Antivirus and Security news

Want a higher paying tech job? Employers seek AI fluency

Employers are getting pickier when looking at tech resumes, but competition for the right skills is still intense. Companies will pay a premium for experience and advanced AI skills. “The market is no longer defined simply by how many people employers hire, but by how precisely they hire,” said Ger Doyle, ManpowerGroup’s regional president for […] more…

Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys

The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them. The post Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys appeared first on SecurityWeek. more…

Microsoft expands sovereign cloud offerings as data control concerns grow

Microsoft expanded its sovereign cloud offerings on Tuesday, adding new security, governance and AI capabilities as customers, particularly in Europe, demand greater assurance over where data is stored, who can access it and how critical services operate during disruptions. The announcement builds on Microsoft’s ongoing digital sovereignty efforts, assisting organizations in applying appropriate levels of […] more…

China Defends DeepSeek After US Ban of Its AI From Government Systems

The DHS said agencies should remove DeepSeek products as well as third-party products and services developed using DeepSeek from their IT systems. The post China Defends DeepSeek After US Ban of Its AI From Government Systems appeared first on SecurityWeek. more…

Sizing the PHP exposure window for CVE-2026-109618 and CVE-2026-109619 with VirusTotal

On October 20, the PHP security team announced an out-of-band security release for Wednesday, October 21, 2026 at 14:00 UTC, fixing two critical vulnerabilities rated CVSS v4.0 9.2 (CVE-2026-109618 and CVE-2026-109619). Hours before the release, technical details leaked publicly. They point to the session.upload_progress feature, which has been part of PHP since 5.4.0 and is […] more…

Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor

Tasked with writing an application for a US defense contractor, the model made the code 19% more likely to be hackable. The post Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor appeared first on SecurityWeek. more…

How Some Malicious AI Skills Hide Instructions from Reviewers

In Part III of our “From Automation to Infection” series (following Part I and Part II), we analyzed 35,878 AI agent skills submitted to VirusTotal and found that 62% of the 6,637 malicious skills contain no malicious code. Their payload is written as plain-language instructions inside the skill documentation. A common recommendation is to read […] more…

PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution. The post PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws appeared first on SecurityWeek. more…

Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI

Researchers say the developer’s account was compromised in March with a GlassWorm-linked loader. The post Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI appeared first on SecurityWeek. more…

Accenture, Dragos, SANS Launch $10M Initiative to Defend Small US Utilities

The first phase will cover up to 500 utilities, which will get free security tools, equipment, deployment help and training. The post Accenture, Dragos, SANS Launch $10M Initiative to Defend Small US Utilities appeared first on SecurityWeek. more…

HTTP 401 Unauthorized: What It Means and How to Fix It

You load your site, or visit an API endpoint your app relies upon, and instead of a page you find a brief, unhelpful message: 401 Unauthorized. Sometimes a browser password box appears. Other times, a blank white page presents only that number. In either case, visitors are shut out, and if the error strikes your […] more…

AI didn’t create your IT data problem, it just exposed it

When an AI pilot in IT operations underdelivers, the first instinct is to question the technology. Was the model wrong? Did the tool overpromise? Did the team pick the wrong use case? Those are fair questions. But in many organizations, the answer sits somewhere less glamorous: in a configuration management database that hasn’t been reconciled […] more…

US Agencies Detail Incident Response Practices for Rogue AI Agents

NIST, CISA and NSA share ten voluntary practices for preparing for, detecting, responding to, recovering from, and reporting rogue AI agent incidents. The post US Agencies Detail Incident Response Practices for Rogue AI Agents appeared first on SecurityWeek. more…

AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign

Across multiple short compromise windows, users were served a downloader for the ShinyRoad modular backdoor framework. The post AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign appeared first on SecurityWeek. more…

The Key to AI Software Security Isn’t Speed, It’s Maturity

Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk. The post The Key to AI Software Security Isn’t Speed, It’s Maturity appeared first on SecurityWeek. more…

Ahold Delhaize Restoring Services Disrupted by Cyberattack

The company has restored many websites and apps in Europe and expects e-commerce brands in the US to be restored in days. The post Ahold Delhaize Restoring Services Disrupted by Cyberattack appeared first on SecurityWeek. more…

« Older posts