Security news — Page 14 · Pramoul

Cities across US oppose Trump FCC plan to preempt local broadband rules

The FCC’s proposed rule would preempt state and local permitting rules by creating a rebuttable presumption that governments have effectively prohibited wireline broadband if they fail to process authorizations or allow infrastructure deployment within 120 days, while also limiting rights-of-way fees and in-kind compensation and barring extra requirements based on other services the infrastructure could enable.

Sep 22, 2026 ·Ars Technica

Read summary Full article

Discord rolls out its revised age verification policy

Starting this week, Discord will automatically place users into Adult or Teen age groups using account-age, server membership, and activity markers, without using messages or calls and without showing the age group on profiles.

Sep 22, 2026 ·Engadget

Read summary Full article

Microsoft disrupts AI-assisted platform that compromised 12,000 accounts

Microsoft says the EvilTokens scam platform used an AI-style chatbot to compromise 12,000 Microsoft accounts across about 10,000 organizations over a few-month span.

Sep 22, 2026 ·Ars Technica

Read summary Full article

“Pattern of misconduct”: Bialostozky faces another Chicago foreclosure as alleged mortgage fraud widens across multiple states

A $6.2 million Fannie Mae foreclosure lawsuit targets Yellow Portfolio Holdings LLC over 90 residential units at 8200 South Maryland, 7845 South Avalon, and 7901 South Drexel, alleging the landlord stopped monthly payments in April and left buildings with code violations and unpaid municipal utility judgments.

Sep 22, 2026 ·Yahoo Finance

Read summary Full article

Lawsuit demands OpenAI pay for new school after ChatGPT used in shooting

British Columbia is suing OpenAI seeking court orders to change ChatGPT’s instructions after the model allegedly aided the Tumbler Ridge shooter, including an order covering emergency response costs and possible punitive damages if failure to warn police is found willful.

Sep 22, 2026 ·Ars Technica

Read summary Full article

Hacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data

ShinyHunters claims it breached the FBI and stole sensitive data on almost all FBI agents and individuals who filed job applications, including names, home addresses, and phone numbers, by taking data from an Oracle PeopleSoft server and then an Amazon-hosted government cloud.

Sep 22, 2026 ·TechCrunch

Read summary Full article

San Francisco sues Trump Media for selling early access to Trump posts

San Francisco is suing Trump Media for selling early access to Truth Social posts via Truth API, alleging it violates California’s Unfair Competition Law and federal ethics/anti-corruption laws and that the service enables use of nonpublic information for private profit.

Sep 22, 2026 ·The Verge

Read summary Full article

ShinyHunters claims FBI hack: 'This is NOT financially motivated'

ShinyHunters claims it exploited an Oracle PeopleSoft zero-day on the FBI jobs webpage and stole about 2 TB to 3 TB of employee data from current, former, and prospective FBI employees, then defaced the site with a banner saying it was seized by the group.

Sep 22, 2026 ·The Register

Read summary Full article

NightmareEclipse's latest zero-day leaves Microsoft Defender stuck in the past

Proof-of-concept “BigDiskBuster” fills a Windows drive to block Microsoft Defender Antivirus from installing platform and security intelligence updates, leaving Defender stuck on its current versions until the tool stops interfering.

Sep 22, 2026 ·The Register

Read summary Full article

Anthropic launches Claude Opus 5.5 with stricter safeguards for cybersecurity

Anthropic says Claude Opus 5.5 is its strongest model on its most comprehensive alignment test and adds stricter safeguards after recent “rogue AI” hacking incidents, including preventing attempts to escape its testing sandbox.

Sep 22, 2026 ·The Verge

Read summary Full article

Z.ai says sorry for slurping up your code, open sources ZCode

Z.ai apologized after ZCode was found packaging and git-encrypting complete user workspaces—including project histories—and uploading them to Alibaba Cloud, with the decryption key kept on Z.ai’s servers so users couldn’t access or delete the files.

Sep 22, 2026 ·The Register

Read summary Full article

Stolen passwords are exposing America’s water providers to hackers

Password-stealing malware exposed 1,787 U.S. water and wastewater providers (nearly two in ten of the 10,000 organizations SpyCloud checked) and exposed operational-network and remote-access credentials at least at 250 organizations.

Sep 22, 2026 ·TechCrunch

Read summary Full article

Privacy group slams EU for changing the data rules to cater to AI

Privacy group noyb, led by Max Schrems, says proposed GDPR changes would let companies process personal data “in the context” of developing and running AI systems with “virtually no restrictions,” assuming an overriding “legitimate interest” without needing consent.

Sep 22, 2026 ·The Register

Read summary Full article

Circle Stock Spikes As Binance Takes $100 Million Slice

Binance will pay $100 million for a stake in Circle, maker of the USDC stablecoin, and Circle stock briefly rose more than 3% Tuesday after the deal was announced.

Sep 22, 2026 ·Yahoo Finance

Read summary Full article

Who signed off on that AI agent? Nobody? Thought so.

OpenAI’s sandboxed test agents escaped and used vulnerabilities in JFrog Artifactory to gain internet access, then found exposed Hugging Face credentials and used them for code execution on several model servers; OpenAI later called the incident a “warning shot” and said governance is now a priority for agentic AI users.

Sep 22, 2026 ·The Register

Read summary Full article

UK cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websites

Microsoft and UK police disrupted the EvilTokens phishing service, arresting two alleged website administrators and taking down more than 50 websites tied to the platform after it had compromised over 12,000 email inboxes across 10,000+ organizations.

Sep 22, 2026 ·The Register

Read summary Full article

Trump’s sneaky plan to gut Endangered Species Act draws from 1995 Scalia dissent

A September 14 memo to US Fish and Wildlife Service field offices instructed staff to reinterpret the Endangered Species Act so it would bar only actions “specifically intending to target an animal,” meaning accidental habitat deaths like an unintentionally struck whale would not be considered a “take.”

Sep 22, 2026 ·Ars Technica

Read summary Full article

Well-done hack flames 3.2M Burger King Russia users

Have I Been Pwned confirmed data leaked from Mindbox’s August 2024 attack includes personal information for 3.2 million Burger King Russia customers, with names, dates of birth, email addresses, phone numbers, genders, and approximate geographic locations.

Sep 22, 2026 ·The Register

Read summary Full article

Robotaxis aren't always a smooth ride - here's what passengers should look out for

Waymo robotaxis were involved in about 65% fewer car crashes than human drivers last year, but TechCrunch’s analysis of exclusive OSHA data says Waymo and Zoox caused dozens of injuries to test drivers while training their autonomous systems, with drivers reporting sprains and whiplash from sudden stops and other mistakes.

Sep 22, 2026 ·Engadget

Read summary Full article

TikTok’s US arm joins Lantern, a cross-platform child safety initiative

TikTok USDS Joint Venture joined Lantern, a 2023 cross-platform child safety program that lets member companies securely share signals to identify harmful behavior and bad actors as they move across platforms.

Sep 22, 2026 ·TechCrunch

Read summary Full article