Search This Blog
Powered by Blogger.

Blog Archive

Labels

Footer About

Footer About

Labels

Load More
Trendy Right Now

Popular Posts

Showing posts with label Cyber Security. Show all posts
UK Cyber Sanctions
cyber espionage Cyber Security France Cyberattack FSB Cyber Operations Germany Cyber Response Russia Cyber Campaign Russia Sanctions State-Sponsored Cyberattacks UK Cyber Sanctions

France, Germany Summon Russian Envoys Over Alleged Cyber Espionage Campaign


France and Germany have announced diplomatic action against Russia following allegations that a coordinated cyber espionage and sabotage campaign target multiple European countries. In the coming days, the Foreign Minister said France would summon the Russian ambassador to Paris and impose sanctions on individuals and organizations thought to be involved. 


In Barrot's view, the alleged operation targeted more than a dozen countries, including France, and was orchestrated by the Russian Federal Security Service (FSB). The alleged operation was allegedly intended to conduct both espionage and sabotage across multiple European nations, according to Barrot. The campaign is believed to have targeted approximately 12 countries and is attributed to the coordination of cyber activities by the Russian Federal Security Service (FSB). 

During an interview with French broadcaster BFM TV, Barrot described the operation as a multi-national cyber campaign aimed at both espionage and sabotage. Several Russian individuals and entities are expected to be sanctioned by France for their alleged involvement. The announcement comes at a time when European governments are intensifying efforts to counter cyber threats related to Russia, exacerbated by the Ukraine conflict. 

On Monday, Germany summoned the Russian ambassador as well after joining other European nations in condemning the alleged cyber activities. According to a statement from the German foreign ministry, cyberattacks targeting Germany, European Union member states, and Ukraine are unacceptable and will be retaliated against, including additional sanctions. 

In recent years, French authorities have repeatedly accused Moscow of conducting cyberattacks against the nation's government and public institutions. While geopolitical tensions remain high, these allegations add to a series of cyber-related disputes between Russia and several European nations. As the European Union is preparing its 21st sanctions package against Moscow as a result of the war in Ukraine, diplomatic actions are coming in conjunction with the finalization of the 21st sanctions package. It is also being discussed whether the sanctions list should be expanded to include additional entities and individuals allegedly involved in cyber operations and other conflict-related activities. 

A number of France's institutions have been hacked in recent years, which makes the latest accusations part of a broader pattern of increasing cyber tensions between Russian and European governments. As well as this, the United Kingdom announced a new round of sanctions targeting Russian cyber networks. 24 individuals and entities alleged to be involved in cyber and hybrid operations linked to Russian intelligence services have been restricted by the UK government. 

Senior officials from Russian military intelligence (GRU), such as Vyacheslav Stafeyev, Ivan Senin, and Ivan Kasyanenko, have been sanctioned. According to British authorities, the measures aim to disrupt cybercriminal networks and proxy groups accused of engaging in malicious cyber activities aimed at undermining security and stability across Europe. 

France has not disclosed technical details about the alleged cyber campaign, nor has it provided evidence publicly linking the attacks to Russia. The latest allegations have not been responded to by Moscow. The coordinated actions by France, Germany, the European Union, and the United Kingdom demonstrate the growing efforts of the international community to deter state-sponsored cyberattacks through targeted sanctions and diplomatic pressure.
Read more »
User Privacy
Cyber Security Instagram AI Meta Muse User consent User Privacy

Meta’s Muse AI: How Instagram Users Can Opt Out After Privacy Backlash

 

Meta’s short‑lived Muse Image AI on Instagram let users remix public photos into AI images by default, triggering a storm of privacy and consent backlash before Meta pulled the feature. Meta’s Muse Image tool was designed to turn Instagram into a generative AI playground, allowing people to create new images using photos from any public account. 

By tagging a public handle in an AI prompt, users could generate stylised visuals that borrowed someone else’s likeness or feed without ever asking permission. Meta framed Muse as a creative upgrade, promising strong safety guardrails and quick controls for those who wanted to opt out. But that framing collapsed almost immediately once people realised just how much quiet data sharing sat behind the feature.  

The core problem was consent: adult users with public profiles were opted in automatically, with no upfront notice or explicit choice. Anyone could be remixed into AI art by strangers simply because their account wasn’t private. Reports showed Muse could generate images of people who had never interacted with the tool at all, including photos featuring children who obviously couldn’t consent to such reuse. To make matters worse, Meta’s own policy confirmed users would not be notified when their content was used in AI features, keeping the whole process largely invisible.  

Creators, unions and privacy advocates quickly denounced the opt‑out model as an inversion of basic digital rights. Hollywood unions and talent agencies warned that Muse normalised non‑consensual manipulation of someone’s image and could undermine control over professional likeness and copyrighted work. Digital rights groups called the rollout a “privacy landmine”, pointing to existing harms from deepfakes and non‑consensual AI imagery elsewhere on the internet. Their argument was simple: protection should be the default, and any AI reuse of identity should require explicit, informed opt‑in.  

Under pressure, Meta stressed that private accounts and users under 18 were automatically excluded from Muse, and that any public user could disable the feature with a few taps in Instagram’s Sharing and Reuse settings. Users could also flip their profile to private to lock themselves out of AI remixes entirely. But critics noted these controls were buried, easy to miss and did nothing to remove AI images already generated from someone’s posts. For many, this reinforced the sense that meaningful control arrived only after the data had already been exploited.  

Within days of launch, the backlash forced Meta to pause and then remove the Instagram implementation of Muse Image, admitting the feature “missed the mark” on user expectations. The episode has become a case study in how not to roll out AI features on social platforms, especially when they touch identity and consent. It underscores a wider shift in user sentiment: AI creativity is welcome, but only when people remain clearly informed, empowered and in control of how their content trains or feeds the machine.
Read more »
USDC
Arbitrum blockchain crypto security Cyber Security DeFi attack Ethereum Ostium exploit Ostium hack USDC

Ostium Confirms $23.75 Million Vault Exploit After Off-Chain Price Feed Compromise

 

Ostium, a decentralized trading platform built on the Arbitrum blockchain, has confirmed that hackers stole $23.75 million from its liquidity provider vault after compromising the platform’s off-chain price feed infrastructure. 
 
In an update shared by the company, Ostium explained that the attackers submitted fraudulent price reports disguised as legitimate data. Using the manipulated pricing information, they quickly opened and closed oversized trading positions to generate illicit profits from the liquidity provider’s vault. 
 
The company emphasized that user collateral remained secure as it is stored in a separate smart contract that was not impacted by the attack. Existing trading positions also remain intact and have not been liquidated. 
 
Ostium allows users to trade both traditional and cryptocurrency-linked assets directly from their crypto wallets. The platform relies on external price feeds for market data, while all transactions are settled using USDC, a stablecoin pegged to the US dollar. 
 
The platform initially disclosed the security incident on July 16, announcing a temporary suspension of trading. At the time, it said that relevant authorities had been informed and that efforts were underway to monitor the movement of the stolen funds. 
 
Providing further details, Ostium said the attackers exploited vulnerabilities in the off-chain infrastructure responsible for supplying market prices to the protocol. The manipulated price feeds enabled them to siphon funds from the liquidity provider vault without affecting trader-held collateral. 
 
According to blockchain security firm PeckShieldAlert, the exploiter converted the stolen USDC into 12,080 Ethereum (ETH) before depositing 10,540 ETH into Tornado Cash, a cryptocurrency mixing service commonly used to obscure transaction trails. 
 
Ostium reiterated that leveraged trading positions are maintained in a separate smart contract, ensuring that customer collateral was not compromised. Although active long and short positions remain recorded on the platform, they are currently frozen following the suspension of trading, which occurred within an hour of the first exploit transaction. 
 
The company said it is focused on securing the compromised infrastructure and evaluating recovery options for affected liquidity providers. 
 
Five days after the breach, trading on Ostium remains suspended. The platform has stated that users will receive at least 24 hours' notice before trading resumes. Once operations restart, all existing positions will be marked to the reopening price. 
 
Ostium also confirmed that it will release a detailed post-mortem report outlining the technical aspects of the exploit in the coming days.
Read more »
Zero Trust Security
agentic AI ai agents AI Security Cyber Security enterprise cybersecurity Identity Governance Identity Security Machine Identities Non-Human Identities Zero Trust Security

AI Agents Expose Growing Identity Security Gaps in Enterprise Environments

 

In the face of the rapid adoption of artificial intelligence agents, enterprise security is faced with an increased challenge, as organizations struggle to maintain an increasing number of non-human identities gaining access to sensitive information and critical systems. In an increasingly automated world, security experts warn that each new AI agent introduces another trusted identity into the organization. 

The use of machine identities increases an organization's attack surface without proper oversight, making it harder for security teams to maintain a complete inventory of privileged accounts and monitor their interactions with critical business systems if they are not monitored properly. As opposed to human users, AI agents, service accounts, OAuth applications, and workload identities do not follow traditional employee lifecycles. 

There are many advantages to generating them automatically, inheriting permissions, interacting across multiple systems, and often remaining active long after the applications that generated them cease to exist. In the opinion of security experts, this emerging ecosystem is leading to weaknesses in identity governance that many organizations have yet to address. According to the Non-Human Identity Management Group, machine identities outnumber human users by up to 50 to 1 in many enterprise environments. 

Some of these technologies exist only temporarily, while others continue to operate without any clear ownership for years, making it difficult to determine who created them, what resources they are allowed access to, and whether they are still necessary for security teams to monitor. During a cyber campaign conducted in 2025, threat actor UNC6395 exploited a trusted OAuth token associated with Salesloft's Drift chat integration, demonstrating the risk. 

Instead of exploiting a software vulnerability, the attackers exploited an already trustworthy machine identity in order to access AWS credentials, Snowflake tokens, and other sensitive data across Salesforce environments. The incident demonstrated how compromised machine identities can become gateways to broader enterprise cyberattacks. Security professionals emphasize that artificial intelligence itself is not creating new cybersecurity problems but rather accelerating existing ones. 

With organizations deploying AI-powered agents to automate business processes, the number of privileged identities is continuing to increase, increasing the attack surface if governance processes do not keep pace. Additionally, experts maintain that AI agents are not simply software tools but should be regarded as a distinct class of digital identity instead. 

With AI systems increasingly accessing enterprise applications, making decisions, and executing workflows independently, organizations must provide each AI agent with a unique identity, clear permissions, and full accountability in order to ensure that its actions can be monitored and audited.  

The Netwrix Data and Identity Security Report 2026 reported that organizations with significant increases in the number of identities experienced a 43% breach rate over the previous year, compared to 11% among organizations with no significant changes in their identity landscape due to artificial intelligence. There is no doubt that visibility alone is not sufficient to address the concerns of many affected organizations, as they already invested in identity governance and monitoring. 

There is also a growing concern regarding agent sprawl, in which organizations deploy artificial intelligence assistants and autonomous agents rapidly without establishing governance frameworks. As the number of machine identities within an organization increases, cybersecurity experts warn that this can cause duplicate AI agents, inconsistent permissions, and increased operational, security, and compliance risks.  

As well as stressing the importance of identifying machine identities, the report stresses the imperative of continuous identity governance which tracks ownership, permissions, lifecycles, and access rights throughout the lifespan of every AI agent and non-human identity. The accumulative nature of trusted identities can increase the likelihood that unauthorized access and misuse can occur without ongoing governance. The following four key questions should be answered continuously by organizations for every identity in their environment: What identities exist? 

Who owns them? What can they access? When should they be retired? Unless clear ownership and lifecycle management are in place, AI-driven identities may silently accumulate excessive privileges and provide an opportunity for attackers. Experts also recommend that AI agents be subject to the Zero Trust security principles. 

The same way that human users require continuous verification and least privilege access, AI agents should be given only the appropriate permissions to accomplish their duties. Keeping detailed audit logs and implementing lifecycle controls (including the capability of quickly eradicating or retiring unnecessary agents) can reduce security risks over the long term. 

A growing number of industries are adopting artificial intelligence, which requires cybersecurity strategies to evolve beyond traditional user-focused identity management strategies. It has been recommended that organizations establish stronger governance for non-human identities, identify an owner for each AI agent, and periodically review their permissions. 

A lack of such controls could result in trusted AI-powered identities becoming one of the most overlooked attack vectors in today's enterprise environments, according to experts.
Read more »
Website Security
Cyber Security digital marketing Site Performance Website Maintenance Website Security

Regular Website Maintenance: Why It Matters

 

A website is often the first place customers meet your brand, but many businesses treat it like a one-time project. That is a mistake. Once a site goes live, it needs regular attention to stay secure, fast, and useful. Without maintenance, even a well-designed website can begin to slow down, break in small ways, or create trust issues for visitors. Over time, outdated software, broken links, and stale content can quietly damage your online presence and make your business look inactive. 

The first major reason for regular maintenance is security. Websites are constantly exposed to threats such as outdated plugins, weak passwords, malware, and other vulnerabilities. When updates are ignored, attackers can exploit those gaps and compromise user data or site functionality. Regular patches, monitoring, and backups reduce that risk and give businesses a much stronger defense. For any company that collects leads, processes payments, or stores customer information, maintenance is a basic part of digital protection.

The second reason is performance. A website that loads slowly or behaves unpredictably can frustrate visitors within seconds. Images may become too heavy, scripts may conflict, and plugins may stop working properly after updates elsewhere in the system. Regular checks help identify these issues before they hurt conversions. A faster, smoother site also supports better engagement because users are more likely to stay, explore, and complete a form or purchase when the experience feels effortless. 

The third reason is search visibility. Search engines prefer websites that are current, technically sound, and easy to crawl. If pages contain broken links, missing metadata, outdated content, or poor mobile performance, rankings can suffer. Maintenance helps keep content fresh and signals that the site is active and relevant. That matters because search traffic is often one of the most valuable sources of visitors for businesses that want steady, long-term growth. 

Regular maintenance also improves credibility. Visitors notice when a site feels abandoned, loads slowly, or contains old information. A website should evolve with your business, your audience, and your goals. When you treat maintenance as an ongoing habit instead of an emergency fix, you protect your brand, support your marketing, and reduce expensive problems later. In short, a maintained website is not just healthier; it is more trustworthy and more effective.
Read more »
Cybersecurity Governance
AI cybersecurity AI governance AI technology CISO CISO best practices CISOs Cyber Security Cybersecurity Governance

Splunk Report Finds One in Five CISOs Pressured to Hide Cybersecurity Incidents

 

The Splunk 2026 CISO report makes public the challenges that CISOs face when trying to meet the rising demand to mask security incidents while also complying with tightening disclosure laws. According to the report, which draws its conclusions from the responses of 650 CISOs, 20% of respondents had experienced pressure from their organization not to disclose a cybersecurity incident or breach, and 53% of those who were challenged had reported an incident or breach anyway. 

It is stated that business and regulatory priorities conflict, putting CISOs in the middle of a regulatory dilemma. In addition, there is a growing sense among CISOs that they could face disciplinary or legal repercussions if they fail to protect the company from cyber ​​security threats. The percentage of CISOs concerned about being held accountable for a cyber ​​incident increased from 56% in 2025 to 78% in 2026. 

The report also shows that 79% of CISOs believe their jobs have become increasingly complex over the last year, with 43% reporting having taken on new roles and responsibilities outside their primary function, such as preventing fraud and financial crime. Moreover, 96% of CISOs responded that they are now responsible for the governance and risk management of artificial intelligence. This is yet another factor contributing to the complexity of the CISO’s work, as they must ensure that companies adopt responsible AI practices. 

The increasing difficulty of the CISO position is reflected in the fact that 26% of CISOs stated they have considered quitting their jobs due to the burdensome nature of the role. It is therefore not surprising that the report’s findings coincide with new government regulations that further tighten cybersecurity disclosure laws. For example, according to the Cyber Security and Resilience (Network and Information Systems) Bill currently under consideration in the UK Parliament, organizations in the UK will be required to report on major cyber ​​security incidents and strengthen board-level oversight of cybersecurity. 

CISOs must therefore carefully weigh the risks and benefits of any response, as reporting an incident too soon could result in financial losses for the company, whereas reporting it later could incur severe regulatory penalties. The report recommends that CISOs focus on building and maintaining strong governance by providing detailed information on how and by whom incidents were uncovered, as well as which steps had been taken to investigate and remediate the damage. 

This will ensure that the CISO’s decisions regarding disclosure of an incident are based on verifiable facts and figures. By analyzing all relevant data across enterprise networks, cloud, endpoints, or servers, the security leader can build a comprehensive report outlining the exact course of action taken after the breach was discovered. This will help to both satisfy regulatory authorities during an audit and assist in determining if and when a report needs to be filed. 

The report therefore highlights the fact that the role of the CISO has changed dramatically and now entails a wide range of responsibilities, requiring them to make decisions that go beyond the realm of traditional cybersecurity.
Read more »
European Union
ADDW Advanced Driver Cyber Security Driver Distraction Warning System EU vehicle safety rules European Union

EU Mandates Driver Distraction Warning Systems in All New Vehicles Amid Privacy and Safety Debate

 

 
The European Union has introduced stricter vehicle safety regulations, making Advanced Driver Distraction Warning (ADDW) systems mandatory in all newly registered vehicles across member states from this week. The move is part of the European Commission’s expanded General Safety Regulation, aimed at reducing road fatalities and improving overall traffic safety.

Although Europe is considered one of the safest regions for road travel, the European Commission noted in its announcement that "the number of deaths and injuries from road accidents is still too high." To address this, the updated rules introduce several advanced safety requirements for new vehicles.

In addition to ADDW systems, the new legislation requires advanced emergency braking systems capable of detecting pedestrians and cyclists, along with improved forward visibility features. Driver distraction monitoring technology, which uses cameras to observe a driver's attention levels, will now become a standard feature in all newly registered vehicles.

These camera-based systems continuously monitor a driver's eye movements and facial expressions using sensors positioned behind the steering wheel or above the vehicle’s infotainment display. If the system determines that the driver has looked away from the road for an extended period, it issues alerts encouraging them to refocus.

Depending on the manufacturer, these alerts may include audible warnings, dashboard notifications, or the temporary disabling of features such as adaptive cruise control and other automated driving functions.

However, the mandate has sparked criticism from some quarters. The European Conservative described the Commission’s decision as the "latest annoying piece of EU overregulation," raising concerns over the lack of transparency regarding how data collected by these systems will be managed.

Current ADDW systems are designed to function in a closed-loop environment, where all information is processed locally within the vehicle without being transmitted to external servers. Despite this, concerns persist over the future handling of driver data as vehicles become increasingly connected.

Since April 2018, all newly approved passenger cars and light vans sold in the European Union have been equipped with the eCall emergency system, which automatically contacts emergency services following a serious accident. Combined with forecasts from consulting firm McKinsey that 95% of vehicles worldwide will be internet-connected by 2030, experts believe driver-monitoring information could eventually be transmitted beyond the vehicle.

Privacy concerns have already been highlighted in previous research. In 2023, Mozilla reviewed the privacy practices of 25 automotive brands and found that none met the organization's own privacy and security expectations. The report described connected vehicles as "the worst product category we have ever reviewed for privacy."

The issue has also drawn regulatory attention outside Europe. In 2024, the Texas Attorney General launched an investigation into several automobile manufacturers following allegations that they were collecting extensive driver data and selling it to third parties.

Critics argue that the European Union has yet to clearly define how information gathered by ADDW systems will be governed. They warn that such data could potentially be used in areas such as insurance pricing or legal proceedings in the future.

Beyond privacy issues, some motorists have questioned the usability of driver monitoring technology, arguing that overly sensitive systems can themselves become a source of distraction by issuing unnecessary alerts during routine driving activities.

While Euro NCAP has indicated that it aims to reduce reliance on "annoying" in-car safety features, the European Union’s latest regulations place greater emphasis on driver monitoring technologies, highlighting the ongoing debate between improving road safety and protecting driver privacy.
Read more »
Ransomware
AI Autonomous Agents Cyber Security Langflow Bug Ransomware

AI Agent Runs First End-to-End Ransomware Attack

 

Security researchers have long warned that AI would lower the barrier to cybercrime, but the latest case makes that threat tangible. In the operation described by Sysdig and covered by Forbes, an autonomous agent carried out the technical steps of a ransomware attack from initial access to encryption and ransom-note generation. The group’s analysis suggests the attack was not a simple script; it adapted when it hit obstacles, corrected its own mistakes, and kept moving without a human at the keyboard. 

The campaign reportedly began with an exposed Langflow incident, which the attacker used to gain access through a known vulnerability. From there, the agent searched for secrets, including credentials and cloud keys, then expanded into a production environment and escalated privileges. Researchers said it encrypted more than 1,300 configuration records and generated its own ransom note with a Bitcoin address, showing how an AI system can combine reconnaissance, exploitation, and extortion in one chain. 

What makes the story unsettling is not only the automation, but the speed. One reported login failure was fixed in 31 seconds, a reminder that AI can iterate much faster than a human operator can type, think, or troubleshoot. That kind of responsiveness matters because ransomware succeeds by compressing the defender’s reaction time. If attackers can use agents to scan, pivot, and encrypt at machine speed, security teams will need similarly automated detection, containment, and recovery tools to keep up. 

Still, the incident also shows that “fully autonomous” cybercrime may be more complicated than the headline suggests. Later reporting said humans may have still chosen the target, prepared infrastructure, or supplied stolen credentials, even if the AI handled the intrusion itself. That distinction matters, because it means defenders are not just facing smarter malware, but a new hybrid model in which human planning and AI execution reinforce each other. The lesson for businesses is clear: reduce exposed services, enforce strong credential hygiene, segment critical systems, and assume that the next serious attack may be built and operated with far less human effort than before.
Read more »
Subscribe to: Posts (Atom)