International

President Donald Trump ordered all federal agencies to stop using Anthropic on Friday, announcing it on Truth Social shortly before the Pentagon’s deadline for the AI startup to remove military usage restrictions on its Claude AI model. Trump wrote his social truth, “THE UNITED STATES OF AMERICA WILL NEVER ALLOW …

Organizations are reminded that three Windows versions released in 2016 are about to lose support. After the last monthly security update, they won’t receive security patches, bug fixes, non-security updates, support, or updated documentation anymore. End Support for Legacy Windows Versions: For defenders, the key issue is the accumulation of …

ESET researchers discover PromptSpy, the first Android malware using generative AI for persistence. This is the first instance of such AI being used in this way. The attackers use prompts directed at Google’s Gemini to manipulate the UI, leading to the name PromptSpy. The malware can collect lockscreen data, prevent …

Texas sued networking giant TP-Link Systems, accusing the company of deceptively marketing its routers as secure while allowing Chinese state-backed hackers to exploit firmware vulnerabilities and access users’ devices. The lawsuit follows an investigation launched in October and claims that TP-Link misled buyers by labeling its products “Made in Vietnam” …

Guardian is an enterprise-level AI penetration testing tool by Zakir Kun on GitHub. It combines OpenAI GPT-4, Anthropic Claude, Google Gemini, and OpenRouter in a single multi-agent system for smart security assessments and thorough evidence collection. It employs four active agents: Planner, Tool Selector, Analyst, and Reporter. They collaborate on …

OpenAI along with crypto firm Paradigm have launched EVMbench, a benchmark to assess AI agents’ skills in identifying, fixing, and exploiting serious vulnerabilities in smart contracts. EVMbench includes 120 curated vulnerabilities from 40 security audits, primarily from open code audit competitions on platforms like Code4rena. Three Evaluation Modes: EVMbench tests …

CTM360’s new report, BaitTrap, reveals a global scam network using fake news sites called Baiting News Sites (BNS). These sites imitate reliable media brands to facilitate investment fraud, typically sending users to scams like Trap10 and Eclipse Earn. ‍ BNS campaigns target over 17,000 sites in 50 countries using paid …

AutoPentestX is an open-source toolkit for automated penetration testing on Linux, allowing security assessments from one command. Created by Gowtham Darkseid and released in November 2025, it produces professional PDF reports and focuses on safe, non-destructive testing. AutoPentestX automates OS detection, port scanning, service enumeration, and vulnerability checks for Kali …

A new framework dubbed Embedded Systems Threat Matrix™ (ESTM) was introduced to help secure embedded systems used in critical infrastructure and defense technologies across the U.S. Developed collaboratively with the Air Force’s Cyber Resiliency Office for Weapon Systems (CROWS). ESTM tackles a vital security issue by protecting essential systems from …

Microsoft has announced a new Teams feature that will automatically show employee work locations based on their Wi-Fi connections, raising concerns about privacy and hybrid work practices. The new feature in Microsoft’s 365 Roadmap (Message ID MC1081568) will automatically update users’ work locations when they connect to their organization’s Wi-Fi …