News

International Cyber Expo has announced a new line-up of speakers and sessions for its Global Cyber Summit, with discussions set to tackle some of the biggest issues facing cybersecurity leaders. Sponsored by Huntress, the Global Cyber Summit will bring together senior security professionals, government representatives and industry experts at Olympia London on 29 and 30 September 2026. The latest sessions will explore the changing role of the CISO, the human impact of major cyber incidents,...

Privacy-focused tech company Proton has launched a free tool designed to show users exactly what large language models such as ChatGPT and Claude have learned about them from months or years of conversation history, a capability that speaks directly to the shadow AI problem now facing enterprise security teams. The tool, called AI Paper Trail, works by analysing conversation exports that users download directly from ChatGPT or Claude. It then generates a personal report that...

An affiliate of the Akira ransomware operation attempted a novel technique to blind endpoint defences during a recent intrusion, rebooting a compromised server into Windows Safe Mode to knock out both an EDR agent and Microsoft Defender in one move, only for the same stripped-down environment to cause the ransomware payload itself to crash before it could encrypt any files. The incident, disclosed in a technical write-up published by managed detection and response provider Huntress,...

Forescout has launched a new Rapid Insight Assessment designed to help organisations uncover hidden assets, network blind spots, and security exposures as artificial intelligence accelerates vulnerability discovery. The new assessment combines external analysis with passive network monitoring to give security teams a clearer picture of their attack surface. Forescout says the service can deliver actionable findings within days, helping organisations identify and prioritise risks before attackers exploit them. The launch comes as security teams face...

Model distillation began as a clever way to make artificial intelligence smaller. It is rapidly becoming one of the industry’s biggest arguments over who owns intelligence once a machine can reproduce it. The basic technique is legitimate and widely used. A powerful “teacher” model generates answers that train a smaller “student,” transferring some of its capabilities at far lower cost than starting again from raw data. AI labs use it to create faster, cheaper versions...

Most companies know their team uses AI. Far fewer know which tools, for what, or with what data. An employee pastes a client contract into a personal chatbot to summarise it. A marketer runs campaign figures through a free AI writer. A developer leans on an unvetted coding assistant. None of it was approved, and all of it is happening right now, inside businesses that believe they have AI under control. This is shadow AI:...

Researchers at Huntress have uncovered a strain of macOS malware that can gradually siphon funds out of victims' cryptocurrency wallets, after tracing an infection back to a fake CAPTCHA scam known as ClickFix. The incident came to light during a retrospective threat hunt in June 2026, when a Huntress analyst discovered remnants of a Mac-specific stealer on a system that had actually been compromised three months earlier. The victim had been served a pop-up disguised...

A SQL injection vulnerability that many organisations might consider a decades-old, well-understood threat has been used as the entry point for a far more sophisticated attack, after threat actors were caught planting a custom-built, database-resident toolkit inside an Oracle database. Security firm Huntress said it was alerted to suspicious activity on an endpoint hosting an Oracle database server on 27 July 2026, after detecting attempts to copy the SAM, SECURITY and SYSTEM Windows registry hives,...

Forescout Vedere Labs research has uncovered 15 previously unknown vulnerabilities affecting TP-Link's Omada Zero-Touch Provisioning (ZTP) ecosystem, warning that weaknesses in automated device deployment could allow attackers to compromise not just individual devices, but the management infrastructure responsible for entire networks. The research highlights an emerging security challenge as organisations increasingly rely on Zero-Touch Provisioning to simplify the deployment and management of routers, switches, gateways and wireless access points across distributed environments. While ZTP reduces...

Generative AI can now produce sophisticated business documents in seconds, which means work that once required considerable professional time can increasingly begin with a machine-generated draft that looks much like something prepared by a person. The same capability is making fraud harder to recognise because producing a convincing document is no longer a meaningful barrier for an attacker. Entrust discovered that the number of digital document forgeries had increased by 244% from the previous year...