NRG Networks Inc.

  A coalition of major technology companies issued a joint warning that AI-driven cyberattacks are expected to become much more common in the coming months . The letter was backed by more than 100 organizations, including:  OpenAI, Microsoft, Google (Alphabet), Amazon, Anthropic, Cloudflare, CrowdStrike, IBM, Oracle, Visa, Mastercard, Capital One, General Motors The companies said that increasingly capable AI models will enable attackers to: Automate hacking at a much larger scale. Develop more sophisticated phishing and social engineering attacks. Accelerate vulnerability discovery and exploitation. Target critical infrastructure such as hospitals, utilities, and government systems. The letter states that " AI-enabled cyberattacks will become far more widespread " and urges governments and businesses to strengthen defenses immediately. The group is asking for: Cybersecurity to become a top executive and government priority. Greater information sharing between industry and go...

Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) is investigating a cybersecurity breach that the agency has classified as a "major incident." What happened? The ransomware group Qilin claimed responsibility for compromising an ATF system and listed the agency on its dark-web leak site. ATF subsequently confirmed that a standalone system had been breached. The agency stated that the affected system was isolated from its primary enterprise network. ATF said there is no indication that the incident affected: the ATF enterprise network, the ATF eForms system, or other ATF systems. What data was exposed? As of the latest reporting, ATF has not disclosed whether attackers stole data, what information may have been accessed, or how the breach occurred. Cybernews reported that the compromised system contained information related to ATF investigations, but the agency has not publicly released details regarding the scope of any exposure. Sources cited by AmmoLand claimed...

Ubiquiti has released patches for a major set of UniFi security vulnerabilities affecting a broad range of UniFi products and applications. According to the advisory reports, 22 vulnerabilities were fixed, including 21 rated Critical (CVSS 9.0+) . Key risks Several of the vulnerabilities could allow attackers with network access to: Bypass authentication on UniFi OS systems. Escalate privileges from a low-privileged account to full system control. Execute arbitrary commands on affected devices, including UniFi Protect and UniFi Talk systems. Three flaws were reported with a CVSS score of 10.0 , the highest possible severity rating. Products affected The vulnerabilities impact much of the UniFi ecosystem, including: UniFi OS UniFi Network UniFi Protect UniFi Talk UniFi Access Cloud Keys Dream Machines Dream Routers Gateways NVRs and NAS devices Additional UniFi hardware and management applications What administrators should do Update all UniFi applications and firmware immediately. V...