Google has launched Gemini 3.8 Flash with stronger performance in software engineering, agentic tasks, and multi-step reasoning, while keeping the more permissive Gemini 3.8 Flash Cyber limited to vetted security teams through the Fairwind program. The Cyber version is focused on vulnerability research and patching, with Google and its security partners reporting major gains in correct fixes, faster discovery, and improved prompt-injection robustness. #Gemini #Fairwind #ChromeSecurity #GraySwan
Category: Cyber Security News
Thomson Reuters disclosed a breach affecting its C-Track court case management platform, exposing court records and sensitive personal information across multiple jurisdictions in the U.S., Canada, and the U.S. Virgin Islands. The company said the incident began in March 2026, was discovered on June 30, 2026, and has prompted free credit monitoring and identity theft protection for affected individuals. #ThomsonReuters #C-Track #OntarioSuperiorCourtOfJustice #WyomingJudicialBranch
Microsoft confirmed that the KB5120998 August 2026 preview update resets mouse personalization settings on Windows 11, but only on non-English installations. The issue affects cursor and cursor animation settings, and Microsoft says impacted locales load default values instead of the user’s saved preferences. #KB5120998 #Windows11
AIR Security has emerged from stealth with $50 million in funding to launch AIR, a firewall designed to protect AI agents and their add-ons. The company says its research found thousands of public AI add-ons and AI Skills with untrusted instruction sources, impersonation tactics, and hidden behaviors that could expose enterprises…
HiddenLayer raised $100 million in a Series B round, bringing its total funding to more than $155 million, to expand security for agentic, generative, and predictive AI applications. The company plans to strengthen runtime protection for AI coding agents and help enterprises detect anomalous behavior, misuse, and unauthorized actions in production….
Capsule Security has launched an “AI circuit breaker” that detects, evaluates, and blocks autonomous agent actions in real time before they can cause harm. The system uses specialized models trained with NVIDIA Nemotron 3 Ultra and claims high accuracy and fast response times to stop rogue behavior inside agentic workflows. #CapsuleSecurity…
A Russian national, Searzhudin Tamirlanovich Aktulaev, has been indicted in California for allegedly using hundreds of fake freelance-platform accounts to send malicious Excel files that infected about 80,000 users. The campaign deployed TVRAT and DarkVNC to steal data from victims, including many in the US, and used the stolen information for fraud and other crimes. #SearzhudinTamirlanovichAktulaev #TVRAT #DarkVNC #TeamViewer #VNCViewer
Microsoft is working on a fix for a known issue that causes Microsoft Teams and new Outlook to crash or fail to launch on ARM-based Windows 11 24H2 devices after August 2026 updates. A temporary workaround is to update the Auto Super Resolution Package from the Microsoft Store until a permanent Windows fix is released. #MicrosoftTeams #Outlook #SurfaceLaptop7 #SurfacePro11 #AutoSuperResolutionPackage
Plex urged users to update Plex Media Server and Plex Desktop immediately after discovering multiple security vulnerabilities affecting Plex Media Server v1.43.2 and earlier. The company has released patches and emailed affected users, warning that attackers could reverse-engineer the fixes before CVEs are published. #Plex #PlexMediaServer #PlexDesktop
A high-severity flaw in the All-in-One WP Migration and Backup WordPress plugin, tracked as CVE-2026-19949, can let attackers trigger remote code execution by abusing a second-order SQL injection during archive restore operations. The issue affects versions up to 7.109, and with only 35% of installations updated to 7.110, about 3.2 million…
A threat actor on the dark web began selling scans of more than 153 million US and Canadian driver’s licenses through an identity theft service called Nexus, which was later shut down. Investigators linked the cache to a likely breach at IDScan.net, prompting an FBI investigation after some exposed licenses were…
VantaCore is a ransomware group believed to be a rebrand of Thor, targeting Russian organizations with custom-built malware and multimillion-dollar ransom demands. F6 says the group has attacked at least seven victims, uses a ransomware-as-a-service model, and reflects a broader shift among pro-Ukrainian hackers toward in-house tooling instead of LockBit 3…
CISA has added seven actively exploited vulnerabilities to its KEV catalog, affecting SonicWall SMA 1000, Sangoma Switchvox, JFrog Artifactory, Kludex Starlette, Kestra OSS, and Berri LiteLLM. Threat actors are abusing these flaws to gain admin access, execute commands, deploy reverse shells and miners, steal credentials, and target AI infrastructure for follow-on…
Chaotic Eclipse disclosed FalconFlank, a zero-day privilege escalation flaw in CrowdStrike Falcon that abuses office malicious macros remediation in the Falcon Sensor and may already have detections. The researcher also recently published PoCs for HardBreacher in Kaspersky Endpoint Security and ShieldBreak in Microsoft Defender, both of which target Windows security products…
David Halbreich of Reed Smith explains how AI companies can avoid insurance coverage gaps as mergers, application disclosures, model degradation, and cloud outages create new D&O, E&O, and business interruption risks. He emphasizes careful policy review, tighter application wording, broader retroactive dates, and stronger dependent vendor coverage to prevent straddle claims and denial issues. #ReedSmith #DavidHalbreich #D&O #E&O #ModelDegradation #CloudOutages