Daily Cyber News coverage tagged Legal & Regulatory.
Older Apple devices now have protection against a security issue used in highly targeted attacks. Apple backported the fix through iOS and iPadOS 18.7.11 after initially addressing newer software in September. A maliciously crafted file could allow code execution on an affected device. Public details…
Organizations running affected Java releases need an update that removes impacted root certificate authority certificates related to eMudhra. Oracle classified the issue as critical with a 9.1 severity score. Affected software includes listed releases of Java SE, GraalVM Enterprise Edition and GraalVM for…
Developer credentials and systems can be exposed when AI coding agents interpret a downloaded instruction file as trusted project guidance. Researchers found an AGENTS.md file in a customer’s Downloads folder that directed an agent toward a rogue npm package. They reproduced the technique against OpenAI…
Toronto Crime Stoppers halted operations after reporting showed that supposedly anonymous tip data had exposed identifiable people. More than 1.5 million tips from Canadian chapters were involved, and about half contained personal information. The Toronto chapter said the vendor identified 176,859 Toronto…
A NATO-country shipbuilder was compromised during a Russia-linked espionage campaign that also targeted an aircraft engine maker and a law enforcement agency. The attackers delivered the Hookedge backdoor through an infected Microsoft Word document. They returned to the shipbuilder’s environment…