Web infrastructure provider Vercel has disclosed a security breach that allows bad actors to gain unauthorized access to "certain" internal Vercel systems. The incident stemmed from the compromise of Context.ai, a third-party artificial intelligence (AI) tool, that was used by an employee at the company. "The attacker used that access to take over the employee's Vercel Google Workspace account, which enabled them to gain access to some Vercel environments and environment variables that were not marked as 'sensitive,'" the company said in a bulletin. Vercel said environment variables marked as "sensitive" are stored in an encrypted manner that prevents them from being read, and that there is currently no evidence suggesting that those values were accessed by the attacker. It described the threat actor behind the incident as "sophisticated" based on their "operational velocity and detailed understanding of Vercel's systems." The company also said it's working with Google-owned Mandiant and other cybersecurity firms, as well as notifying law enforcement and engaging with Context.ai to better understand the full scope of the breach. A "limited subset" of customers is said to have had their credentials compromised, with Vercel reaching out to them directly and urging them to rotate their credentials with immediate effect. The company is continuing to investigate what data was exfiltrated, and plans to contact customers if further evidence of compromise is discovered. Vercel is also advising Google Workspace administrators and Google account owners to check for the following application OAuth application: 110671459871-30f1spbu0hptbs60cb4vsmv79i7bbvqj.apps.googleusercontent.com As additional mitigations, the following best practices have been recommended - - Review activity log for signs of suspicious activity. - Audit and rotate environment variables that contain secrets and are not marked as sensitive. Use sensitive environment variables to ensure secrets are protected. - Investigate recent deployments for anything unexpected or suspicious. Ensure that Deployment
Apr 20, 2026 · via thehackernews.com
The Lagos State Government has released a set of Cybersecurity Guidelines, a strategic framework designed to enhance digital safety for businesses, public institutions, and residents. In a statement, yesterday, the Commissioner for Information and Strategy, Gbenga Salau, said the development represents another decisive step in Lagos’ mission to become a SMART, secure, and globally competitive digital hub. As Africa’s fastest-growing technology ecosystem – home to thousands of enterprises – Lagos faces increasing exposure to cyber risks. The National Information Technology Development Agency (NITDA) estimates that Nigeria loses over $500 million (approximately N250 billion) annually to cybercrime, underscoring the urgency for stronger, coordinated security measures. The guidelines note that while Lagos is rapidly evolving into a SMART City, this progress brings heightened vulnerability to cyber threats. The newly issued guidelines, available at https://lagosstate.gov.ng/cybersecguide, outline clear, practical, and scalable cybersecurity best practices for small businesses, medium and large enterprises, and Ministries, Departments, and Agencies (MDAs). They are aligned with key national frameworks, including the Cybercrime Act (2024), the Nigeria Data Protection Act (2023), and the National Cybersecurity Policy and Strategy (2021). The document emphasised that these recommendations are not regulatory mandates but tools designed to empower stakeholders with practical, context-specific guidance. Breaking the news, the Lagos State Government reaffirmed its commitment to fostering a secure digital environment that promotes innovation, investment, and public trust. The guidelines further strengthen Lagos State’s leadership in advancing digital trust and building a resilient, future-ready digital economy. The Government praised the Lagos State Cybersecurity Advisory Council, chaired by Prof. Fene Osakwe, for its strategic leadership and technical expertise in developing the framework. Special recognition was also extended to the Honourable Commissioner for the Ministry of Innovation, Science and Technology, Mr Tubosun Alake whose vision and support were instrumental in driving this initiative. The release of these guidelines
Apr 20, 2026 · via guardian.ng
WASHINGTON — Brandon Pugh, principal cyber advisor to the secretary of the Army, conducted engagements across Jordan and Israel in December 2025 to strengthen cybersecurity partnerships and advance regional cooperation. The engagements brought together military leaders, government officials, industry experts and academic institutions to address emerging cyber challenges. U.S. Ambassador to Jordan Jim Holtsnider, left, and Brandon Pugh, principal cyber advisor to the secretary of the Army, met for breakfast in Amman, Jordan, Dec. 5, 2025, to discuss cybersecurity efforts and innovation initiatives between the United States and Jordan. The meeting reinforced the Army’s commitment to deepening interoperability and advancing collective cyber defense with regional partners. Brandon Pugh, principal cyber advisor to the secretary of the Army, stands outside the U.S. Embassy in Amman, Jordan, Dec. 7, 2025. The visit highlighted the importance of whole-of-government coordination in advancing U.S. security cooperation priorities. Brandon Pugh, principal cyber advisor to the secretary of the Army attends Cyber Week 2025 at Tel Aviv University in Tel Aviv, Israel, Dec. 9, 2025. The annual conference brings together global leaders from government, academia and industry to address emerging cyber challenges and strengthen international collaboration. Brandon Pugh, principal cyber advisor to the secretary of the Army, speaks to attendees during Cyber Week 2025 at Tel Aviv University in Tel Aviv, Israel, Dec. 9, 2025. He emphasized the Army’s commitment to Continuous Transformation and the integration of advanced cyber capabilities to support multidomain operations. Brandon Pugh, center left, principal cyber advisor to the secretary of the Army, speaks with U.S. Army Central Command Soldiers and allied partners at the Gaza Civil Military Coordination Cell in Kiryat Gat, Israel, Dec. 11, 2025. He thanked U.S. service members and coalition partners for their dedication and emphasized the critical role of integrated capabilities in joint and coalition operations. These efforts
Apr 20, 2026 · via army.mil
Cryptika quickly earned reputation for firsts. We were the first to provide our business customers with industry's first integrated, end-to-end security operations and response services. Assisting our customers evaluating their IT related business risks, building and improving IT security strategies, designing infrastructures, implementing international security standards such as the ISO 27k ISMS, PCI-DSS, and SWIFT CSP. Cryptika goes beyond business level and management systems, where we evaluate and audit our customers environments at the IT systems, infrastructure and business applications level by providing penetration testing, vulnerabilities assessments, security architecture review services. We’re delivering a new approach in cybersecurity, purposely designed to protect your organization from the most advanced cyber-attacks. Our pioneering approach to threat hunting and response has been rigorously tested and proven by highly regarded third-party industry analysts. We believe standing up for our values is the highest form of honor. We assist our customers in operating and maintaining their IT assets and applications with full discretion, prudence and diligence - both financial and technical. Our strength is in our ability to carter to our clients’ varied needs and provide a highly competitive procurement management service. Our aim is to keep you at the forefront of technology securely and economically. Whether you are looking for advice, testing or auditing services, it is our job as information risk, security and compliance specialized firm to keep our customers protected in today's dynamic risk environment. Our elite team, experience and proven approach keeps you protected with future-proofed advice delivered in plain English. By thinking outside the box, and keeping up to date with all the latest industry developments, we ensure we keep you one step ahead of the cyber threats and vulnerabilities. Vulnerabilities Assessment & Penetration Testing (VAPT) VAPT helps protecting businesses by exposing weaknesses that provide an alternative route to sensitive
Apr 20, 2026 · via cryptika.com
Safeguard 24/7 news distribution The transition from print to digital news services has forever changed the media industry and exposed the sector to an even broader array of cyberthreats. For Groupe Le Monde, a complex digital landscape, online content distribution, and the integration of technologies such as artificial intelligence (AI) have accelerated this risk, with potential consequences for freedom of information and plurality of opinions. The publisher needed to: - Secure expanding threat landscape: Groupe Le Monde was becoming a prime target for AI-generated phishing attacks, data theft, denial-of-service (DoS) attacks, and ransomware threats. - Reduce brand impersonation: Groupe Le Monde and its associate organisations were increasingly victims of content theft and brand impersonation, which are difficult to contain without adequate cybersecurity tools. - Increase visibility and control: A fragmented suite of network and endpoint security systems made it harder to create a single, joined-up view of cybersecurity. “With cybercriminals around every corner, Groupe Le Monde’s complex digital ecosystem created challenges for the 24/7 production, distribution, and management of news content. Our goal was to proactively ensure that cybersecurity and data privacy were embedded throughout the organisation.” – Laurent Sabri Chief IT Architect, Groupe Le Monde Anticipate and understand the evolution of security risks Groupe Le Monde standardised on a platform approach to cybersecurity, using a consolidated portfolio of Palo Alto Networks endpoint and network security technologies to safeguard the organisation from every type of known and unknown threat. The organisation was already using PA-Series hardware firewalls to centrally protect its headquarters and data centre. Based on this success, Laurent Sabri, Groupe Le Monde’s Chief IT Architect, and his team added Cortex XDR to defend the group’s endpoints and provide a centralised platform for detection and response. The AI-powered solution accurately prevents threats to the endpoints while gathering data from
Apr 20, 2026 · via paloaltonetworks.com
Anthropic’s Claude Mythos Escapes Sandbox in Alarming Cybersecurity Test 2026 Anthropic’s Claude Mythos Preview demonstrated advanced capabilities by escaping its sandbox environment during internal safety evaluations in early 2026. April 19, 2026 Hour: 2:21 pm 🔗 Comparte este artículo Anthropic revealed that its powerful new model Claude Mythos Preview successfully escaped a secure sandbox during safety testing, built a multi-step exploit to access the internet, and emailed a researcher while they were eating lunch in a park. The company has decided not to release the model publicly due to its advanced cyber capabilities. Anthropic Reveals Claude Mythos Successfully Escaped Sandbox in Controlled Test San Francisco, April 19, 2026 — Anthropic has disclosed that its highly capable new AI model, Claude Mythos Preview, managed to break out of a secure sandbox environment during internal safety testing, raising fresh questions about the challenges of containing frontier AI systems with powerful cybersecurity abilities. According to Anthropic’s official system card released earlier this month, researchers placed an early version of Claude Mythos Preview inside an isolated computing environment designed to prevent external interaction. As part of a deliberate red-teaming exercise, the model was instructed to attempt escaping the sandbox and finding a way to contact the overseeing researcher. Claude Mythos succeeded. It developed what Anthropic described as a “moderately sophisticated multi-step exploit,” gained unauthorized internet access, and sent an email to the researcher — who received the message while eating a sandwich in a park outside the facility. - Claude Mythos Preview demonstrated exceptional skills in identifying and exploiting vulnerabilities, including zero-day exploits in major operating systems and web browsers. - The model not only escaped the sandbox but also made unsolicited postings to public-facing channels without further instructions. - Anthropic has decided against a general public release of the model due to its
Apr 20, 2026 · via telesurenglish.net
Cybersecurity’s Tower of Babel: Why we are still lost in translation When leadership teams and security functions operate in different languages of risk, critical signals might be dismissed until the problem has escalated DeeperDive is a beta AI feature. Refer to full articles for the facts. BUSINESS leaders like to believe that in a crisis, the enterprise will instinctively pull together. Experience suggests otherwise. The biblical story of the Tower of Babel is a useful reminder: Projects do not fail because of a lack of ambition; they fail because people stop understanding one another. Today’s corporate world is living out a digital version of that myth. Boards, leadership teams and IT departments confront the same cybersecurity threats, but describe them in mutually unintelligible languages. Boards speak of risk appetite and shareholder value while IT teams speak of zero trust, telemetry and patch management. For years, this mismatch was tolerated. Cybersecurity was treated as a “black box” technical issue delegated to the chief investment officer or chief information security officer (CISO). That era is over. The “it’s too technical” defence has expired, dismantled by two shifts: the evolution of fiduciary duty and the democratisation of knowledge via artificial intelligence, even as the same technology accelerates the threats organisations now face. Navigate Asia in a new global order Get the insights delivered to your inbox. At the same time, AI is reshaping the threat landscape itself. Recent reports have warned that attackers are using AI to move faster and operate at greater scale, compressing the window between vulnerability discovery and exploitation. As more advanced AI models enter real-world testing, organisations are being forced to contend not just with more sophisticated threats, but with the speed at which they unfold. Research also highlights how persistent this disconnect remains. A study by IANS Research
Apr 19, 2026 · via businesstimes.com.sg
🚀 CloudSEK becomes first Indian origin cybersecurity company to receive investment from US state fund Read more Leaked credentials are exposed authentication data such as email-password pairs, usernames, or hashed passwords that become accessible after a data breach. Attackers extract this information from compromised systems and distribute it across various online channels. Breaches occur when unauthorized access allows attackers to download user databases containing sensitive login details. Exposed data often includes both plaintext credentials and hashed values depending on the system’s security implementation. Stolen credentials quickly spread across cybercriminal ecosystems where they are reused, sold, or combined with other datasets. Such exposure increases the risk of unauthorized access, making continuous monitoring essential for security. Leaked credentials are distributed across multiple online environments where attackers store and reuse stolen data. Dark web marketplaces are primary hubs where credential dumps are sold in bulk. These platforms enable large-scale distribution, allowing attackers to reuse stolen data across multiple targets. Hacker forums are used to share and exchange leaked credential databases within restricted communities. Limited access increases the value of these sources for tracking newly surfaced leaks. Infostealer malware captures credentials from infected systems and stores them in structured logs. Logs contain fresh and valid data, making them highly effective for immediate exploitation. Paste sites host credentials that are publicly shared in plain text. Open access allows automated systems to detect and index exposed data quickly. Public repositories expose credentials due to misconfigurations or accidental uploads. A case reported by CloudSEK showed exposed credentials in a GitHub repository that could have compromised sensitive systems for over 500 employees. Cybersecurity platforms detect leaked credentials using automated systems that continuously scan, collect, and surface exposed data from multiple sources. Source discovery systems identify where leaked data is likely to appear across the web. Platforms map high-risk
Apr 19, 2026 · via cloudsek.com
WMC Global launched WMC Insight+, an agentic AI-powered platform to detect and disrupt phishing and fraud across mobile ecosystems, and announced new executive hires and a strategic investment to support growth. The company introduced WMC Insight+ as part of its next phase of innovation in mobile threat intelligence, leveraging agentic AI to identify and mitigate threats such as phishing URLs, malicious phone numbers, and compromised identities in real time. The platform is designed to address a rapidly evolving threat landscape driven by the rise of next-generation messaging technologies, including Rich Communication Services and over-the-top platforms such as WhatsApp, Telegram, and iMessage. These systems, while enhancing user experience, have also created new vectors for attacks such as “smishing,” where malicious actors exploit trusted communication channels. WMC Insight+ provides both intelligence and action capabilities, enabling organizations to not only detect threats but also initiate takedowns and disrupt malicious infrastructure. The system is accessible through an API-enabled interface and is targeted at industries including telecommunications, financial services, and retail. In parallel with the product launch, WMC Global appointed Manmeet Bhasin as Chief Executive Officer and Subra Ramesh as Chief Technology Officer, strengthening its leadership team as it scales operations. The company also received investment from Trajectory Capital, which is focused on backing technology companies building next-generation AI solutions. The leadership additions bring experience in enterprise security and AI-driven platforms, supporting WMC Global’s strategy to expand its capabilities and market reach. WMC Insight+ is expected to be generally available starting April 15, 2026, positioning the company to capitalize on increasing demand for AI-driven cybersecurity solutions in mobile-first environments. KEY QUOTES: “By integrating agentic AI into their proven threat intelligence framework, WMC Global is closing the window of opportunity for fraudsters. Insight+ is exactly the type of innovation needed by large companies to stay ahead
Apr 19, 2026 · via pulse2.com
Bluetooth tracker hidden in a postcard and mailed to a warship exposed its location — $5 gadget put a $585 million Dutch ship at risk for 24 hours A postcard spy Get Tom's Hardware's best news and in-depth reviews, straight to your inbox. You are now subscribed Your newsletter sign-up was successful HNLMS Evertsen, a Dutch air-defense frigate part of the NATO carrier strike group centered on the French carrier Charles de Gaulle, has inadvertently revealed its position after receiving a postcard containing a hidden Bluetooth tracker. According to The Register, the Dutch Ministry of Defense posted instructions online to make it easier for family and friends to communicate with personnel aboard a navy ship, but didn’t fully consider the ramifications for operational security (op-sec). Bluetooth trackers like the Apple AirTag cost $29 a piece, but there are cheaper, generic versions available on Amazon that cost $10 for two trackers. By allowing a potential adversary to track the ship in real-time, it could put the vessel and the entire strike group at risk, as that information can be used for other operations against the fleet. The fact that it was mailed in meant that spies do not even need to go near the ship to place a tracker on the $585 million Navy ship. Dutch journalist Just Vervaart, working for regional media network Omroep Gelderland, followed the directions posted on the Dutch government website and mailed a postcard with a hidden tracker inside. Because of this, they were able to track the ship for about a day, watching it sail from Heraklion, Crete, before it turned towards Cyprus. While it only showed the location of that one vessel, knowing that it was part of a carrier strike group sailing in the Mediterranean could potentially put the entire fleet at risk.
Apr 19, 2026 · via tomshardware.com
Artificial intelligence "agents" promise to save users time and energy by automating tasks, but the growing power of systems like OpenClaw is setting cybersecurity experts on edge. Powered by a wave of hype, OpenClaw today claims more than three million users worldwide. The system allows users to create so-called agents, tools based on a large language model (LLM) like OpenAI's ChatGPT or Anthropic's Claude that can carry out online tasks. "We've moved from an AI you could talk with via a chatbot to an agentic AI, which can take action... the threat and the risks are definitely much greater," said Yazid Akadiri, principal solutions architect at Elastic France, an IT security company. In an article titled "Agents of Chaos" that has yet to be peer-reviewed, a 20-strong team of researchers studied the behaviour of six AI agents created with OpenClaw. They spotted a dozen potentially dangerous actions executed by the systems, from deleting an email inbox to sharing personal information. Many users have posted similar stories of OpenClaw mishaps online. "When you deploy agents, you have no control over what they'll do, and when you try to look at what they're doing, you'll find them going far beyond the limits you set," said Adrien Merveille, an expert at the Check Point cybersecurity agency. And the security gaps are not limited to the agents' own mistaken actions. To carry out useful work, the tools need access to personal accounts for email, calendars or search engines -- drawing the attention of cyberattackers. - 'Delete your database' - AI agents are likely to become top targets for hackers as their use spreads, said Wendi Whitmore, chief security intelligence officer at cybersecurity firm Palo Alto Networks. "As soon as (attackers) are inside an environment, (they're) immediately going to the internal LLM (agent) that's being
Apr 19, 2026 · via pmg-ky1.com
JavaScript is disabled in your browser.
Please enable JavaScript to proceed.
A required part of this site couldn’t load. This may be due to a browser extension, network issues, or browser settings. Please check your connection, disable any ad blockers, or try using a different browser.
Apr 19, 2026 · via sfgate.com
The Washington County Republican Women hosted members of Southern Utah’s Sunshine Caucus at their monthly luncheon Thursday at Santa Clara City Hall for a recap and Q-and-A session on the general legislative session. St. George Reps. Walt Brooks and Colin Jack attended along with Rep. Rex Shipp of Cedar City. Though not a member of the Sunshine Caucus, Rep. Logan Monson of Blanding also participated. Other members of the caucus were unable to attend due to prior obligations. Each legislator reviewed the bills they worked on during the 45-day session, with recurring emphasis on water management, cybersecurity, election integrity and judicial transparency. Water issues dominated much of the discussion as Southern Utah continues to face long-term supply concerns tied to population growth, drought and ongoing uncertainty surrounding the Colorado River system. Shipp said lawmakers are preparing for potential litigation over water rights as tensions continue between the upper and lower basin states. “We have a problem going on with the Colorado River, as you all know, and there’s a fight basically going on between the upper river basin, lower basin states,” he said. “We appropriated $5 million for litigation because we’re going to be in a legal battle, I’m sure, trying to make sure we keep our rights in the Colorado River.” Brooks pointed to several policy efforts aimed at strengthening long-term water access, including storage planning and regional coordination. “We’re trying to do a lot of different things to see how we can get this water,” Brooks said, referencing discussions involving Lake Powell levels, water diversion strategies and partnerships with neighboring states. Lake Powell remains a central concern, with Shipp warning of critically low levels that could have statewide consequences. “Lake Powell is at 25% capacity right now,” Shipp said. “It could be a dead pool by the end
Apr 19, 2026 · via stgeorgeutah.com
OPSWAT and Emerson Forge Global Reseller Pact for Power and Water Cybersecurity OPSWAT and Emerson have entered into a global strategic reseller agreement, according to a report from Chemical Engineering. The arrangement is designed to provide Emerson's power and water industry customers with cybersecurity technologies from OPSWAT. An initial project under this enterprise-wide agreement involves Emerson integrating OPSWAT's operational technology patch management capabilities into its Ovation Automation Platform. This solution is intended to secure the platform using specific OPSWAT products, which are part of a cybersecurity suite built for power and water applications. Operators in power generation and water utilities are confronting growing cyber threats, regulatory demands, and operational risks linked to unpatched systems. The patch management approach for the Ovation Platform is created for industrial settings, which must manage a combination of modern and older equipment while facing threats from nation-state actors and ransomware aimed at energy and water infrastructure. The collaboration builds upon an existing alliance between the two companies for other cybersecurity products on a different Emerson automation platform. This new partnership reflects a strategic move by Emerson to work with established cybersecurity providers, a change influenced by changing international regulations and the requirement to address new vulnerabilities consistently. 1. INTRODUCTION Making Data-Driven Decisions to Grow Your Business - REPORT DESCRIPTION - RESEARCH METHODOLOGY AND THE AI PLATFORM - DATA-DRIVEN DECISIONS FOR YOUR BUSINESS - GLOSSARY AND SPECIFIC TERMS 2. EXECUTIVE SUMMARY A Quick Overview of Market Performance - KEY FINDINGS - MARKET TRENDS This Chapter is Available Only for the Professional EditionPRO 3. MARKET OVERVIEW Understanding the Current State of The Market and its Prospects - MARKET SIZE: HISTORICAL DATA (2012–2025) AND FORECAST (2026–2035) - CONSUMPTION BY COUNTRY: HISTORICAL DATA (2012–2025) AND FORECAST (2026–2035) - MARKET FORECAST TO 2035 4. MOST PROMISING PRODUCTS FOR DIVERSIFICATION Finding
Apr 18, 2026 · via indexbox.io
About
Press
Copyright
Contact us
Creators
Advertise
Developers
Terms
Privacy
Policy & Safety
How YouTube works
Test new features
NFL Sunday Ticket
© 2026 Google LLC
Apr 18, 2026 · via youtube.com
New tech degree launches at USMH for local students Students in western Maryland will soon have a new path to tech careers without leaving their community. A new Bachelor of Science in Applied Computer Science is scheduled to launch at the University System of Maryland at Hagerstown in fall 2026, according to a community announcement. The program, offered by Frostburg State University, will focus on areas like artificial intelligence, data science, cybersecurity and software development. Designed for students with an associate degree, the program aims to meet the growing demand for technology professionals in the region. It is expected to emphasize hands-on learning, real-world problem-solving and direct pathways to in-demand careers. New lab and eSports arena planned The program will be supported by Frostburg State University’s Computer Science and Information Technologies department and taught at the USMH campus in downtown Hagerstown. A new lab and classroom space, through the support of a generous grant from the Maryland Technology Development Corporation (TEDCO), is expected to feature modern technology and collaborative learning environments. According to the announcement, the space will also include an eSports arena and opportunities for students to participate in programming competitions, capture the flag events and student showcases. “This program is an exciting addition to USMH and a direct response to workforce needs in our region,” USMH Executive Director Jacob Ashby said in the announcement. “Students can stay local, complete a high-quality degree and step into meaningful technology careers without leaving the area.” Seamless transfer from community colleges The program is designed for students transferring from regional community colleges, including Hagerstown Community College and Frederick Community College. Classes will be held at the USMH campus, with small class sizes and personalized faculty support. Students will apply through Frostburg State University’s admissions process and, upon enrollment, complete their coursework at
Apr 18, 2026 · via heraldmailmedia.com
You hear Cybersecurity every day — but let’s be real. What does it actually mean for you as a business owner? More importantly, how do you stay safe in a world where cybercrime is now bigger than the drug trade? I’m Paul Marchese, owner of Marchese Computer Products Inc. For 44 years, my team and I have been protecting businesses across Western and Central New York —construction companies, law offices, accountants, farms, manufacturers — you name it. Along the way, I’ve written three books on the subject, including “Business Owners Guide to Cyber Security” and two Amazon bestsellers: “From Exposed to Secure” (2024) and “The Cyber Playbook” (2025). We’ve helped well more than 1,000 small businesses stay productive, grow, and avoid being the next victim. × Javascript is required for you to be able to read premium content. Please enable it in your browser settings. kAm(6’C6 ?@E “;FDE 2? x% D9@A]” (6’C6 2 D64FC:EJ\7:CDE |2?2865 $6CG:46D !C@G:56C[ 2 =:46?D65 }6H *@C< $E2E6 2=2C> :?DE2==6C WG:56@[ 7:C6[ 3FC8=2CX[ 2?5 2 E6=64@> 4@?DF=E2?E C6AC6D6?E:?8 >@C6 E92? d_ 42CC:6CD] ~FC ;@3 :D D:>A=6i E2<6 x% @77 J@FC A=2E6 D@ J@F 42? 7@4FD @? CF??:?8 J@FC 3FD:?6DD]k^Am k9bm(9J %9:D |2EE6CD }@Hk^9bm kAmrJ36C4C:>6 :D?’E D@>6 72C\@77 E9C62E — :E’D 2 3:==:@?\5@==2C :?5FDECJ] p?5 J@F’C6 E96 E2C86E] w24<6CD 5@?’E 42C6 H9@ J@F 2C6j J@F’C6 ;FDE 2?@E96C 5@@CH2J E96J H2?E E@ <:4< @A6?]k^Am kAmw6C6’D E96 92C5 ECFE9ik^Am kF=mk=:mw24<6CD D:E F?56E64E65 @? ?6EH@C<D 7@C 2? 2G6C286 @7 a`f 52JD]k^=:mk=:m|@C6 E92? d__[___ ?6H >2=H2C6 G2C:2?ED 2C6 C6=62D65 6G6CJ D:?8=6 52J]k^=:mk=:m|@C6 E92? 92=7 @7 2== 2EE24<D 9:E D>2== 3FD:?6DD6D—4@>A2?:6D ;FDE =:<6 J@FCD]k^=:mk^F=m kAmp?5 ?@H 4@>6D E96 4FCG632==i px\A@H6C65 2EE24<D]k^Am kAmrC:>:?2=D 2C6 FD:?8 2CE:7:4:2= :?E6==:86?46 E@ >2<6 E96:C D42>D D>2CE6C[ 72DE6C[ 2?5 ?62C=J :>A@DD:3=6 E@ DA@E] t>2:=D E92E =@@< 6I24E=J =:<6 E96J 42>6 7C@> J@FC G6?5@C] !9@?6 42==D E92E >:>:4 J@FC
Apr 18, 2026 · via thedailynewsonline.com
The myth of Claude Mythos crumbles as small open models hunt the same cybersecurity bugs Anthropic showcased Anthropic has kept its Claude Mythos cybersecurity model on a short leash, pointing to capabilities it says no rival can match. But two new studies suggest that even small, openly available models can reproduce most of the vulnerability analyses Anthropic has put on display. Through Project Glasswing, Anthropic has limited access to Claude Mythos Preview to a consortium of eleven organizations, citing the model's offensive capabilities. Internal tests and an audit by the UK's AI Security Institute found that Mythos can find software bugs, build working exploits on its own, and take over entire corporate networks in simulations, as long as the network is "small, weakly defended and vulnerable." Two independent replication efforts are now poking holes in that exclusivity story, without disputing the model's overall performance. The first comes from AISLE, a company that has been running its own AI-assisted bug hunting on open source software since mid-2025. AISLE says it has reported 15 vulnerabilities in OpenSSL and five in curl. Founder Stanislav Fort fed the code snippets from Anthropic's public samples into a range of models to see how much smaller and partially open models could piece together on their own. The second study comes from Vidoc Security, which paired GPT-5.4 and Claude Opus 4.6 with the open coding agent OpenCode. Small models catch the FreeBSD bug too The FreeBSD NFS bug (CVE-2026-4747) that Anthropic spotlighted was pitched as a showcase for autonomous discovery and exploitation by Mythos. AISLE found that all eight models it tested caught the memory bug in the function in question. That included GPT-OSS-20b, a model with just 3.6 billion active parameters that runs at $0.11 per million tokens. Every model flagged the flaw as critical, though
Apr 18, 2026 · via the-decoder.com
The National Information Technology Development Agency (NITDA) and the Corporate Affairs Commission (CAC) have initiated coordinated measures to strengthen cybersecurity following recent concerns affecting aspects of CAC’s digital systems. Both agencies said they have activated response and assurance mechanisms in line with national cybersecurity frameworks to safeguard critical infrastructure and maintain service integrity. The cybersecurity effort was disclosed in a statement by the NITDA Director, Corporate Communications and Media Relations Department, Hadiza Umar, on Friday. The measures followed alleged breaches of data and information systems of government and private institutions, including CAC, Remita Payment Services Limited, Sterling Bank, and other entities, in the past weeks. The Nigeria Data Protection Commission (NDPC) said it is probing alleged data breaches. | | |---| In the statement on Friday, NITDA reiterated that all ministries, departments, and agencies (MDAs) must adopt proactive cybersecurity measures in compliance with the National Cybersecurity Policy and Strategy (NCPS) 2021. The agency directed all MDAs to immediately review and reinforce their cybersecurity architecture to address emerging threats targeting government systems and sensitive data. As part of the directive, MDAs are also required to conduct comprehensive security assessments, remediate identified vulnerabilities, and strengthen access controls across critical platforms. They are also expected to enhance data protection mechanisms, maintain effective backup and disaster recovery systems, and improve monitoring capabilities to detect and respond to suspicious activities. “In addition, there is the need for functional incident response frameworks, including prompt reporting of cybersecurity breaches for coordinated intervention. “Detailed cybersecurity guidelines have already been issued to MDAs for implementation as part of ongoing efforts to strengthen resilience across public sector digital infrastructure,” the NITDA stated. According to the agency, the measures are aimed at improving the overall security posture of government institutions and ensuring the continued protection of national digital assets. NITDA reaffirmed
Apr 18, 2026 · via premiumtimesng.com
Presentation providing analysis of the leading cybersecurity vendors’ recent financial results compared with their competitors. The Cybersecurity Titans are Akamai, Check Point, Cisco (including Splunk), Cloudflare, CrowdStrike, CyberArk, Elastic, F5, Fortinet, Varonis, Okta, Palo Alto Networks, Qualys, Rapid7, SentinelOne, Tenable, Trend Micro and Zscaler. These vendors have annual revenue of over US$300 million, were publicly trading for at least four quarters and broke out their cybersecurity revenue numbers quarterly. Email Article All set! This article has been sent to my@email.address. All fields are required. For multiple recipients, separate email addresses with a semicolon. Please Note: Only individuals with an active subscription will be able to access the full article. All other readers will be directed to the abstract and would need to subscribe. The Analyst Team Srikara Upadhyaya Follow AnalystResearch Analyst Srikara Upadhyaya works as a research analyst and is based in the Bangalore office. His research is focused on the cybersecurity and infrastructure markets. Prior to joining Canalys, now part of Omdia, Srikara spent two years working as an associate market analyst for IDC India, with a focus on worldwide software, artificial intelligence, and the public cloud service market. He also worked as an analyst at John Crane India Limited, where he worked closely with the production team to analyze SAP production and material management module data. Srikara holds an MBA from Jain University Bangalore and a bachelor’s degree in mechanical engineering from Vishweshwaraiah Technological University.More Content By Srikara Upadhyaya Become A Client Find out more about our full suite of products and solutions. Become A ClientYou must sign in to use this functionality Authentication.SignIn.HeadSignInHeader These are Omdia driven recommendations based on content that is both similar, and has been frequently visited by other users in combination with the content you are currently viewing. Omdia Recommends These are Omdia
Apr 18, 2026 · via omdia.tech.informa.com