MCP Arena

Vic Labor moots workplace AI and biometrics surveillance curbs

Could also impact HR's use of AI.

Feds move to regulate automated decision-making

To be led by Attorney-General.

Sponsored: Thinkst on building companies that don’t suck

In this Risky Business sponsor interview Casey Ellis chats with Haroon Meer from Thinkst about building companies customers don’t hate. Haroon explains why Thinkst still offers Canary tokens for free and why it has avoided annual price hikes on its paid products. They talk about Eric Ries’s “Incorruptible”, Rob Lee’s 100-year-company approach at Dragos, and why keeping customers happy is a better business strategy than chasing easy sugar highs.Show notes

A week in security (July 13 – July 19)

Last week on Malwarebytes Labs:Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwordsHow to use GitHub safelyThe backlash against Flock cameras is spreadingSecurity updates available for Adobe, Chrome, Firefox, VMWare, and ZoomSamsung backs down on threat to delete health dataClaude for Chrome flaw could let rogue extensions access your GmailJuly 2026 Patch Tuesday fixes 622 Microsoft CVEs, including three zero-daysThis fake Apple app can unlock your Mac’s password vaultWarning: Scamme

SOCs face a human challenge as AI speeds alerts and threats

Security operations centers (SOCs) have spent years struggling under the weight of growing alert volumes, expanding attack surfaces, and chronic staffing shortages. Now artificial intelligence is adding a new complication: not just more information, but more machine-generated information that must itself be evaluated.“There is an asymmetry here because you now have to parse through a lot of AI slop to get to, ‘Okay, is this real or not?’” Fernando Montenegro, vice president and practice lead at

Flight Centre to embrace AI agents, ecommerce consolidation

Appoints new executives including chief AI officer.

Claude Mythos FAQ: Capabilities, access, competitors, implications

1.What is Claude Mythos?Claude Mythos is an advanced AI model developed by Anthropic and is optimized for cybersecurity and healthcare applications.Mythos 5 was originally released in April to a small group of vetted technology partners ahead of a planned wider rollout.Anthropic established Project Glasswing, a consortium that gives limited, controlled access to Mythos to infrastructure providers, open-source developers, and major technology companies. The scheme was designed to enable defenders

What questions should you ask a vendor before buying an automated pentesting tool?

Introduction to Malware Binary Triage (IMBT) CourseLooking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.Enroll Now and Save 10%: Coupon Code MWNEWS10Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.Buying an automated penetration testing tool is a high-stakes decision, and vendor demos are engineered to look flawless. Every tool finds something impressive on stage. The job of a buyer is to ask the questions

Shocked AWS customers receive astronomical bill estimates

Billing estimate engine update goes wrong.

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 (stable) and 1.31.3 (mainline), and in NGINX Plus 37.0.3.1; anyone on an earlier build should upgrade.Triggering it can crash or restart the worker, causing a denial of

The Growing Role of BizINT in Financial Crime Investigations

Introduction to Malware Binary Triage (IMBT) CourseLooking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.Enroll Now and Save 10%: Coupon Code MWNEWS10Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.TL;DRBizINT (Business Activity Intelligence) is the process of collecting, correlating and analyzing corporate, commercial and organizational data to reveal the businesses, beneficial&nbsp

ISC Stormcast For Monday, July 20th, 2026 https://isc.sans.edu/podcastdetail/10014, (Mon, Jul 20th)

Introduction to Malware Binary Triage (IMBT) CourseLooking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.Enroll Now and Save 10%: Coupon Code MWNEWS10Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.Article Link: ISC Stormcast For Monday, July 20th, 2026 https://isc.sans.edu/podcastdetail/100141 post - 1 participantRead full topic

Many Iowans are skeptical about building data centers | Letters

Asked for views about data centers, readers came up with plenty of negativity about surveillance, government spending and resource use.

Small-Engine Makers Gain Big Momentum in Data Centers

For data centers looking for off-grid power, small engines are cheap and readily available.

Securing The Future: How Big Data Can Solve The Data Privacy Paradox

As businesses continue to harness Big Data to drive innovation, customer engagement and operational efficiency, they increasingly find themselves walking a tightrope between data utility and user ...

Californians back CEQA reform, reject AI data centers by huge margins, poll finds

Most California voters appear hungry to reform state environmental law to speed up housing and infrastructure projects, ...

Hochul backed NY data-center ban to satisfy DSA, other far-left Dems during re-election bid: critics

Gov. Kathy Hochul caved to Democrat socialists when she made New York the first state to stop construction of large data ...

Energy Executives Rate Power Sources For Data Center Revolution

Investment in data centers is growing exponentially. Solar PV and batteries dominate the power source ratings by executives, but natural gas is not far behind.

New York won't build big data centers for a year as it weighs energy and climate risks

No large data centers can be built in New York for up to a year as the state creates rules to protect the environment and the ...

CVE-2026-63829 net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink

Information published.

Loading Recommendations...