Nearly one in three compliance and data protection professionals (31%) do not know when their organisation last reviewed its main GDPR risk assessments. That is according to the latest findings from a survey of 198 professionals carried out at the end of May 2026 by VinciWorks, marking eight years since GDPR came into force….
A joint operation involving Google has disrupted NetNut, a residential proxy network that gave access to millions of compromised Android devices, including smart TVs and streaming boxes. Also known as Popa, the NetNut botnet allowed cybercriminals and espionage groups to hide behind legitimate home internet addresses when launching attacks. According to the Google Threat Intelligence…
Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted entirely by a large language model (LLM) agent. According to cloud security company Sysdig, JadePuffer used an autonomous AI agent for reconnaissance on the target, to steal credentials, move laterally, establish persistence, escalate privileges, and to encrypt data. The…
Adrian Kingsley-Hughes/ZDNET Follow ZDNET: Add us as a preferred source on Google. The latest Apple AirTag is finally on sale this Fourth of July weekend. We’re currently seeing a $10 discount on the AirTag 4-pack, bringing the bundle’s price down to $89 — that works out to just about $22 per AirTag. If you’re looking for a…
The AI cybersecurity strategy is expected to support EU countries and companies facing AI-related cyber risks. Members of the European Parliament are set to question the European Commission on its latest AI and cybersecurity proposals, including a new AI cybersecurity strategy expected to be unveiled on 7 July. According to the European Parliament’s plenary newsletter,…
I keep hearing the same frustration when I talk with security leaders. The real problem sitting on their desk isn’t finding vulnerabilities. It’s deciding which ones actually matter. The industry has spent billions on better visibility. We’ve convinced ourselves that if we could just discover more vulnerabilities, collect more data, and ingest more threat intelligence,…
Artificial intelligence (AI) is changing the enterprise faster than most security models were built to handle. In just a few years, it has become part of everyday enterprise work. And soon, AI agents will do much more than provide assistance. They will act autonomously across applications, workflows, data stores and infrastructure. This shift is already…
Claude Mythos has pushed cybersecurity leaders into a new phase of AI planning after CrowdStrike saw demand surge around early model access. Key Points: CrowdStrike President Michael Sentonas said companies have been asking for access to Claude Mythos since Project Glasswing became public. CrowdStrike is testing advanced models through Anthropic and OpenAI programs, while advising…
Cloud security firm Sysdig has released details on what it claims to be the world’s first ransomware campaign completely driven by a large language model (LLM). Dubbed JadePuffer, the campaign targeted an internet-facing Langflow instance by exploiting CVE-2025-3248. It then ran “an adaptive and fully automated campaign” which resulted in “a destructive database-extortion playbook against the victim’s production database…
Flipper Devices says development of the Flipper Zero firmware will continue, albeit with a smaller internal team and greater reliance on community contributions. The announcement comes as the gadget maker decided to focus on building new devices, like the Flipper One open Linux platform, for which the company turned to the community’s help to complete…