risk.https://threattimes.com/category/vulnerabilities/wavlink-wl-wn530be1-a-stack-based-buffer-overflow/https://threattimes.com/category/vulnerabilities/wavlink-wl-wn530be1-a-stack-based-buffer-overflow/Tue, 13 Oct 2026 08:02:41 +0000VulnerabilitiesThe National Vulnerability Database lists a CVSS 10 critical flaw in Wavlink WL-WN530BE1-A firmware version 251117, allowing remote attackers to exploit a buffer overflow via HTTP headers.https://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-4/https://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-4/Tue, 13 Oct 2026 07:39:29 +0000VulnerabilitiesA newly published critical vulnerability in Wavlink WL-WN530BE1-A carries a CVSS score of 9.4. Here is what is affected and how to respond.https://threattimes.com/category/ai/home-office-asylum-ai-fails-accuracy-checks-in/https://threattimes.com/category/ai/home-office-asylum-ai-fails-accuracy-checks-in/Tue, 13 Oct 2026 07:36:21 +0000AIA new report finds the UK government's AI tool for summarizing asylum interviews has a 22 percent failure rate, raising concerns about oversight.https://threattimes.com/category/ai/kevin-kellys-2016-ai-predictions-reviewed-against/https://threattimes.com/category/ai/kevin-kellys-2016-ai-predictions-reviewed-against/Tue, 13 Oct 2026 07:29:50 +0000AIA Hacker News discussion examines Kevin Kelly’s 2016 book The Inevitable and its specific forecasts regarding Google’s AI trajectory.https://threattimes.com/category/ai/intel-details-d270-data-center-gpu-specs-with-480/https://threattimes.com/category/ai/intel-details-d270-data-center-gpu-specs-with-480/Tue, 13 Oct 2026 07:29:50 +0000AIIntel has published technical specifications for its D270 discrete GPU, highlighting a high-capacity memory configuration aimed at AI accelerator workloads in data centers.https://threattimes.com/category/ai/research-shows-ai-models-can-provably-hide/https://threattimes.com/category/ai/research-shows-ai-models-can-provably-hide/Tue, 13 Oct 2026 07:29:50 +0000AIA new academic study accepted for NeurIPS 2026 demonstrates that machine learning models can conceal hidden functions, raising concerns about AI security.https://threattimes.com/category/tech/airconsole-partners-with-zeekr-for-in-car-gaming/https://threattimes.com/category/tech/airconsole-partners-with-zeekr-for-in-car-gaming/Tue, 13 Oct 2026 07:29:50 +0000Tech NewsThe in-car gaming platform debuts with Zeekr at the Paris Motor Show, marking its first Geely group partnership and expanding to Chinese markets.https://threattimes.com/category/tech/microsoft-surface-laptop-ultra-launches-with-1/https://threattimes.com/category/tech/microsoft-surface-laptop-ultra-launches-with-1/Tue, 13 Oct 2026 07:20:07 +0000Tech NewsMicrosoft revealed pricing and availability for the Surface Laptop Ultra on October 7, while rolling out a new Windows Search experience to Insiders.https://threattimes.com/category/tech/october-2026-cybersecurity-hiring-trends-show/https://threattimes.com/category/tech/october-2026-cybersecurity-hiring-trends-show/Tue, 13 Oct 2026 07:20:07 +0000Tech NewsA review of current job postings highlights openings for CISOs, cloud threat hunters and application security specialists across global firms.https://threattimes.com/category/ai/anthropic-warns-small-ai-models-may-self/https://threattimes.com/category/ai/anthropic-warns-small-ai-models-may-self/Tue, 13 Oct 2026 07:20:07 +0000AIResearch from Anthropic’s Frontier Red Team suggests compact AI models could soon spread across vulnerable smart appliances and TV boxes without human intervention.https://threattimes.com/category/vulnerabilities/vmware-launches-hyperarmor-to-manage-ai/https://threattimes.com/category/vulnerabilities/vmware-launches-hyperarmor-to-manage-ai/Tue, 13 Oct 2026 07:20:07 +0000VulnerabilitiesBroadcom’s VMware introduces a new security add-on to help customers cope with the surge of monthly patches driven by AI vulnerability discovery.https://threattimes.com/category/tech/broadcom-launches-vmware-hyperarmor-to-shield/https://threattimes.com/category/tech/broadcom-launches-vmware-hyperarmor-to-shield/Tue, 13 Oct 2026 07:12:16 +0000Tech NewsNew software targets stolen root credentials and unpatched vulnerabilities in VMware Cloud Foundation, buying admins time to deploy fixes.https://threattimes.com/category/tech/cyberattack-spoils-food-at-hundreds-of-french/https://threattimes.com/category/tech/cyberattack-spoils-food-at-hundreds-of-french/Tue, 13 Oct 2026 07:09:42 +0000Tech NewsAttackers remotely triggered defrost cycles at Intermarché, Netto and Coopérative U stores, disrupting cold storage across France overnight Sunday.https://threattimes.com/category/tech/tii-unveils-falcon-asr-a-1-6b-parameter-arabic/https://threattimes.com/category/tech/tii-unveils-falcon-asr-a-1-6b-parameter-arabic/Tue, 13 Oct 2026 07:09:15 +0000Tech NewsThe Technology Innovation Institute released a new speech model focused on Emirati dialects, reporting a 20.92% word error rate on Arabic tests.https://threattimes.com/category/tech/microsofts-maia-300-chips-offer-40-more-tokens/https://threattimes.com/category/tech/microsofts-maia-300-chips-offer-40-more-tokens/Tue, 13 Oct 2026 07:09:15 +0000Tech NewsThe tech giant unveiled its third-generation custom silicon, aiming to power its AI services with gigawatt-scale deployments by 2027.