Author: Frank Salvato

A recently discovered unsecured database left publicly accessible on the internet reportedly contained billions of sensitive records, including email addresses, passwords, and approximately 2.7 billion entries with Social Security numbers, raising serious concerns about potential identity theft risks for millions of Americans even though there is no confirmed evidence that criminals have exploited the data before it was taken offline. Security researchers at UpGuard found the massive cache in January and alerted the cloud hosting provider, prompting its removal, and preliminary analysis suggests the information may be cobbled together from multiple historic breaches, highlighting persistent systemic failures in how personal…

A team of astronomers has reported the discovery of an extraordinarily faint galaxy in the Perseus Cluster that appears to be dominated almost entirely by dark matter, with only a tiny fraction of its mass made up of visible stars and gas; dubbed CDG-2 (Candidate Dark Galaxy-2), this object was detected by combining observations from the Hubble Space Telescope, the Euclid telescope, and the Subaru ground-based observatory, with four globular clusters serving as the only bright markers of the underlying system, and research published in The Astrophysical Journal Letters indicates that roughly 99.9 percent of the galaxy’s mass could be…

Poland’s ruling coalition is moving forward with a draft bill that would prohibit children under the age of 15 from accessing social media platforms, require tech companies to implement strict age verification, and impose financial penalties on platforms that fail to comply; the proposal, pushed by Education Minister Barbara Nowacka, is part of a broader European push to address concerns about mental health and online harms among minors and could face resistance from U.S.-based tech giants before possibly taking effect in early 2027. Sources https://www.theepochtimes.com/tech/poland-plans-social-media-ban-for-under-15s-5991774https://www.reuters.com/business/media-telecom/poland-plans-social-media-ban-children-under-15-bloomberg-news-reports-2026-02-27https://www.bloomberg.com/news/articles/2026-02-27/poland-plans-social-media-ban-for-kids-in-challenge-to-us-tech Key Takeaways In-Depth Poland is preparing what could be one of the most consequential social…

Amazon’s newly appointed security chief Chet Kapoor says the age of artificial intelligence will dramatically increase the volume of data that must be monitored, making security more complex rather than less. In a recent interview, Kapoor pushed back on the idea that AI will replace security systems; instead, he told reporters that as AI agents spread across corporate networks, they will generate vast quantities of activity and signals that demand even more advanced monitoring and analysis. He also highlighted that the explosion of software code in the AI era will be riddled with bugs and mistakes only more AI can…

The historic TAT-8 submarine fiber-optic cable, the first transoceanic fiber-optic system that once carried international communications between the United States, United Kingdom, and France, is being removed from the ocean floor and recycled after nearly 38 years under the sea; this decommissioning highlights both how physical infrastructure made the modern global internet possible and how nearly all intercontinental data traffic still depends on an extensive network of undersea cables that face ongoing maintenance, technological evolution, and vulnerability challenges. Sources https://www.wired.com/story/say-goodbye-to-the-undersea-cable-that-made-the-global-internet-possible/https://en.wikipedia.org/wiki/TAT-8https://www.subseacables.net/infrastructure-news/venezuela-phases-out-historic-submarine-cable/ Key Takeaways In-Depth The physical underpinnings of the internet are far from ethereal; they are tangible strands of glass and…

Password managers, long billed as essential tools for keeping unique, complex credentials safe across the internet, were recently revealed to have significant vulnerabilities that could undermine their security promises and expose users’ entire password vaults if exploited, raising fresh concerns about reliance on cloud-based credential storage in an era of rising cyberattacks. Researchers have found cryptographic weaknesses in major password management platforms that, under certain circumstances, allow attackers to access protected credentials or even write to users’ vaults, despite claims of “zero knowledge” encryption, and these flaws appear in widely used services beyond just one vendor. Beyond that, a massive…

Cybersecurity experts caution that depending on artificial intelligence to create passwords can seriously weaken digital defenses because AI-generated passwords tend to be predictable and lack sufficient randomness, making them easy for attackers to guess or crack. Research by the cybersecurity firm Irregular found that widely used large language models such as ChatGPT, Claude, and Google Gemini often produce password suggestions with repeating patterns and limited diversity in characters, resulting in low entropy and predictable outputs that could be compromised quickly by brute-force attacks. Industry professionals emphasize that these models aren’t designed to generate truly random strings, and replacing cryptographically secure…

The European Union’s Cyber Resilience framework is poised to significantly reshape the operating environment for managed service providers (MSPs), imposing stricter security-by-design requirements, mandatory vulnerability reporting obligations, and expanded liability exposure for digital products and services placed on the EU market. While supporters argue the legislation will strengthen supply chain security and reduce systemic cyber risk, critics note that the compliance burden—particularly for smaller providers—could drive consolidation, increase operational costs, and introduce legal uncertainty around software components and third-party integrations. MSPs that resell, integrate, or manage software and connected devices may be required to verify conformity assessments, maintain detailed technical…

A recently discovered bug in Microsoft’s Copilot AI allowed the system to read and summarize emails marked as confidential in users’ draft and sent folders — even though policies were put in place to stop it from doing so — sparking serious privacy concerns among enterprises and cybersecurity experts; Microsoft has acknowledged the issue, tracked it as CW1226324, and begun rolling out a fix while asserting no unauthorized access occurred outside authorized user rights, but the incident highlights broader risks in rapid AI deployments. Sources https://www.itpro.com/technology/artificial-intelligence/microsoft-copilot-bug-saw-ai-snoop-on-confidential-emails-after-it-was-told-not-tohttps://www.bleepingcomputer.com/news/microsoft/microsoft-says-bug-causes-copilot-to-summarize-confidential-emailshttps://www.thenews.com.pk/latest/1393111-microsoft-copilot-bug-exposes-confidential-emails-to-ai Key Takeaways • A software flaw in Microsoft 365 Copilot Chat enabled access to…

Cybersecurity researchers are sounding the alarm over a newly identified phishing kit known as “Starkiller,” a sophisticated toolkit that allows attackers to proxy legitimate login pages in real time and capture user credentials—even when multi-factor authentication is enabled. Unlike traditional phishing schemes that rely on crude imitation websites, Starkiller functions as a reverse proxy, quietly sitting between the victim and the authentic service, harvesting usernames, passwords, and session cookies as they are entered. This method enables cybercriminals to bypass common security safeguards and hijack active sessions without raising immediate suspicion. Experts warn that the kit lowers the barrier to entry…