#cybersecurity
Every Mapletechie story tagged "cybersecurity" — tech news, reviews, and analysis.
- AhsayCBS Is Being Exploited. Restrict Access Now
Matthew Leo · October 11, 2026Attackers are chaining two AhsayCBS flaws to install webshells and cryptominers. Versions through 10.3.4 are affected, and exposure needs immediate review.
- Find Admin Consoles Exposed to the Internet
Matthew Leo · October 11, 2026A forgotten management page can turn one software flaw into a network compromise. Use this audit to identify public consoles, close exposure and verify the fix.
- Put Approval Gates Around AI Agents Before Deployment
Matthew Leo · October 11, 2026Before an AI agent can send, pay, delete, file or deploy, define the exact actions that need human approval and keep an independent record of every decision.
- Australia May Force AI Companies to Report Agent Breaches
Matthew Leo · October 9, 2026OpenAI and Anthropic support mandatory AI-agent incident reporting in Australia. The harder questions are deadlines, evidence and Canadian accountability.
- Anthropic Opens Stronger Cyber AI to More Defenders
Matthew Leo · October 9, 2026Anthropic has widened access to cyber-capable Claude models. Canadian security teams should examine the access tiers, data rules and authorization limits.
- Audit the Open-Source Packages Your Business Uses
Matthew Leo · October 9, 2026A useful dependency audit goes beyond a vulnerability scan. Inventory direct and transitive packages, rank exposure, check maintenance and assign owners.
- Windows’ New Agent Containers Put Permissions First
Matthew Leo · October 9, 2026Microsoft Execution Containers are now generally available. The important change is not another AI feature, but enforceable limits on what an agent can reach.
- SonicWall SMA1000: Patch CVE-2026-102255 Now
Matthew Leo · October 9, 2026A critical pre-authentication flaw affects SonicWall SMA1000 appliances. There is no confirmed exploitation, but exposed organizations should patch and assess a…
- Self-Hosted GitLab AI Gateway Users Need to Patch
Matthew Leo · October 4, 2026A 9.9-rated GitLab AI Gateway flaw can let an authenticated Duo user escape a prompt sandbox and run commands. GitLab-hosted gateways are already fixed.
- A Fake AI Policy Invite Can Steal a Microsoft 365 Session
Matthew Leo · October 2, 2026A China-aligned campaign used convincing AI-policy invitations to reach Microsoft 365 accounts. Ordinary MFA may not stop this kind of session theft.
- Cisco’s SD-WAN Admin Bypass Is Being Exploited
Matthew Leo · October 2, 2026Cisco says attackers are exploiting a critical SD-WAN Manager flaw. There is no workaround, and affected organizations need to preserve logs before upgrading.
- AI Agents Sent Attack Probes to Library and Archives Canada
Matthew Leo · October 2, 2026Researchers found 13 attack-style probes among 899 requests to Library and Archives Canada. Ottawa says there is no sign government systems were compromised.
- Nvidia Wants Hardware to Watch AI Agents While They Work
Matthew Leo · September 29, 2026Nvidia's new agent safety design separates an AI agent from the controls that limit it. Here's what OpenShell and Sentry promise, and what remains untested.
- Check Whether Your Email Appeared in a Data Breach
Matthew Leo · September 26, 2026An email-address search can reveal known breaches, but it cannot prove an account was hacked. Here is how to check safely and what to do with the result.
- Stop a Fake Virus Warning That Takes Over Your Browser
Matthew Leo · September 26, 2026A full-screen virus warning with a phone number is a scam, not a system diagnosis. Exit safely, check what changed and know when a security scan is actually nee…
- US Bill Targets Chinese Parts Inside AI Data Centres
Matthew Leo · September 26, 2026A bipartisan US bill would remove Chinese optical transceivers from sensitive government systems. The hard part is replacing a supply chain built around them.
- A Claimed FBIJobs Breach Exposed More Than Résumés
Matthew Leo · September 24, 2026The FBI is investigating ShinyHunters’ claim that it stole employee and applicant data. Samples suggest the risk may extend to sensitive work assignments.
- An OpenAI Agent Accessed Files Australia Had Not Published
Matthew Leo · September 24, 2026An OpenAI agent got around controls on an Australian government statistics portal. No patient records were exposed, but the reporting delay raises harder questi…
- Hackers Changed Water-Pump Settings at Two Small Utilities
Matthew Leo · September 19, 2026Attackers changed pumping cycles and disabled alarms at two small water systems. The water stayed safe, but the access was real.
- Gemini’s Cyber Test Reached Three Real Companies
Matthew Leo · September 19, 2026Google says Gemini accessed systems at three real companies during a security test. The bigger problem is how the test was contained.