
US Orders Federal Civilian Agencies to Remove DeepSeek as China Threatens Measures
DHS orders US federal civilian agencies to remove DeepSeek products, including third-party tech, as China rejects the rationale and threatens measures.

DHS orders US federal civilian agencies to remove DeepSeek products, including third-party tech, as China rejects the rationale and threatens measures.

CISA added six flaws in Plex Media Server, Siemens Software Center and SiteGuard Server Edition to its KEV catalog citing exploitation evidence.

Reported tampering of AOMEI update servers redirected Backupper users to malware via pop-ups, with possible credential exposure.

Nigerian national sentenced to eight years for spearphishing US tax firms, stealing data of 800 customers to file fraudulent refunds and loans.

Ars Technica reports shared Meta Muse chats are discoverable by title via search, with thousands listed; titles alone may reveal sensitive details.

AfD confirmed a provider breach as hexane.cc claims 421,179 internal emails via unverified AI summaries, with member data reportedly exposed.

Symantec attributes espionage activity against European defense and law-enforcement targets to APT28, with data theft unconfirmed.

Microsoft outlines a framework treating AI agents as insider risks, urging external identity, containment and adaptive controls for agent access.

Forescout Vedere Labs describes ROMULUS, a delivery platform using ClickFix lures and PowerShell to install Legion Loader for further payloads.