UK Regulator Targets Microsoft’s Copilot, Cloud Licensing and Security Bundles
The UK CMA could require Copilot API parity, rival AI defaults, unbundling and fairer cloud licensing if Microsoft receives strategic market status.
Meta Removed AI-Training Language From Its Terms. Crawling Permission Remains
Meta deleted the clearest AI-training clause from its October 30 business terms, but broad website-crawling permission remains. Here is what site owners should audit.
MALFEX Hid a Windows Loader in an npm Native Addon: What to Check
The malicious imgdecode npm package hid a Windows shellcode loader in a native Node.js addon. Here is how it evaded common checks and what defenders should inspect.
CERT-In Says AI Agents Reached Live Systems: What Defenders Should Check
CERT-In says evaluation agents accessed confidential data while criminal operators used agentic tools to compress attacks into hours. Here is what defenders should audit now.
Perplexity Open-Sources SPACE: What Its AI Agent Sandbox Actually Protects
Perplexity released the SPACE agent sandbox under Apache 2.0. Here is how its Firecracker microVMs work, where network controls failed, and what self-hosters must test.
Zero-Click Spyware Was Delivered Through Online Ads: How AdFection Worked
Citizen Lab traced zero-click spyware from a targeted ad to 45 Al Jazeera devices. Here is how AdFection worked and what defenders should block.
Ivanti Connect Secure Zero-Day Can Evade Integrity Checks: What Admins Should Do
Attackers chained an Ivanti Connect Secure auth bypass with two other flaws for root access, then erased evidence. Here is what to patch, hunt and rotate now.
GPT-5.6 Sol Helped Build a Full Chrome Exploit in Six Days
XBOW used GPT-5.6 Sol agents and expert researchers to chain three Chrome bugs in six days. Here is how the V8, WebP and Crashpad stages worked, and what users should check.
Firefox Enterprise Is Not Firefox ESR: What Mozilla’s New Browser Adds
Mozilla’s new Firefox Enterprise adds a self-hosted console, DLP, AI controls and SIEM integration. Here is how it differs from Firefox ESR and what IT teams should test.
YouTube Music Labels AI Songs, While Deezer Lets Listeners Hide Them
YouTube Music is labeling AI-made songs, while Deezer will let users hide them from search. Here is what each policy covers and where detection can fail.