Crooked Bough News Round-up

— Firms can’t count their AI agents, let alone switch them off

 

at 10/13/26 12:36am

RSA’s CEO wants AI agents managed like employees, but other security leaders differ on how far that should go

— The Security Interviews: A post-Mythos reality check

 

at 10/12/26 9:00pm

Rudra Mitra, vice-president of security services at AWS, on why cyber security teams need to rethink their approach to IT security

— AI: Faster than the speed of safety

 

at 10/12/26 2:00am

Microsoft president Brad Smith calls for industry-wide collaboration, while the UK government ramps up cyber defence to tackle AI safety concerns

— Fraudster who targeted ransomware victims appears in US court

 

at 10/9/26 9:29am

Zohar Pinhasi stands accused of duping distressed ransomware victims by profiting from fake cyber services that he could not provide

— NCSC and pals call out company that backed Chinese state hackers

 

at 10/9/26 8:39am

The NCSC’s joint advisory names perennial offender Integrity Technology, accusing it of facilitating cyber attacks on behalf of Flax Typhoon, a Chinese state threat actor

— Why websites need to assess the Wikimedia attack

 

at 10/9/26 5:15am

An OpenAI bot overloaded Wikimedia, attacked a system at the foundation and attempted to change entries

— Microsoft tweaks Windows to secure agentic AI

 

at 10/9/26 1:00am

The half-yearly update to the Windows operating system gets a host of features for running AI models locally and securely

— AI model developers have ‘no justification’ for failing to comply with privacy law

 

at 10/8/26 10:30pm

Large language models must have lawful basis for processing personal data – ‘benefiting humanity’ is not enough, says Information Commissioner’s Office

— Scope of Asos data breach wider than first reported

 

at 10/8/26 5:53am

Following a data breach earlier in October, cyber criminals appear to have a much more complete picture of Asos’ user base than first thought, it has emerged

— The Security Interviews: Evren Karaibrahimgil, Welsh FA

 

at 10/8/26 4:20am

Evren Karaibrahimgil, IT manager at the FAW, on securing the national football association of Wales against evolving cyber threats, with Euro 2028 on home soil in mind

— UK Supreme Court to decide whether to block ‘trivial’ data protection claims

 

at 10/7/26 3:45am

Businesses are being inundated with trivial AI-generated data protection, say lawyers

— AI slop overwhelms Google’s OSS bug bounty programme

 

at 10/6/26 8:52am

Google has closed its open source vulnerability reporting programme to new submissions while it recalibrates in the face of a surge in automated junk reports

— Asos app users receive threatening messages after hack

 

at 10/6/26 7:27am

A previously unknown hacking group sent threatening messages to customers of fashion website Asos after allegedly breaching its Snowflake data platform

— Supply chain cyber resilience: from paper promises to operational reality

 

at 10/5/26 6:55am

Cyber resilience is not just built by drafting better policies, but by proving your organisation can withstand and respond to incidents and manage risks buried deep within the supply chain.

— The AI kill switch – what actually happens when you press it?

 

at 10/5/26 5:43am

Talk of an AI kill switch abounds, but what would such a thing actually look like in practice, and what would it mean to ‘press’ it?

— Machine-speed security: A Computer Weekly Downtime Upload podcast

 

at 10/4/26 9:21pm

Rudra Mitra, vice president of security services at AWS discusses why we need to rethink cybersecurity in order to tackle AI-powered attacks

— UK and Europe at risk from Chinese tech, says security think tank

 

at 10/2/26 6:00am

Although the UK and Europe have laws to restrict Chinese technology from critical infrastructure, implementation is patchy

— Teen hacker arrested amid KillSec cyber gang takedown

 

at 10/1/26 7:46am

A multinational operation targeting the KillSec ransomware gang has led to three arrests, including an unnamed 16-year-old

— IT event dive: AI for its own sake at Tobacco Dock with Everpure

 

at 9/30/26 4:30am

Inside a 200-year-old bonded tobacco warehouse, Everpure’s Accelerate London delegates wrestle with competition, orders from on high and AI for AI’s sake

— Everpure survey: 88% of executives fear data sovereignty failures

 

at 9/29/26 11:20pm

An Everpure survey of 2,100 C-suite and IT leaders across eight countries finds 90% recognise the risk, yet 64% lack a formal strategy to close ‘the sovereignty gap’

— Cyber authorities issue alerts over exploitation of Citrix vulns

 

at 9/29/26 5:40am

The latest vulnerabilities to be uncovered in the frequently targeted Citrix NetScaler product lines were being exploited well before disclosure, prompting disquiet

As of 10/13/26 6:45am. Last new 10/13/26 5:56am.