This posting is here to collect cyber security news in October 2026.
I post links to security vulnerability news to comments of this article.
You are also free to post related links to comments.
This posting is here to collect cyber security news in October 2026.
I post links to security vulnerability news to comments of this article.
You are also free to post related links to comments.
330 Comments
Tomi Engdahl says:
Huomaatko eron А:n ja A:n välillä? Jos et, voit olla vaarassa
Aktian, Lähi-Tapiolan ja S-Pankin nimissä on liikkeellä paljon huijauksia. Aktia-huijauksen voi tunnistaa kyrillisestä A-kirjaimesta pankin nimessä.
https://www.iltalehti.fi/digiuutiset/a/a4a9af2c-c18f-4fbf-9159-d034110f255b
Pankkien ja vakuutusyhtiöiden nimiä hyödynnetään aktiivisesti huijauksissa, selviää jo yli 200 000 suomalaisen lataaman Kilpi-sovelluksen ilmoituksista.
Kilpi on Suomen Telemarkkinointiliitto ry:n kehittämä älypuhelimiin ladattava sovellus, joka tunnistaa ei-toivotut puhelut, tekstiviestit ja sähköpostit ja estää ne automaattisesti.
Havaintoja on tehty muun muassa Aktian, Lähi-Tapiolan ja S-Pankin nimissä. Sovelluksen havaintojen perusteella samaan aikaan liikkeellä on useita rinnakkaisia huijausyrityksiä.
Tomi Engdahl says:
https://www.uusiteknologia.fi/2026/10/01/tekoaly-iski-f-securen-toimintoihin/
Tomi Engdahl says:
FTC is Investigating OpenAI and Anthropic Over Possible Risks to Consumers
An FTC spokesperson confirmed the investigation but declined further comment.
https://www.securityweek.com/ftc-is-investigating-openai-and-anthropic-over-possible-risks-to-consumers/
Tomi Engdahl says:
Risk Management
Four Cyber Threats Harboring Big Plans for the Future
– AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
https://www.securityweek.com/four-cyber-threats-harboring-big-plans-for-the-future/
Tomi Engdahl says:
Artificial Intelligence
Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders
The company says its new frontier AI model found a critical vulnerability in software used by hospitals worldwide.
https://www.securityweek.com/google-launches-gemini-4-argon-with-guardrail-free-access-for-vetted-defenders/
Tomi Engdahl says:
Application Security
500,000 Active Credentials Left Exposed on GitHub
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
https://www.securityweek.com/500000-active-credentials-left-exposed-on-github/
Tomi Engdahl says:
Artificial Intelligence
Zammad Zero-Days Exploited in AI-Powered DIVD Hack
The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root.
https://www.securityweek.com/zammad-zero-days-exploited-in-ai-powered-divd-hack/
Tomi Engdahl says:
https://www.securityweek.com/ftc-is-investigating-openai-and-anthropic-over-possible-risks-to-consumers/
Tomi Engdahl says:
Artificial Intelligence
Google: AI Is Changing the Pace and Profile of Vulnerability Discovery
Google’s analysis found that AI-discovered vulnerabilities are more likely to enable remote code execution.
https://www.securityweek.com/google-ai-is-changing-the-pace-and-profile-of-vulnerability-discovery/
Tomi Engdahl says:
Experts issue warning after voice scam AI attacks skyrocket
Data from Microsoft’s digital defence report has also reported a jump in attacks where hackers impersonate business contacts in order to gain information or access to services
https://www.independent.co.uk/tech/voice-phishing-scam-ai-microsoft-cyber-attack-b3059969.html?fbclid=IwdGRjcAUsL6ljbGNrBSwvg2V4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeG5yhVThIuHoe3B-Q-HvhtMOuVYUiBNd4Q5ps5yhiA7z60HLtVhZTIMLdzzo_aem_YuPE97qWilrw1jfPQOBOfA
Voice phishing incidents have sharply increased over the past year as cyber attackers increasingly leverage AI technology to execute scams, according to research.
Data from Microsoft’s digital defence report highlights a rise in incidents where hackers impersonate business contacts to obtain information or service access.
Security experts at Microsoft noted that 27 per cent of cyber threat activity targeted government agencies or services, pointing to heightened concerns over cyber warfare.
The report found that expanding AI use is altering how “vulnerabilities are identified, how attacks are developed, how defenders prioritise risk, and how organisations respond to emerging threats”.
Tomi Engdahl says:
Epäily: Kansanedustajien kodeissa käyty – Stubb kertoo karusta kokemuksestaan
Presidentti Alexander Stubb sanoi tietävänsä, miltä kotiin tunkeutuminen tuntuu. Taustalla ovat yli kymmenen vuoden takaiset tapahtumat.
https://www.iltalehti.fi/politiikka/a/46aef0a4-7f04-496f-b51e-b9a27c207afe
Tomi Engdahl says:
Voiko AI tehdä turvallisuuskriittisiä päätöksiä verkon reunalla?
https://etn.fi/index.php/13-news/19357-voiko-ai-tehdae-turvallisuuskriittisiae-paeaetoeksiae-verkon-reunalla
Tekoälyä viedään yhä pienempiin laitteisiin verkon reunalle, mutta kuinka paljon päätösvaltaa sille voidaan antaa? Pretzl Connect -tapahtuman paneelissa kysymykseen suhtauduttiin varauksella. AI voi auttaa päätöksenteossa, mutta viimeistä sanaa sille ei vielä haluta antaa.
Silicon Labsin tuotepäällikkö Tamas Daranyin mukaan ongelma tulee tekoälyn perusluonteesta. AI perustuu tilastolliseen päättelyyn, joten sen tulos ei koskaan ole sataprosenttisen varma. Siksi esimerkiksi auton ABS-järjestelmän kaltaista turvallisuuskriittistä toimintoa ei hänen mukaansa voida rakentaa samalla tavalla AI päätöksenteon varaan kuin determinististä algoritmia.
Tomi Engdahl says:
For years, one of Android’s selling points was that it was the more open alternative to Apple’s tightly controlled ecosystem. However, the tightening of Google’s environment has made it nearly impossible for small app developers to reach users.
Read more: https://cnews.link/google-android-developer-verification-backlash-1/
Tomi Engdahl says:
Artificial Intelligence
AI Agents Aimed SQL Injection at US and Canadian Government Sites
The attacks targeted the US Department of Education and Library and Archives Canada, and researchers linked some agents to OpenAI.
https://www.securityweek.com/ai-agents-aimed-sql-injection-at-us-and-canadian-government-sites/
Tomi Engdahl says:
Malware & Threats
Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks
The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025.
https://www.securityweek.com/warlock-expands-sharepoint-exploitation-in-critical-infrastructure-attacks/
Tomi Engdahl says:
Cybercrime
In Rare Move, Alleged Iranian State Hacker Extradited to US
Amir Barati, an alleged member of the Mabna Institute, was indicted for targeting universities, private organizations, and government entities in the US and abroad.
https://www.securityweek.com/in-rare-move-iranian-hacker-accused-of-working-for-irgc-extradited-to-us/
Tomi Engdahl says:
Cyber war isn’t just starting—it has been underway for years, depending on where the baseline for “war” is drawn.
While pop culture often imagines a “cyber war” as a sudden digital apocalypse that shuts off global power grids overnight, real-world cyber warfare functions as a permanent, ongoing state of high-intensity, asymmetric attrition.
The ongoing conflict in Ukraine marks the first full-scale, persistent hybrid war. Russian cyber operations actively coordinate with physical artillery and missile strikes—targeting power grids, satellite networks (like Viasat), telecom backbones, and data centers in tandem with conventional military maneuvers.
Iran’s involvement in cyber warfare is one of the most developed, persistent, and asymmetric in the world. The intersection of Iran’s military strategy and Amazon’s global infrastructure represents a major shift in modern warfare: the transition of physical hyper-scale cloud facilities into high-priority military targets.
Tomi Engdahl says:
https://www.facebook.com/share/p/18hztb7duH/
A kidnapped Flock camera carried its own encryption key inside.
Hackers who took a Flock Safety camera down from its pole found two kinds of storage on it, WIRED reported. One part was encrypted, another was not. The camera had hung above a roadway like thousands of others across America.
The key to unlock the encrypted part was stored on the Flock camera itself. With it, they opened about 1.6 million images from 21 days of traffic, plus around 27,000 short video clips.
Jason Brown, a former Secret Service cybercrime expert, told Fox Business the cloud behind Flock was not breached. “Flock was never compromised,” he said. Some Flock cameras had earlier been reachable online because of weak login controls, Brown added, but that problem was fixed.
The weak spot is the hardware on the pole. One American man’s kidnapped Flock camera is now famous for being digitally waterboarded with 23,040 plates per second.
Sources: Fox Business, Gadget Review
via Michael Roadancer
#2600net #irc #secnews #flock #wired #hackers #fox
Tomi Engdahl says:
OpenAI’s ‘rogue’ agents have hit 100 organisations – and more are coming
ChatGPT maker admits its systems have been active across the internet, without it even knowing
https://www.independent.co.uk/tech/openai-rogue-ai-artificial-intelligence-b3060388.html?fbclid=IwdGRjcAUtw7ZjbGNrBS3DmWV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeHEDaiHV60KP3qgJv4LPmG66dEhochoeeOYIzsAs_xwePiX_wmDkNct9QbpU_aem_0kwHIJmZg1cVr0mGAiOP7w
OpenAI has notified more than 100 organisations that they may have been attacked by its rogue AI systems – and expects to find even more.
The company has been running a review into the behaviour of its models in an attempt to respond to the revelation that one of its systems had hacked into a fellow AI company, Hugging Face. It has found a huge number of similar incidents, many of which were happening without OpenAI’s knowledge, it has said.
Tomi Engdahl says:
This may be hard to swallow. https://trib.al/gsaFdB9
Yes, Honey
If You’re a Tech Worker With an Attractive Girlfriend, We Have Extremely Bad News
Coming to bed dear?
https://futurism.com/future-society/tech-workers-honey-trap?fbclid=IwdGRjcAUt4qJjbGNrBS3idWV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeCLNynsJOAbQtRc4prDcwDNXe6PwrMfmU1xD8mBX8xC2YeAAvzLqDo4IS7b0_aem_LESmWquizRXY4bxvGW1FKA
Forget malware. The latest and greatest threat to national cybersecurity comes with a smile and an apparent romantic preference for schlubby tech workers.
At least, that’s according to The Times: the British newspaper reported this week that China and Russia are deploying their finest babes to seduce tech industry professionals throughout the western world to gain valuable secrets, a practice it calls “sex warfare.”
The Times cites a slew of “industry insiders” who warned about sophisticated plots involving young women charming Silicon Valley workers into giving up previous insider info — in some cases, allegedly even going as far as to build loving families with their victims.
“It’s the Wild West out there,” one insider declared.
Though it’s possible that some foreign operatives are playing these incredible long cons, consider us skeptical. Technically referred to as a “honey trap,” the accusation has its roots in Cold War-era propaganda, where rumors of KGB vixens trained in the arts of seduction spread far and wide, fueled by literature like James Bond and no small number of sensational CIA memoirs.
Tomi Engdahl says:
https://www.securitysales.com/insights/why-access-modernization-will-happen-on-existing-doors/620445/?utm_medium=email&_hsenc=p2ANqtz-86JxX-e-LpbU0DgOi-6gw0d_SshafozfnVU3uMaRptvK8Sjy2I8fw8piA5c9lGz6anxBaP3OCvRCQvA6rS80fQObuM5A&_hsmi=435777779&utm_content=435777779&utm_source=hs_email&fbclid=IwdGRjcAUuRYVjbGNrBS5FR2V4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeb_nT_LUZMK5dvc64XooKukbTjOLrUXxSUjvch203c0Ig0_F-p4ZiNL8PpBI_aem_hz2JNt0fDL7WfieHfE-I8g
Tomi Engdahl says:
https://www.locksmithledger.com/electronics-access-control/article/55395484/iloq-intelligent-key-system-no-batteries-or-infrastructure-required?fbclid=IwdGRjcAUuRiNjbGNrBS5GEmV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEe1zwq5RMzGsr0rkAoKhy2ELnNJnI4wE0sSz-7bMEhD-iXAUpjaWChcGfscpQ_aem_m3Rh1SW5AX_Gq6acrxplrQ
Tomi Engdahl says:
https://www.tomshardware.com/pc-components/gpus/micro-center-requires-photo-id-and-signed-no-export-pledge-to-buy-rtx-5090-gaming-gpu-buyer-forced-to-sign-declaration-disclosing-install-location-and-promise-gpu-will-remain-in-the-us?fbclid=IwdGRjcAUu7ztjbGNrBS7vN2V4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeq-VfaT5gcwkswDcPO6MeunPEtCMD98KlcccuTLlBA_vHbxlnyarfrmtkAx0_aem_Od2mEyR2JrDuMSndRmJt3A
Tomi Engdahl says:
https://www.engadget.com/2276186/apple-sounds-the-alarm-on-ai-agents-and-full-disk-access/?utm_term=Autofeed&utm_campaign=Echobox-Engadget&utm_medium=Social-Distribution&utm_source=Facebook#Echobox=1790969337
Tomi Engdahl says:
Hackers access data of 8.8 million people in Denmark in ‘extremely serious’ breach
https://www.euronews.com/2026/10/05/hackers-access-data-of-88-million-people-in-denmark-in-extremely-serious-breach
A major cybersecurity breach has exposed the personal data of 8.8 million people in Denmark.
Denmark has suffered a major data breach after hackers broke into the country’s national population registry and accessed the personal information of millions of people.
By Pascale Davies with AFP
Published on 05/10/2026 – 11:27 GMT+2
Share
Comments
Add Euronews on Google
Listen to this article now…
Hackers access data of 8.8 million people in Denmark in ‘extremely serious’ breach
Advertisement
A major cybersecurity breach has exposed the personal data of 8.8 million people in Denmark.
Denmark has suffered a major data breach after hackers broke into the country’s national population registry and accessed the personal information of millions of people.
ADVERTISEMENT
The country’s digital affairs minister announced the data breach on Monday, calling it “an extremely serious incident” that affected 8.8 million people.
“Unauthorised individuals obtained illegal access” to the names, addresses and CPR, including those who have died or emigrated, the ministry said in a press release, referring to Denmark’s social security numbers.
“This is an extremely serious incident,” Christina Egelund, digital affairs minister, was quoted as saying in the press release.
Denmark has a population of around six million, but the national registry has information on 11 million, including data on those deceased and people who have emigrated from the country.
Tomi Engdahl says:
AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
https://www.securityweek.com/ai-has-changed-attack-speed-not-security-fundamentals/
Tomi Engdahl says:
Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws
ClingSTUN operates as a back-connect proxy backdoor, sets up persistence, and contains exploits for self-propagation.
https://www.securityweek.com/linux-backdoor-abuses-stun-protocol-exploits-dozens-of-flaws/
Tomi Engdahl says:
https://www.securityweek.com/alleged-shinyhunters-leader-arrested-in-jordan/
Tomi Engdahl says:
https://www.securityweek.com/250000-impacted-by-data-breaches-at-new-jersey-texas-healthcare-firms/
Tomi Engdahl says:
Government
Senate Passes Bipartisan Bill to Strengthen Healthcare Cybersecurity
More than 730 cyber breaches affected over 270 million Americans last year, costing an average of $10 million per breach.
https://www.securityweek.com/senate-passes-bipartisan-bill-to-strengthen-healthcare-cybersecurity/
Tomi Engdahl says:
Ei näitä järjestelmiä tarvitse edes hakkeroida.
“Syytetyt ovat kertoneet oikeudessa, että tapahtuma-aikaan oli Oulun yliopistollisessa sairaalassa oli yleinen toimintakulttuuri jättää leikkauksia koskeva potilasjärjestelmä auki tietokoneille.”
Analyysi: Lääkäreiden ja hoitajien epäillään urkkineen kollegansa potilastietoja – selitykset oikeudessa huolestuttavat
Syytetyt ovat kertoneet jättäneensä potilasjärjestelmän auki koneelle. Herää kysymys, kuinka monen tietosuoja on vaarantunut, kirjoittaa Henna Mäkikallio.
https://yle.fi/a/74-20249189?origin=rss&fbclid=IwdGRjcAUwlIdjbGNrBTCUeWV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEexR-L0JLQKMBh1mc2rCAs9jwZdNwaw_1sr9hAjNvsZK9uyP02eKa5ffQ8BDY_aem_-dfPfx4c5SWqVdDNKQyNnw
Tomi Engdahl says:
If you used this VPN, we’re very sorry. https://trib.al/hiSuagP
That’s Some Fine Print
Millions of Private ChatGPT Conversations Are Being Harvested and Sold for Profit
“There is no user-facing toggle to disable this.”
https://futurism.com/artificial-intelligence/ai-chatbot-data-scraping?fbclid=IwdGRjcAUwoRhjbGNrBTChAmV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEekLOt4afg7gFCDHurO28o3fhM_dEZ3sy_oLySkzQekL1ZfIRqFhCcT-8Moyg_aem_VbdF7d3xga6gKIzEnhxkqg
You know those memes about how there’s no such thing as a free VPN? Here’s the ultimate cautionary tale.
A recent investigation by Tel Aviv-based security firm Koi uncovered a massive data harvesting operation tied to a voluntary extension on Google’s Chrome browser. Called Urban VPN Proxy, the free extension has some six million users at the time of writing, and even a “featured” badge on the Chrome Web Store — in other words, an endorsement from Google itself.
As Koi researcher Idan Dardikman writes, the extension goes beyond the actions of a typical VPN. Packed under the hood are “executor” scripts designed to intercept and capture conversations from the leading AI platforms, including OpenAI’s ChatGPT, Anthropic’s Claude, Google’s Gemini, DeepSeek, and xAI’s Grok.
The data collected encompasses anything a user might ask their chosen AI chatbot, per Dardikman, including “medical questions, financial details, proprietary code, personal dilemmas, all of it, sold for ‘marketing analytics purposes.’”
Tomi Engdahl says:
REA (Reverse Engineer Anything) an open-source toolkit that brings reverse-engineering capabilities straight to your AI agent via MCP and CLI
- Decompile apps & native binaries
- Trace execution & inspect evidence
- Recreate features for your own stack
-/github.com/morluto/rea
https://github.com/morluto/rea
Tomi Engdahl says:
Asos hacked latest: Customers sent bizarre, threatening notification by shopping app
Everyone with app seemingly sent alarming threat
https://www.independent.co.uk/tech/security/asos-hack-notification-latest-updates-b3062000.html?fbclid=IwdGRjcAUxyBJjbGNrBTHH5GV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEePcwaHAU58jpJLFuprpi121MrK9Za1his7B8sMEdkQkqcS95eqshP9aolXTA_aem_pONle0A0NYTX7cDJQ04FNA
Tomi Engdahl says:
Linux-takaportti piiloutuu tavalliseen sähköpostiliikenteeseen
https://etn.fi/index.php/13-news/19375-linux-takaportti-piiloutuu-tavalliseen-saehkoepostiliikenteeseen
Tietoturvayhtiö Rapid7 on löytänyt teleoperaattoreiden ja verkon reunalaitteiden Linux-järjestelmiin kohdistuvia uusia takaportteja, jotka pyrkivät piilottamaan toimintansa tavallisen verkkoliikenteen sekaan. AVERAT-haittaohjelma naamioi komentoliikenteensä sähköpostiliikenteeksi.
Rapid7in mukaan AVERAT käyttää TCP-porttia 25 eli SMTP-sähköpostiliikenteen vakiintunutta porttia. Haittaohjelma lähettää normaalilta näyttävän EHLO-komennon ja pyytää STARTTLS-yhteyttä ennen oman salatun yhteytensä käynnistämistä.
Erityisen tehokasta naamioituminen on sähköpostin tietoturvayhdyskäytävissä. Koska niiden normaali tehtävä on välittää sähköpostia, AVERATin yhteydet voivat liikennevirtoja tarkasteltaessa näyttää tavalliselta sähköpostiliikenteeltä.
Tomi Engdahl says:
“It’s inevitable.” https://trib.al/8fFpp6f
Break Out
Meta Insiders Convinced Muse Is Going to End Up Leaking the Bank Accounts and Email Archives They’re Vacuuming Up From Users
“It’s inevitable.”
https://futurism.com/artificial-intelligence/meta-muse-data-breach-bank-accounts-email-archives?fbclid=IwdGRjcAUyO6ljbGNrBTI7iWV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeruvEi7RgzE6lHxQefAAKz_W8tONJs6a3xdwvFjwgPg54K0001CM-MuSORy4_aem_UH48N6jb7DUeGvd6Jr0UZg
With the release of Meta’s buzzy Muse AI agent, there’ve been plenty of concerns over the amount of privacy and control Meta wants you to cede so it can serve as your “personal assistant.
It seems that even its own employees are worried. Before launching the AI agent, engineers found a security vulnerability that could’ve allowed Muse users to break into Meta’s own databases and services and access other people’s sensitive information, 404 Media reports.
Tomi Engdahl says:
Spy vs Spy
New App Detects the Radio Fingerprint of Smart Glasses and Warns You When Someone Is Using Them Nearby
“Covert recording is a lot about power.”
https://futurism.com/robots-and-machines/app-smart-glasses-bluetooth?fbclid=Iwb21leAUZoRRjbGNrBRmhDHBkb2YFZXh0bgNhZW0CMTEAc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeIx5nz2lz2bHiXa7Bd7yRjRxTcTAos0qjdWqzaEAYSjiVcPCntVe3FPGEQ54_aem_whK9331SAyo2oObCHleJSw
Tomi Engdahl says:
https://thehackernews.com/2026/09/claimed-bug-bounty-hunter-likely-used.html?m=1
Tomi Engdahl says:
https://www.theregister.com/security/2026/09/17/ai-coding-agents-0-click-rce-flaw-could-hand-attackers-keys-to-the-kingdom/5297335?utm_source=dlvr.it&utm_medium=threads
Tomi Engdahl says:
https://founderz.com/skilling/cybergenius-fz/?utm_medium=cpc&utm_source=facebook&utm_campaign=MSFT_AINSI_LG_CYBERGENIUS&utm_id=120256294949480768&hsa_acc=214875694596136&hsa_cam=120256294949480768&hsa_grp=120256309372940768&hsa_ad=120256590425020768&hsa_src=fb&hsa_net=facebook&hsa_ver=3&fbclid=Iwb21leAUY4NNwZG9mBWV4dG4DYWVtATAAYWRpZAGrPLte_e2gc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEefBovpGz0U_uxWY4bTw97X90O_3cGHgSfqadNNUJ968ig5dMcwbT0pAlL-5g_aem_bGZBRszf5wVOVWYYE3exTw&utm_content=120256590425020768&utm_term=120256309372940768
Tomi Engdahl says:
https://ieeexplore.ieee.org/document/7243739
BitWhisper: Covert Signaling Channel between Air-Gapped Computers Using Thermal Manipulations
Tomi Engdahl says:
https://www.uusiteknologia.fi/2026/10/07/samsung-selvitti-suomalaisten-tietoturvaa-varmuuskopiointi-mattaa/
Suomalaiset ovat Samsungin tilaaman selvityksen mukaan hyvin tietoisia internetin ja mobiililaitteiden käyttöön liittyvistä tietoturvakysymyksistä. Tarkkoja ollaan tietoturvan osalta, mutta heikkouksia on edelleen laitteiden varmuuskopioinnissa.
Uudessa Samsungin teettämässä mobiilaitteiden selvityksessä kysyttiin digiturvallisuuden, kuten henkilötietojen, salasanojen ja maksutietojen suojauksen, merkityksestä uusia kulutuselektroniikkalaitteita ostettaessa.
Tuloksien mukaan 39 prosenttia vastaajista kertoo huomioivansa turvatekijät suuressa määrin ja 45 prosenttia jonkin verran. Lisäksi useimmat (72 %) lataavat puhelimeensa ohjelmistopäivityksen samana päivänä.
Kännyköiden päivittämisessä vanhemmat ikäryhmät ovat jopa nuoria aktiivisempia, sillä yli 56-vuotiaista lähes puolet (47 %) päivittää puhelimen heti ohjelmistopäivityksen saapuessa, kun taas 18–34-vuotiaista näin tekee vain lähes joka viides (18 %).
Tomi Engdahl says:
https://www.securityweek.com/chrome-155-update-patches-247-vulnerabilities/
Tomi Engdahl says:
Artificial Intelligence
Wikimedia Says Rogue OpenAI Agents Tried to Turn Its Tools Into Proxies
Wikimedia looked into whether its own websites had seen activity like that disclosed by other organizations
https://www.securityweek.com/wikimedia-says-rogue-openai-agents-tried-to-turn-its-tools-into-proxies/
Tomi Engdahl says:
https://www.securityweek.com/androids-october-2026-updates-patch-25-vulnerabilities/
Tomi Engdahl says:
Cybercrime
FBI Blames Contractor’s Missed Patch for ShinyHunters Breach
The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees.
https://www.securityweek.com/fbi-blames-contractors-missed-patch-for-shinyhunters-breach/
Tomi Engdahl says:
Watch what you tell Claude. https://trib.al/YFpmebV
Wire Tapped
Anthropic Reports User to the Police
Watch what you tell Claude.
https://futurism.com/artificial-intelligence/anthropic-claude-ai-chatbot-police-violence-safety?fbclid=IwdGRjcAUzJbpjbGNrBTMlqGV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEe24n3ViGBmstALbuuUg-rfLYJU-sowWXX-uuWrn_emBq74ZOkfbY6mYNM9NE_aem_jZmrC5OcXXMSA46I_8nTpA
With mounting pressure on AI labs to curb the many real-world harms their products cause consumers, it’s never been clearer that they’re monitoring users’ conversations.
Just ask Carli Michelle Heller, a woman arrested in Bonita Springs, Florida after allegedly telling Anthropic’s chatbot Claude about her plan to “shoot up” a nearby sheriff’s office.
According to WINK News, Heller was charged with making a written threat of violence — a second-degree felony in Florida — after Anthropic’s internal monitoring software flagged her chat logs for human review. After being viewed by a human employee at Anthropic, WINK reports, the company determined that Heller’s plans rose to the level of a credible threat, ultimately informing local police.
As Lee County Sheriff Carmine Marceno told local reporters in a statement, the woman admitted to using Claude like a “diary,” apparently unaware that her chat history could be read by Anthropic employees.
Tomi Engdahl says:
https://www.facebook.com/share/p/1DfUVWYTnR/
Getting hacked is embarrassing enough, but having those hackers reveal your microscopic customer base is simply adding insult to injury, as the hacker group BYOD appears to have just done with Trump Mobile.
Trump Mobile Replies With The Message “We Have No Team To Handle This” When Informed Of A Hack That Stole The Data Of All Of Its 3,615 Subscribers, And Then Resorts To Calling The Hackers “Terrorists”
https://wccftech.com/trump-mobile-replies-with-the-message-we-have-no-team-to-handle-this-when-informed-of-a-hack-that-stole-the-data-of-all-of-its-3615-subscribers-and-then-resorts-to-calling-the-hackers-terroris/?fbclid=IwdGRjcAUz-GtjbGNrBTP4VWV4dG4DYWVtAjExAHBkb2YFc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEe5CBg5BQ7V6w4yNgFRDdFJZ2jCqkkEN3pEppiqoz3MPRJXF_kA6V64-1_Z-U_aem_sodmwl_xcmCPJafrqiSuEQ
Tomi Engdahl says:
https://www.dna.fi/blogi/-/blogs/tekoaly-on-hyva-apuri-mutta-huono-isanta-miten-kayttaa-tekoalya-turvallisesti-1?fbclid=IwdGRjcAUz-hNleHRuA2FlbQEwAHBkb2YFYWRpZAGrNm0G-_QLc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeskuadsBe_ve78UkD4DEQ1U4Fze7ERZarNdeAEEFx4Pgzv0pGHrW4YdVOVtg_aem_VONXHpRCbLvCGEfz4RVx_Q&utm_medium=paid&utm_source=fb&utm_id=120249656782200587&utm_content=120249656782210587&utm_term=120249656782190587&utm_campaign=120249656782200587
Tomi Engdahl says:
https://www.advania.fi/blogi/tietoturvavalvonta-tekoalyn-aikakaudella-agentic-soc-vai-perinteinen-soc?utm_source=facebook&utm_medium=paidsocial&utm_campaign=tietoturva&utm_id=120254872101720712&hsa_acc=355261135221557&hsa_cam=120254872101720712&hsa_grp=120254872101730712&hsa_ad=120254872101740712&hsa_src=fb&hsa_net=facebook&hsa_ver=3&fbclid=IwdGRjcAU0AR1leHRuA2FlbQEwAHBkb2YFYWRpZAGrOy5vpXwoc3J0YwZhcHBfaWQMMzUwNjg1NTMxNzI4AAEeu4ML8m1fA-9cAnc2UtlTNTSE5-YW6vw0bVbmRiy8ZEA9cFuIZg4iZ4wmxqg_aem_4u0N6gjhklpSSwzSM0ps4g&utm_content=120254872101740712&utm_term=120254872101730712