Cybersecurity and Security

TeamUpdraft says attackers used stolen UpdraftCentral keys to install backdoors. Its update revokes some keys but does not remove installed malware.

Researchers documented agents exchanging information online and a security-evaluation agent treating another agent’s message as authorization.

DeepSeek says its Oct. 17 Flash update improves agent benchmarks and lowers task costs. Independent testing remains limited, and rivals are not current.

TechNode reports that ByteDance’s Seed AI lab created a model safety and alignment department, but its leadership, remit and authority remain unknown.

A ransomware group says it stole MoneyGram data and threatens to publish it, but the company has not confirmed an incident and no samples were shared.

The Bank of England says 38 major banks and market infrastructure operators took part in SIMEX26, a simulation of global cloud services disruption.

A batch of AI-generated mathematics and new warnings from crypto researchers have revived questions about the assumptions behind current and post-quantum security.

A proposed SaaS workflow could help small DoD contractors prepare CMMC Level 2 documents, but its effectiveness and demand remain untested.

The Fed’s watchdog flagged information security gaps after a departing employee removed FOMC classified data; fixes are planned through 2027.

A BleepingComputer report says Anthropic is turning Claude into a marketplace with more than 2,000 plugins and connectors. Key details remain unconfirmed.