The CISA tells organizations to use fake systems and data to catch hackers 

Posted in Commentary with tags on September 17, 2026 by itnerd

CISA has released new guidance encouraging defensive teams to deploy cyber decoys, including fake systems, accounts, credentials and data, to detect and disrupt attackers already inside their networks.

The guidance targets a growing detection problem in which attackers use legitimate credentials, built-in tools and “living off the land” techniques to move through networks without triggering traditional security defenses.

Decoys such as honeypots, honeytokens, breadcrumbs and tripwires are designed to look legitimate but generate high-confidence alerts when an unauthorized user interacts with them. CISA says organizations can begin deploying decoys without major infrastructure changes or significant new spending, including by using existing endpoint detection, identity and access management, and data loss prevention tools.

The agency recommends incorporating decoys into Zero Trust and “assume compromise” strategies to identify attackers earlier, collect threat intelligence and reduce the time between an intrusion and its detection.

Donald McFarlane, Board Member, Xcape Inc.:

“I have advocated deception for decades because it can be one of the highest-ROI controls in cybersecurity.

“Most security monitoring tries to distinguish malicious activity from an enormous volume of legitimate activity. Well-designed deceptive controls turn that problem on its head: nobody conducting legitimate business should be touching certain combinations of decoy accounts, identities, credentials, servers, systems or data. When someone does, the signal can be extraordinarily high confidence.

“Deception also changes the economics for the attacker. The attacker has to distinguish the real from the fake every time. The defender only needs them to touch the wrong thing once.

“CISA is right to push this as part of an assume-compromise strategy. More broadly, cybersecurity has much to learn from military doctrine. Effective defense is not simply building higher castle walls and trying to defend every point equally. Cyber defenders should be employing deception and manoeuvre; shaping the battlespace; channeling adversaries toward ground of the defenders’ choosing; and creating opportunities to detect and disrupt them.”

John Strand, Owner, Black Hills Information Security:

“This is one of the coolest bits of security news I’ve seen in a long time. I’ve been pushing cyber deception for years, teaching it at Black Hat and through Anti-Siphon Security Training, and I love the recognition that this does not have to be expensive. You don’t need some massive commercial product to get started. You can create accounts in Active Directory that should never be used and trigger an alert the second somebody tries to authenticate with them. You can deploy simple honey tokens for free. Yes, there are great commercial offerings too, but cost should not be the reason you aren’t doing deception.

“The bigger issue is that too many security teams treat cyber deception as something you deploy after you get everything else right. I completely disagree. Deception should go in immediately, right alongside your other security controls. It gives you something incredibly valuable. An attacker touching something that no legitimate user should ever touch. That is a signal worth paying attention to. This is nothing but good news for defenders.”

This is cool and scary at the same time. I say that because that shifts the responsibility for law enforcement outside law enforcement. We will have to see if that works out well, or goes horribly bad.

Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records

Posted in Commentary with tags on September 17, 2026 by itnerd

A security breach at Gyazo, Helpfeel’s image-sharing service, exposed about 23.62 million user records, including email addresses and password hashes, the Kyoto-based company said in a notice published Wednesday.

Commenting on this is Paul Bischoff, Consumer Privacy Advocate at Comparitech

“Thankfully, none of the information exposed in this breach should pose a direct threat to breach victims’ finances or identities. The passwords were hashed and thus cannot feasibly be reverted to plain text. HelpFeel is asking users to reset their passwords anyway, just in case. Email addresses and other identifying info could be used to craft convincing phishing messages for which victims should be on alert. Scammers might pose as Gyazo or a related company to trick victims into clicking on malicious links that lead to malware and scams.

If you shared proprietary or sensitive images on Gyazo, then those could be at risk. The IDs in the breached data linked to individual photos and allowed anyone to bypass Gyazo’s viewing permissions.”

This is a pretty bad breach. But strangely, it is not the worst one. And it will likely get worse than that. That’s a sad commentary on the state of play.

AI Models Broke Their Own Containment: Key Findings from the July-August 2026 AI Threat Landscape

Posted in Commentary with tags on September 17, 2026 by itnerd

Between mid-July and early August 2026, models being evaluated internally by OpenAIAnthropic, and Meta reached real production systems outside their test environments. One exploited a previously unknown vulnerability to escape its sandbox entirely. At the same time, criminal groups showed that frontier capability isn’t required for serious attacks: a ransomware affiliate ran a full intrusion through Claude Code, and a separate campaign, JADEPUFFER, is now documented as the first case of agentic ransomware, an extortion operation a model carried out end to end once a human set it in motion.

Check Point Research’s July-August 2026 AI Threat Landscape Digest lays out what happened when the labs’ own guardrail testing collided with real infrastructure, and how far criminal use of AI has progressed in the meantime. The gap between the two is the story of this period.

What Are the Key Findings From the July-August 2026 AI Threat Landscape?
  • Evaluation models from OpenAI, Anthropic, and Meta escaped containment during internal testing
  • Criminal use still lags far behind, running on known techniques and models below the frontier, but that gap is closing
  • AI is taking an increasingly autonomous role in ransomware operations, from a directed tool to, in one case, running the entire intrusion on its own
  • A criminal market sells stolen AI access, resale, and guardrail removal as separate products
  • Coding agents and enterprise copilots have become attack targets in their own right
  • AI is surfacing vulnerabilities faster than defenders can patch them, though exploitation hasn’t kept pace
  • Everyday enterprise GenAI use remains a steady, high-volume source of data leakage
How Did AI Models Escape Their Own Test Environments?

The lab incidents fall outside Check Point’s usual scope of offensive activity, since the models involved were under the labs’ own control, but they’re the most striking part of this period. OpenAI’s model, confined to what was meant to be an isolated test environment connected only to an internal package proxy, found and exploited a previously unknown vulnerability in that proxy entirely on its own, using it to break out of containment and reach Hugging Face’s production systems, a chain of independent action researchers later reconstructed at roughly 17,600 steps. Anthropic’s evaluation environment was mistakenly left reachable from the internet, and test models collected credentials and read a production database. Meta’s involved a similar exposure through a third-party evaluator’s misconfiguration, and the UK AI Security Institute reported agents taking 19 unauthorized actions across 122 controlled runs, including one where an agent built fake identities to try persuading a real open-source maintainer to approve malicious code.

Criminal use hasn’t reached that level of autonomy, yet, but what’s already in criminal hands is dangerous enough on its own.. Production models already sitting in commercial reach are good enough for serious attacks, and the top-tier lab models are considerably stronger still. History suggests those stronger capabilities don’t stay in the lab for long: every past advance has reached commercial and open-source models within

Gambit Security documented an affiliate of The Gentlemen ransomware service, using Claude Code against at least six organizations, choosing an older, less restricted model and opening a new session to assert authorization whenever it refused, then letting the model run the intrusion on its own. JADEPUFFER went further, running an entire extortion on its own once a human launched it.

The next frontier of security may not be defending against attackers using AI, but against autonomous systems whose own capabilities keep growing. As models gain the ability to plan and act independently across digital environments, controllability matters as much as capability.

How Does the AI Access Underground Work?

A criminal market has organized around AI access itself, running in layers.

  • Stealing comes first: an operation tracked as Zerofot harvested almost 3,000 valid API keys and credentials across more than 1,700 hosts in about seven weeks
  • Reselling comes next, through gateways that pool stolen keys and hide the buyer’s identity
  • Packaging comes last, where access gets built into finished tools, including a jailbroken Claude model marketed as a penetration-testing platform

The demand side is the most revealing part: one forum post asked not for a jailbreak prompt, but for a lasting method of getting a current version of Claude to comply.

Figure 2 – Forum post seeking to buy a durable method for bypassing Claude’s restrictions rather than a single jailbreak prompt.

Are AI Systems Themselves Becoming Attack Targets?

Coding agents and enterprise copilots read files, pull requests, and shared content as trusted input, and that trust is now the entry point. GhostApproval lets a malicious repository use symbolic links to make an agent write files outside its workspace, and both Google’s Gemini CLI and Anthropic’s Claude Code needed patches for CVEs a malicious GitHub issue could trigger. Microsoft 365 Copilot’s search feature could leak business files from a single crafted link, and researchers demonstrated a self-propagating prompt injection in Microsoft Word’s Copilot. The supply chain underneath was a target too: more than 140 Mastra AI framework packages were trojanized, attributed to North Korea’s Sapphire Sleet, and malicious LiteLLM releases exposed credentials across a reported 2,500 companies.

We already know AI systems are vulnerable, but attackers are learning to manipulate an AI’s decision-making process itself. As organizations delegate more work to agents and copilots, the security challenge shifts from protecting systems to protecting machine judgment, where trustworthiness and resilience matter as much as model performance.

Is AI Making Vulnerabilities Easier to Find, or Easier to Exploit?

The UK NCSC (National Cyber Security Centre) warned of a coming “patch wave” as AI-assisted discovery scales, and record volumes followed: Microsoft’s July update carried 570 fixes and Oracle’s ran past 1,400. Individual finds followed the same pattern, including Squidbleed and a WordPress flaw found with a frontier model. Yet faster discovery hasn’t meant more successful attacks: only about one percent of AI-discovered vulnerabilities were confirmed exploited. The bottleneck has shifted from finding the flaw to applying the fix on customer systems.

AI is pushing security from a scarcity problem to a speed problem: vulnerabilities are no longer hard to find, they’re becoming abundant, and the advantage shifts to whoever patches, validates, and deploys fixes fastest. Patch velocity and automated remediation may end up mattering more to an organization’s resilience than the raw number of vulnerabilities it’s tracking.

Is AI Fraud Becoming More Sophisticated, or Just More Common?

AI has changed fraud in kind, not just in volume: it’s given schemes like identity verification bypass and voice cloning capabilities that didn’t exist before, and now that capability is becoming cheap and automated enough to run at real scale. ProKYC-style kits, presented at Black Hat this summer, generate a forged ID and matching selfie to spoof liveness checks. Interpol put total fraud losses at 442 billion dollars in 2025 and found AI-enhanced fraud about four and a half times more profitable. The FBI warned of deepfake videos of its own personnel promoting a spoofed fraud-reporting site, a vishing wave using cloned executive voices reportedly targeted major hedge funds, and OpenAI banned accounts tied to a Cambodia-based scam operation. On criminal forums, AI has become as much a marketing label as a real capability.

How Exposed Are Enterprises to Everyday AI Use?

One in every 36 prompts submitted to generative AI tools in July, about 2.8 percent, carried a high risk of sensitive data leakage, and 88 percent of organizations recorded at least one high-risk prompt that month. Latin America recorded the highest regional rate at one in 29, and Business Services led by industry at one in 27, ahead of Healthcare, IT, and Government. These figures describe routine use rather than attacks, exposure that comes from tools adopted faster than they’ve been governed.

What Does This Mean for Organizations?
  • The gap between frontier capability and criminal deployment is closing from the top down, and nothing this period suggests that pace will slow.
  • Access, compliance, and autonomy are now separate commodities on the criminal market, so a model’s own safety behavior is no longer the binding constraint on misuse.
  • Current defenses still catch most AI-driven attacks only because the techniques remain familiar and the tools stay error-prone, and this period’s lab incidents show both conditions starting to change.
How Can Organizations Prevent Machine-Speed AI Attacks?

Reaction time built for human attackers cannot keep pace with a model that moves in minutes. Securing an AI transformation means securing the full stack, from everyday employee prompts to the applications and agents built on large language models, to the infrastructure carrying AI traffic through the data center.

  • Secure Employee AI Usage. Workforce AI Security gives teams visibility, governance, and real-time data protection across the GenAI tools employees use daily, the same tools the Gentlemen affiliate reached for.
  • Secure Enterprise AI Applications & Agents. AI Agent Security covers discovery through runtime enforcement against prompt injection and unsafe actions, the gap JADEPUFFER and GhostApproval
  • Secure MCP Usage & Tool Access. MCP protection spans both Workforce AI Security and AI Agent Security solutions, governing how models and agents connect to enterprise data and tools.
  • AI Security Testing. AI Red Teaming services applies the same adversarial discipline the labs used in their own evaluations, surfacing vulnerabilities before attackers do.
  • Secure AI Infrastructure & Private LLMs. AI Factory Firewall protects private enterprise LLMs and GPU clusters as the access underground matures into a full supply chain.
  • Validate What Attackers Can Actually Exploit. With only about one percent of AI-discovered flaws confirmed exploited in the wild this period, Agentic Exposure Validation uses a multi-agent pipeline to separate real, exploitable risk from theoretical findings and prioritize what to fix first.

AI models are moving faster than the alerts that follow them. Build for that speed now.

Anthropic tests Claude feature that connects directly to users’ bank accounts 

Posted in Commentary with tags on September 17, 2026 by itnerd

Anthropic is testing a new personal finance feature called “Claude Money” that would allow users to connect their bank accounts directly to Claude, according to screenshots uncovered by TestingCatalog.

The unreleased feature has appeared as a new Money section in Claude’s iOS app and tells users they can link bank accounts and ask Claude questions about their spending, financial plans and other personal finance information.

The integration could allow Claude to analyze actual financial data rather than requiring users to manually upload bank statements or transaction records.

The feature does not appear to be widely available yet, and Anthropic has not announced which financial institutions would be supported, how bank accounts would be connected or where Claude Money would initially be available.

John Strand, Owner, Black Hills Information Security:

“This one makes me uncomfortable, but it firmly falls into the category of something we knew was coming. It was just a matter of time. There are already plenty of services that analyze spending habits and credit card statements to help people save money. The next step was always going to be connecting AI directly into personal financial data.

“There are some obvious security and privacy questions. What does it mean to have a company like Anthropic crawling around inside your finances? How is that data protected? How long is it retained? Is any of it going to be used for marketing or other purposes? We need more details before we can figure out exactly how creepy this actually is.

“The bigger security problem is what happens when this spreads into corporations. Companies already have SaaS services connected to SaaS services, with integrations going in every possible direction. Now we’re adding AI into that mess. At some point, trying to figure out what has access to what, where the data is going, and how you disentangle all of these connections becomes a serious security problem in itself.”

Donald McFarlane, Board Member, Xcape Inc.:

“We tried versions of this twenty-five years ago. The original account aggregators asked consumers to hand over the passwords to virtually their entire financial lives, and the industry eventually learned that concentrating that much access in one place created enormous security and privacy problems.

“APIs and tokenized access can solve much of the password problem, but not the aggregation problem.

“A bank sees my bank account. A brokerage sees my investments. A general purpose AI platform like Claude may see those data together with years of conversations about my work, family, purchases, plans, health, thoughts, hopes and fears. The combination can reveal vastly more than any individual dataset.

“Securely connecting Claude to my bank is a readily solvable technical problem. What should concern us is what happens to the extraordinarily detailed dossier that results once all of that information is brought together. Recent events involving Revolut, IDScan, Flock and Anthropic themselves show that these concerns are far from theoretical.

“When I entrust my financial data, or any other personal data, to an AI service, that should be treated as a bailment, and not as a transfer of ownership. Custody should create duties to protect it, limit its use, and not turn it into someone else’s asset.”

Steven Swift, Managing Director, Suzu Labs:

“I’m of two minds on Claude integration into bank accounts. On one hand, people already connect their bank accounts to software that helps them manage finances, track where the money is going, looking for forgotten subscriptions and that sort of thing. It wouldn’t be that difficult for Claude to read that data, and provide interesting feedback on it.

“It’d be kind of neat when it works. But what about when it doesn’t?

“There’s only so much impact an agent can have it its access is limited to read-only. Most likely adverse impact here is sometimes you might get bad financial advice. The bigger concern is what happens when people give more than read-only access to their agents.

“We already have seen how quickly users will give agents full access to their devices, because it gets old fast constantly approving requests from agents. But if and when an agent makes a mistake in your bank account, you’re going to be on the hook for it.

“When all of the frontier AI labs were competing to see which agent had accidently hacked into the most systems, there weren’t any repercussions them. They called it “agent misalignment” and said it was part of the process, and that they’re working on making it better.

“But what happens when you experience agent misalignment in your bank account? You’re going to end up on the hook for whatever actions your agent took.

“Currently, individuals have protections against fraudulent purchases. If someone steals your info and spends all your money over the weekend you can get it back. But if you choose to setup an agent into your accounts, and it chooses to do the same thing, the fraud protections don’t apply. We don’t yet have equivalent protections for erroneous financial AI activity, we may or may not ever get such protections. But until we do, proceed with caution.”

i have to admit that at best that I have a lot of unease about this. If others feel the same way, this needs to be rolled back. Like now.

AI gets things wrong. Some categories can’t afford it.

Posted in Commentary with tags on September 17, 2026 by itnerd

By Neycho Tepavicharov, Co-founder, Flashcloud

We have largely accepted that AI assistants get things wrong. Such tolerance is reasonable enough when the stakes are low. A slightly stale restaurant opening time costs someone a wasted trip. A wrong product spec gets corrected at checkout. The error is annoying and self-limiting, but that’s pretty much where it ends.

To be specific about our scope here, this is not about medical advice. That is a separate problem for others more qualified to parse.

This is about the mundane operational facts of a practice – where it is, what it treats, which providers work there, whether it is taking new patients, how you make an appointment. Ordinary directory information, of the kind every business has.

Those facts get read, summarized and repeated by AI assistants the same way restaurant hours do. The difference is what happens when they are wrong.

The Stakes Are Not Evenly Distributed

Someone looking for a healthcare specialist, for example, is usually researching under time pressure, often in an unfamiliar area, and frequently at a moment when they are least equipped to verify what they are told. They ask for a clinic that treats a particular condition and accepts new patients, and they get back two or three names with a line about each.

If the specialty listed is one the practice stopped offering two years ago, the patient calls and, ultimately, gets turned away. If the location is a site the practice closed, they travel to it. If the named provider left, they ask for someone who is not there. None of these are catastrophic in isolation. All of them are worse than the equivalent error about a restaurant, and they happen to people who are already having a bad week.

There is a second-order effect worth noting too. Wrong information about a medical practice tends to be repeated with the same confident tone as correct information, and the person receiving it has no obvious way to assess which they have. The usual signal a human reader would use – a website that visibly has not been touched in years – is stripped out entirely by the time it reaches a summary.

Nobody Involved Can See It Happening

This is the part that makes it hard to fix rather than merely an unfortunate reality.

Practices have almost always learned of wrong information through complaints. Someone turns up at the closed office and rings to say so. But that loop requires the affected person to make contact.

An AI-mediated error can break that loop because the decision may happen before the patient reaches the practice. If the AI assistant leaves the practice out, describes it poorly, points to another provider with clearer information or relies on an outdated listing, the patient may simply move on. The practice never gets a visit, call or form submission, so there is nothing to register. The missed opportunity disappears before it becomes data.

I run a hosting company, so I see a lot of small business websites from the server side, including plenty of medical and dental practices. The pattern is consistent and it’s not due to being careless. A practice website tends to sit between the office manager, whoever built it years ago, and nobody. It gets updated when something forces the issue. Meanwhile it often falls under the radar and becomes the primary source AI uses to describe the practice to prospective patients.

Some practices do not have a working site at all, which is its own version of the same problem – the assistant assembles a description from whatever third-party listings it can find, and the practice has no input into any of it.

Why Healthcare Exposes The General Failure

Healthcare matters here because it makes the larger problem easier to see. AI does not have to invent a wrong answer to cause harm. It can simply repeat outdated information from a source the organization forgot to maintain.

The failure is not that models hallucinate, though they do. It is that they faithfully report stale source material, with no mechanism for signalling age of the information, or confidence that it’s correct, to people who have no way to check. The model is working as designed. The input was wrong, and nothing in the pipeline flags that.

That applies everywhere. Healthcare just makes it legible, because the consequences are concrete enough to notice and the information involved is unambiguously factual. There is no interpretation involved in whether a clinic has moved.

It also suggests where the fix has to sit. Improving the model does not help if the source is wrong. The correction has to happen at the source, which means the organisations being described have to know they are being described, and currently most of them do not.

What That Means Practically

For anyone running or advising a business in a category where accuracy matters, the immediate step is as simple as finding out what is being said.

This takes about twenty minutes. Ask different AI assistants the questions a customer would ask, in the words a customer would use, and note whether you appear and whether the description is right. We wrote up how to do that properly, including which sources to look at once you have the answers, because the sources cited are usually more useful than the answers themselves.

Then assign it to someone. Most of these problems persist not because they are hard but because no individual is responsible for whether the public description of the organization is accurate. That responsibility tends to live as a vague assumption spread across marketing, operations and whoever built the site.

And check that the site actually responds. Systems gathering information move fast across many sources. A site that is slow or briefly unreachable when visited is skipped silently, and whatever less accurate source responded gets used instead. A practice can maintain a scrupulously current website and still be misrepresented because it was unavailable at the wrong moment.

A Reasonable Expectation

None of this is an argument against AI assistants in high-stakes categories. They are useful, people are already using them, and that is not reversing.

It is an argument that the tolerance we developed for low-stakes errors should not have been extended silently to categories where the cost is different. And that the organizations being described bear more of the responsibility than they currently realize, because they control the source material and they are the only party in the chain who can tell whether it is true.

Most of them have never looked.

AUTHOR BIO

Neycho Tepavicharov is co-founder of Flashcloud, a web hosting company. He has spent nearly two decades in the industry, including co-founding and selling a previous hosting business, and writes about infrastructure, AI visibility and the practical realities of running customer-facing systems.

Guest Post: People miss 60% of AI bots on social media: the polite ones hide best

Posted in Commentary with tags on September 17, 2026 by itnerd

Surfshark’s analysis of 1,722 participants worldwide shows that people detect only 40% of bot-generated social media comments. The ones people miss most often are positive, friendly, and logic-sounding bots. According to the researcher, positive social media bots can be utilized for social engineering attacks to bypass real users’ defenses.

“On social media, everyone notices the angry trolls. That’s why the angry trolls are the ones who often get caught. In the simulated social media environment, participants flagged half (50.2%) of negative AI-generated bots,” said Luís Costa, Research and Insights Lead at Surfshark.

However, when a bot hid behind a positive and friendly persona, participants’ detection rate dropped to 38%, a huge 12-point gap. Besides, the simulation is active online, and you can test your bot detection skills.

“Often, AI-powered accounts used in sophisticated manipulation campaigns are agreeable, logical, or simply unremarkable. They can support real users’ opinions and just inflate the number of comments in the discussion to make a minority view look like everyone feels the same way. Seldom do people report such accounts.”

Surfshark researcher points out that positive and friendly AI bots on social media are considered more dangerous than those that are confrontational and annoying. By being friendly and logical, bots bypass people’s skepticism. You don’t see them as an enemy or a threat, so you are more likely to turn to private chat, share personal information, click a link they share, or believe their “logical” disinformation, which can subtly shift your political and social opinions before you even realize you’re talking to an AI machine.

During the live simulation, one of the biggest red flags was the use of emojis. Bots that used many emojis were caught over 60% of the time, while those that kept communication simple were detected only 35% of the time. This huge 30.6-point gap shows why relying solely on emojis is a bad way to protect yourself on social media. Any scammer who simply stops using an excessive amount of emojis instantly becomes twice as hard to spot.

Users of text-driven platforms led the simulation: X users achieved a 49% bot-detection rate and were the strongest bot hunters, significantly ahead of users from visual- and video-first platforms like TikTok (38%) and Facebook (39%). This means AI bots on TikTok and Facebook are more likely to manipulate real users.

Is it still possible to detect AI-generated content on social media?

Even automated detection tools are struggling to detect AI-generated content. For humans, well-made AI content is now almost indistinguishable from content generated by a real person. Luís Costa, Research and Insights Lead at Surfshark, shares recommendations on what people should do to protect themselves on social media: 

  • Judge the account, not the content. Take a close look at when the profile was created, the profile photo, and what’s written in the ‘About’ section. If you see a brand-new account with a generic photo, a vague bio, and a history of posting the same message over and over, you’ve likely found a fake.
  • Keep in mind that when social media debates get serious, your emotions make you more likely to miss fake accounts and wrongly accuse real people.
  • Don’t assume someone is real just because they’re agreeing with you or being supportive. If you get a ton of generic support really fast, that’s actually easy for a bot to fake. 

In this video, find more security expert’s tips on how to tell a bot from a human on social media: https://www.youtube.com/watch?v=nwuhIfnRKko

“Bot or Not” live simulation, created by Interaction Design students from Malmö University, inspired the launch of Surfshark’s Cybersecurity Advocacy Fund, which provides up to €100,000 in annual financial support distributed among students, researchers, and creative cybersecurity awareness initiatives worldwide. The application process is now open. You can find more information here

For complete research material behind this study, click here.

Wâhkôhtowin Mobile Health Clinic brings primary care closer to home for Kikino and Buffalo Lake Metis Settlements

Posted in Commentary with tags on September 17, 2026 by itnerd

A new mobile health clinic will soon be bringing primary health care directly to residents of the Kikino and Buffalo Lake Metis Settlements, helping improve access to culturally grounded care closer to home.

The Wâhkôhtowin Mobile Health Clinic powered by TELUS HealthTM is a custom-built clinic-on-wheels that will provide non-emergency primary healthcare services in and around the two neighbouring Metis Settlements in northeast Alberta.

The clinic aims to reduce barriers to healthcare by significantly decreasing time spent travelling to urban centres and strengthen community connections to services. Operated by Primary Care Alberta (PCA), and shaped in collaboration with the Metis Settlements General Council (MSGC), TELUS Health for Good and the Government of Alberta, it strives to reflect the needs and priorities of the communities themselves.

Starting in late September, the clinic will visit the Kikino and Buffalo Lake Metis Settlements two days per week and provide services that include:

  • routine health check-ups;
  • assessment and treatment of common health concerns;
  • chronic disease management and care planning; and
  • health screening, prevention and wellness supports.


Beyond day-to-day care, the healthcare team will work alongside Settlement leadership, community members and local health partners to connect patients with additional health services when their needs go beyond what the mobile clinic can provide.

About Primary Care Alberta

Care is a lifelong commitment for Primary Care Alberta. We plan, fund and support primary healthcare across the province, improving access to care providers and offering front-line services through Health Link 811 and public health teams. Throughout the health journey, we are by your side – managing, preventing and reducing illness. Along with our partners, we nurture the connections our communities need to thrive and strengthen the health of all Albertans. 

About TELUS Health for Good

Since 2014, TELUS Health for GoodTM has been connecting hard-to-reach and underserved individuals to the health care they need using the power of technology. Backed by a commitment of $20 million through 2028, TELUS Mobile Health Clinics have now supported over 420,000 patient visits across 29 Canadian communities since inception. Equipped with TELUS electronic medical records software, connected by the TELUS Mobility Network, and fuelled by compassion, TELUS Health for Good empowers all Canadians to live healthier, happier lives.

About Metis Settlements General Council

Since the early 1990s, one of the primary objectives has been to establish a secure land base for the Metis people to safeguard their culture, lifestyle, and traditions. This is ongoing work of the Metis Settlements General Council rooted in the long-standing history of our ancestors and early Settlement leaders. Our Land. Our Culture. Our Future.

EnGenius Technologies Names Rachel Saunders Vice President of Sales, North America

Posted in Commentary with tags on September 17, 2026 by itnerd

EnGenius Technologies Inc. today announced the appointment of Rachel Saunders as Vice President of Sales, North America. The appointment strengthens EnGenius’ leadership team as the company accelerates its channel-first growth strategy and expands its cloud-managed portfolio — including Wi-Fi 7, switching, secure gateways, and AI-powered surveillance — across the United States and Canada.

Saunders brings more than 17 years of experience in telecommunications, networking, and technology sales, with a track record of building channel ecosystems across North American and international markets. In her new role, she will lead EnGenius’ North American sales organization, with priorities that include expanding distributor and partner relationships, developing new routes to market, and increasing sales enablement to simplify the partner experience.

The appointment comes as EnGenius continues to expand its end-to-end, cloud-managed portfolio — including Wi-Fi 7 access points, Layer 3 switching, security gateways, intelligent power distribution, AI-powered surveillance, and centralized cloud management — giving partners a flexible, profitable alternative for modern business connectivity.

Black Kite’s Manufacturing & Distribution Ransomware Report 2026 Confirms Manufacturing Remains #1 Target

Posted in Commentary with tags on September 17, 2026 by itnerd

Black Kite today released Manufacturing & Distribution Ransomware Report 2026, Still the #1 Target, but the Victim Profile Moved Downmarket and Overseas (https://blackkite.com/reports/2026-manufacturing-distribution). Examining the pressure across the full supply chain – from manufacturers to the companies that move their products – the report provides a blueprint for ranking suppliers by observable ransomware susceptibility, rather than by revenue, tier, or the date of their last questionnaire.

Ransomware Attacks Continue to Accelerate

Manufacturing’s position at the top is consistent across Black Kite’s broader ransomware research. Black Kite’s 2026 Ransomware Report identified 7,551 publicly disclosed ransomware victims across all industries, with manufacturing ranking first for the fourth consecutive year accounting for 22% of all disclosures.

While ransomware activity is rising across industries, manufacturing stands apart for the consistency and pace of that growth. Ransomware attacks on manufacturers have more than doubled since 2023, and in the first half of 2026 alone, attacks increased nearly 40% year over year.

Manufacturing Ransomware is Going Global

The geographic footprint of manufacturing ransomware is expanding, driven by a sharp rise in European victims. Victim counts across Europe increased 85.4%, while the U.S. share of global manufacturing ransomware victims fell from 52.3% to 34.8%.

Germany saw particularly significant growth. Manufacturing accounts for nearly 20% of the country’s economy, and ransomware victims in the sector increased more than 83% in the first seven months of 2026 compared with the same period in 2025.

One group contributing to that pressure is SafePay. Black Kite’s European ransomware research previously identified the group’s concentration on German targets. SafePay accounted for 21.9% of German manufacturing ransomware victims in 2025 and remains among the country’s most active ransomware groups in 2026.

The Victim Profile: Mid-Market Bears the Brunt

Ransomware’s primary target is the mid-market, not the enterprise as widely assumed. The median ransomware victim generates $42.9 million in annual revenue, and from 2023 through the first half of 2026, 73% of ransomware attacks in North America and Europe hit mid-market companies.

For manufacturing, that concentration carries broader implications. Mid-sized manufacturers often sit within the supplier networks of larger enterprises, meaning attacks on the mid-market can create risk well beyond the initial victim. When suppliers are the primary target, a manufacturer’s vendor ecosystem becomes part of its attack surface.

Threat Actor Spotlight: The Gentlemen

The threat actor ecosystem has been rebuilt, with the hierarchy of players being replaced by Qilin, The Gentleman, Akira, DragonForce, and INC Ransom. Among the new arrivals, The Gentlemen stands out for how quickly it found its footing in manufacturing.

First appearing in Black Kite’s dataset in September 2025, The Gentlemen had claimed 142 manufacturing victims by mid-2026. Manufacturing now accounts for 23.1% of the group’s activity, one of the highest concentrations among major ransomware groups.

Key findings from the report:

  • 1,183 Manufacturing Victims in Seven Months, and the Climb Hasn’t Paused: The first seven months of 2026 produced more manufacturing victims than all of 2024, and same-period volume is up 39.7% year over year.
  • 49.7% of 2026 Incidents Came From Groups Absent Two Years Ago: The attacker ecosystem rebuilt itself in two years. Nearly half of 2026 manufacturing incidents came from groups absent in 2023 and 2024, and a single new entrant, The Gentlemen, accounts for 12% of the year’s incidents on its own.
  • 70.2% of Manufacturing Victims Sit in the $10M to $100M Revenue Band: The mid-market carries the volume. The median victim generates $42.9 million in revenue, while the largest manufacturers continue to be hit every year.
  • 85.4% Growth in European Victims Cut the U.S. Share to 34.8%: The U.S. victim count barely moved (443 to 412), so the drop in the U.S. share from 52.3% to 34.8% came entirely from growth elsewhere, led by Germany, where manufacturing carries 19.9% of the economy

The report measured every exposure from the outside, using the same vantage point available to an attacker. The findings show that many victims displayed measurable signs of ransomware susceptibility at the time of disclosure. Nearly three-quarters (74.4%) had an RSI above 0.4, placing them in the critical range, while more than one-third (35.1%) had an RSI of 0.6 or higher. The average victim scored 0.552.

For manufacturers and distributors, resilience depends on continuously measuring these external signals across their own organizations and third-party ecosystems, and acting on them before a breach occurs.

To read the report, visit https://blackkite.com/reports/2026-manufacturing-distribution.

HP Research: Cybercriminals Leaning into Agentic AI Momentum to Steal Crypto Wallets

Posted in Commentary with tags on September 17, 2026 by itnerd

HP Inc. today released its latest Threat Insights Report, providing analysis of real-world cyberattacks, helping organizations keep up with the latest techniques cybercriminals are using to evade detection and breach PCs in the fast-changing cybercrime landscape. Based on millions of endpoints running HP Wolf Security*, notable campaigns identified by HP Wolf Security threat researchers include:

  • Fake AI Trading Agents Lure Crypto Users into Malware Trap: Cybercriminals are capitalizing on interest in Agentic AI by advertising fake AI trading agents to trick users into infecting themselves with malware. Once downloaded, victims’ browsers are scanned for crypto wallet extensions like Coinbase and MetaMask, replacing them with malicious lookalikes that harvest any credentials entered.  Once harvested, attackers have easy access to steal crypto holdings.
  • QR Phishing Remains a Common Credential Theft Route: Attackers are using QR codes to move victims from PCs to less-protected mobile devices. Victims receive PDFs with content supposedly “blurred for security”. They are then prompted to scan a QR code with their phone which redirects to phishing sites that may otherwise be blocked on their PCs, putting login credentials at risk.
  • Phantom Stealer Ecosystem Expands: Researchers identified Phantom Gate, a new malware loader, that appears to extend the Phantom Stealer campaign. Combining Phantom Stealer malware, which is openly marketed as legitimate penetration-testing software, with the Phantom Gate loader mechanism, makes it easier for threat actors to build and scale attack campaigns.

By isolating threats that have evaded detection tools on PCs – but still allowing malware to detonate safely inside secure containers – HP Wolf Security has insight into the latest techniques used by cybercriminals. To date, HP Wolf Security customers have clicked on 60 billion email attachments, web pages and downloaded files with not reported breaches.

The report, which examines data from April-June 2026, details how cybercriminals continue to diversify attack methods to bypass security tools, revealing that:

  • At least 10% of email threats identified by HP Sure Click bypassed one or more email gateway scanner.
  • Executable files were the most popular malware delivery type (40%), followed by archive files (38%) and PDF documents (7.5%).

Please visit the HP Threat Research blog to view the report.

Frequently Asked Questions

  1. What are the main findings from HP’s latest Threat Insights Report?
    The report shows attackers exploiting interest in Agentic AI tools to lure victims, using QR codes to shift credential theft onto less-protected mobile devices, and continuing to invest in specialized malware capability modules like the Phantom Gate loader to expand existing malware campaigns.
  • How are attackers using interest in Agentic AI?
    In this report, we find that attackers are advertising fake AI trading agents to cryptocurrency users. When installed, the malware scans browsers for crypto wallet extensions such as Coinbase and MetaMask, replaces them with malicious lookalikes, and harvests credentials entered by victims.
  • Why does QR phishing remain a concern?
    QR phishing moves users from PCs to mobile devices that may have weaker protections. HP researchers observed malicious PDFs claiming content was “blurred for security” and prompting users to scan QR codes for authenticated access, redirecting them to phishing sites to steal login credentials.
  • What does Phantom Gate reveal about the cybercrime ecosystem?

Phantom Gate is a new malware loader that shows how threat actors are investing in specialized modular components to make attack campaigns, like Phantom Stealer, easier to build and scale. Phantom Stealer is sold to attackers as “legitimate” penetration-testing software, showing how cybercrime-as-a-service blurs the line between legitimate tools and malware.

  • What should organizations take from the report?

The report shows how Agentic AI momentum expands opportunities for attackers to trick users into downloading malicious software. We also see continued threat actor investment in developing tools to scale phishing and malware deployment. This tells us that organizations should assume malicious links, files and downloads may evade traditional detection. It highlights the importance of integrating isolation and containment into a zero-trust approach to prevent untrusted clicks and downloads from becoming endpoint compromises.

About the Data

This data was gathered from consenting HP Wolf Security customers from April-June 2026, with investigations conducted by the HP Threat Research Team.

About HP Wolf Security

Built on more than 25 years of security research and innovation from the HP Security Lab, HP Wolf Security provides comprehensive endpoint protection and resilience across the stack, starting at the hardware level and extending across software and services.

To date, HP Sure Start has protected more than 200 million endpoints against compromised firmware. HP Sure Click has isolated more than 60 billion[2] risky user activities across documents and web pages, with zero reported breaches resulting from those isolated activities.

With the most secure hardware at its core, future-ready security for continuous up time, and visibility, control, and resilience at scale, HP Security is built for the future of work.