In her first public speech on December 15, 2025, new MI6 chief Blaise Metreweli outlined a radical tech-focused vision for the spy agency. She warned the UK is in a “space between peace and war,” demanding officers become as fluent in Python as in foreign languages.
The Financial Stability Oversight Council’s latest report takes a calm view of current stability but warns that cyber risk and AI adoption are key systemic channels. It calls for a holistic review to simplify complex bank capital rules and shifts policy focus toward market mechanics and third-party
The CEO of South Korean e-commerce giant Coupang has resigned following a catastrophic data breach. Hackers stole the personal information of 33.7 million people—nearly two-thirds of the country—over five months without detection.
Microsoft is urging organizations to act fast after a major cloud supply chain attack dubbed Shai-Hulud 2.0. The self-replicating worm steals API keys and credentials from services like AWS and Azure. Separately, a new zero-day vulnerability in Windows Remote Access lacks an official fix.
If you were an AT&T customer between 2019 and 2024, you might be owed money from a massive class action settlement. The deadline to file a claim is fast approaching on December 18.
A hacking group is posing as police officers to trick tech giants into forking over users’ private information. They claim hundreds of successful requests, revealing a massive security loophole that companies seem unable to close.
Security researchers from Tenable have demonstrated how AI agents built in Microsoft Copilot Studio can be easily manipulated to leak private customer data and alter records. The problem highlights a fundamental security risk with no-code agent platforms that’s being amplified by “shadow AI” deploym
A critical zero-day vulnerability in the self-hosted Git service Gogs is under active attack, with over half of exposed instances already compromised. The bug allows remote code execution, and there’s still no official fix from the project maintainers.
Petco has taken its Vetco Clinics website offline after a security lapse exposed sensitive customer and pet medical records. The vulnerability allowed anyone to download files by guessing sequential customer ID numbers.
A new pair of malicious Visual Studio Code extensions has been caught stealing developer data. They disguise themselves as a color theme and an AI assistant to deliver a powerful infostealer.
