← All stories

AI security

SecurityWeek Roundup: Tor Exit Relays Hijacked, Rogue AI Agents at Banks, Self-Rebuilding macOS Ransomware

By SecurityWeek1 min read

SecurityWeek's latest "In Other News" roundup highlights several stories that may have slipped under the radar, including hijacked Tor exit relays, banks spotting rogue AI agents, self-rebuilding macOS ransomware, an APT28 campaign against NATO defense firms, stolen PingCAP source code, and a probe involving a ShinyHunters negotiator.

Cover for a ai-security story

SecurityWeek has published its latest "In Other News" roundup, flagging several noteworthy cybersecurity stories that might have slipped under the radar.

Among the items highlighted are reports that Tor exit relays have been hijacked, raising concerns about the integrity of traffic leaving the anonymity network. Exit relays are the final hop before traffic reaches its destination, and their compromise can expose users to surveillance or manipulation.

The roundup also points to news that banks are spotting rogue AI agents, an emerging AI security concern as financial institutions deploy autonomous or semi-autonomous software agents. The report suggests that detecting and controlling misbehaving AI agents is becoming a practical challenge for the sector.

Another story covers self-rebuilding macOS ransomware, described as malware capable of restoring itself, which could complicate cleanup and remediation efforts on Apple systems.

According to SecurityWeek, the roundup further notes that Russia-linked threat actor APT28 targeted NATO defense firms, an update consistent with the group's long-running focus on government and military organizations.

Also mentioned is the theft of source code from PingCAP, the company behind the TiDB distributed database, and a probe involving a negotiator linked to the ShinyHunters extortion group.

The individual stories are summarized by SecurityWeek as items that may not have received wide attention but are relevant to security practitioners tracking threat activity, AI security risks, ransomware evolution, and supply chain exposure. Further details on each story are available in the original SecurityWeek post.

Source: SecurityWeek

Cover for a ai-security story

AI security

Apple Adds Setting to Exclude Apps from Siri AI, EFF Says

Apple's latest device update, iOS 27.2, introduces a setting that lets users exclude apps from Siri AI features, according to the Electronic Frontier Foundation, which says the change addresses a request from its Encrypt It Already campaign.

1 min read

AI-written summary Source: EFF Updates · Fetched

Cover for a ai-security story

AI security

Unit 42 Warns of Peak Season Cyber Threats Targeting Retailers

Unit 42 has outlined the key cyber threats facing retailers during the peak shopping season, ranging from ransomware to attacks involving artificial intelligence, along with guidance on defending operations and customer trust.

1 min read

AI-written summary Source: Unit 42 · Fetched

Cover for a ai-security story

AI security

GitHub's npm package firewall can block brand-new versions before they install

GitHub has announced a package firewall for npm that checks packages against an enterprise's policy before they install, blocking known malware, critical vulnerabilities and brand-new versions, Help Net Security reported. The checks run before a package reaches a developer's laptop, a build or a coding agent.

1 min read

AI-written summary Source: Help Net Security · Fetched

How to read this

Authorized-only · evidence-based · point-in-time. Aegis cannot guarantee the absence of weaknesses or hidden devices. On this machine, live external HTTP/TLS may be network-blocked and shown as an honest coverage gap. Severity and confidence are kept separate. Finished assessments persist in the encrypted store while durable storage is bound. A theme choice may persist in this browser. Export remains available for a copy you can take with you.