Duncan Riley
Latest from Duncan Riley
A new report out today from artificial intelligence security startup Cyata Security Ltd. details a recently uncovered critical vulnerability on langchain-core, the foundational library behind LangChain-based agents used widely in artificial intelligence production environments. The vulnerability, tracked as CVE-2025-68664 and dubbed “LangGrinch,” has a …
Researchers say Eurostar accused them of blackmail over AI chatbot flaw disclosure
Eurostar International Ltd., the operator of the Eurostar trains that cross the English Channel, has been accused of mishandling the responsible disclosure of security flaws in its customer-facing artificial intelligence chatbot after security researchers were allegedly told their actions could be viewed …
Aflac breach exposes personal and health data of more than 22M people
Insurance company Aflac Inc. has disclosed that a cyberattack that targeted the company in June resulted in the theft of records relating to 22.65 million individuals, making it one of the largest data breaches reported this year in the U.S. insurance sector. …
DDoS attack knocks France’s postal service La Poste offline during holiday peak
France’s national postal service, La Poste and its banking arm, La Banque Postale, were knocked offline on Monday in a distributed denial-of-service attack that disrupted services at the height of the Christmas season. The attack rendered La Poste’s online services, including its …
Lemon Slice launches with $10.5M seed round to scale real-time interactive AI avatars
Frontier artificial intelligence research and product startup Lemon Slice launched today and announced that it had raised $10.5 million in funding. The money will be used to scale up its real-time interactive avatar technology and drive broader commercial adoption of its application …
Shai Hulud malware turns developers into unwitting distributors in NPM supply chain attacks
A new report out today from managed detection and response company Expel Inc. details a newly identified variant of the Shai Hulud malware that is demonstrating how software supply chain attacks are evolving beyond isolated package compromises into self-propagating campaigns that turn developers …
Nearly 3.5M affected in University of Phoenix breach tied to Clop-linked Oracle EBS exploit
The University of Phoenix has confirmed a major data breach affecting nearly 3.5 million current and former students, employees, faculty and suppliers, which followed an exploit by the Clop ransomware group in November. Clop is a prolific cybercrime group known for large-scale …
Forcepoint X-Labs warns of holiday phishing campaign combining Docusign scams and fake loan offers
A new report out today from cybersecurity company Forcepoint LLC’s X-Labs research team has uncovered a spike in holiday-themed phishing activity that blends impostor Docusign credential harvesting with deceptive loan offer spam that creates a threat for both corporate and consumer targets. …
Ontinue warns attackers are abusing Nezha monitoring tool as stealthy remote access trojan
A new report out today from Swiss artificial intelligence-powered managed extended detection and response company Ontinue AG warns of the growing abuse of Nezha, a legitimate open-source server monitoring tool, as a stealthy post-exploration remote access trojan. Nezha, initially developed for the Chinese information …
1Password integrates with Cursor to secure AI-driven development workflows
Cybersecurity and password service provider 1Password LLC today announced a new partnership with artificial intelligence code editor company Cursor Inc. to bring secure, just-in-time secrets to Cursor. The partnership has started with the deployment of a Hooks Script that gives developers a secure, just-in-time …