Southern Company is notifying approximately 400,000 customers through its online customer portal that an unauthorized third party has accessed their utility account information. The Atlanta-based energy holding company serves more than 9 million customers through electric utilities in three states and natural gas distribution companies in four states. Its electric subsidiaries are Georgia Power, Alabama … Read more
Microsoft has announced that it will add .msix and .msixbundle attachments to the blocked attachments list in Outlook Web and the new Outlook Windows client starting next month. .msix files are modern Windows installation packages tailored to specific computer architectures or configurations, while .msixbundle is a container that groups multiple .msix packages into a single … Read more
Attackers use AI to locate and exploit vulnerabilities at machine speed; Hadrian provides an offensive security platform for agents that allows defenders to operate at the same speed. Amsterdam-based Hadrian has raised an additional $40 million in a Series B round, bringing its total funding to $65 million. The new financing was co-led by Forgepoint … Read more
Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two independent WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create fraudulent administrator accounts. Both vulnerabilities were given a high severity rating and require an authenticated session to be exploited. They are tracked as CVE-2026-93836, affecting WPC product bundles for … Read more
The FBI has fired an Accenture contractor over a data breach that exposed personal information of thousands of office employees, Reuters reported on Tuesday, citing two people familiar with the matter. The FBI has not publicly named the contractor or the organization involved. However, a senior official of the office said Reuters that the review … Read more
Atlassian is warning customers about a critical vulnerability known as CVE-2026-21589 that can be exploited for arbitrary file access in several self-hosted data center products, including Confluence, Jira and Bitbucket. The security issue allows an unauthenticated attacker to access certain files in the web root of an affected application. However, exploitation requires knowledge of the … Read more
Apple has announced tightened controls for full disk access in macOS, given the risks posed by ever-evolving AI agents. Apple introduced full disk access in macOS Mojave (10.14) to give users control over application access to the entire system. The function can be switched on or off Apple Menu > System Preferences > Privacy & … Read more
OpenAI is preparing to add invisible watermarks to texts generated by ChatGPT and Codex in the European Union. The watermark is not visible when you read or copy the text. Instead, OpenAI says it is new textGrain The technology slightly alters the model’s word selection to create a statistical pattern that can later be recognized. … Read more
Google has temporarily halted its Open Source Software Vulnerability Reward Program (OSS VRP) for product vulnerability submissions, saying a growing number of automated reports, most of which were invalid, prompted the move. The break was announced on X on October 1st. “This pause is due to a significant increase in automated submissions, the vast majority … Read more
The Italian Data Protection Agency (GPDP) has fined IQVIA 7 million euros ($7.8 million) for poor data processing practices that the agency said could have put about a million patients at risk of data disclosure and deanonymization. IQVIA is a multinational company providing healthcare data analytics, technology and clinical research services. The company claims on … Read more