In late September and early October 2026, U.S. cybersecurity policy underwent a major shift toward structured governance in response to accelerating AI-driven threats. Key developments include a voluntary White House AI self-policing accord signed by major tech executives and the appointment of Jay Clayton to lead a new federal AI task force. Simultaneously, industry reports from PwC and Microsoft highlighted severe readiness gaps: leaders feel unprepared to defend their own AI systems against a...

Security researchers at Graz University of Technology have discovered that standard file-change notification systems in Linux, Windows, Android, and macOS can be weaponized by unprivileged local processes to monitor user behavior. Without requiring administrative access, bad actors can observe file names and event timing to reconstruct sensitive activities, such as keystroke rhythms (with over 93% accuracy), website browsing histories, and media exchanges on apps like WhatsApp. While the attacks...

CISA is tracking a surge in actively exploited vulnerabilities across enterprise software, development tools, and remote access platforms. Threat actors are targeting unpatched systems like GitLab, VMware vCenter, and ConnectWise ScreenConnect to deploy ransomware, steal cloud credentials, and establish persistent backdoors. Organizations must prioritize immediate patching and verify the security posture of third-party integrations before attackers automate these exploits at scale.