This one is for all the people who buy a router, set it up according to the default settings, and never look at it again. Unfortunately, default settings aren't really optimized to keep us safe and secure. Instead, they're designed to make the product work out-of-the-box for as many people as possible.

See what you missed in Daily Tech Insider from Sept. 7–11.

The post AI Agents, Foldables, Cyberthreats, and Chip Deals Define This Week in Tech appeared first on TechRepublic.

Any time I recommend software to a friend, there is always an inevitable question: How much does it cost? The quality isn't necessarily the discerning factor—no one wants to pay for something if it isn't necessary. That makes free, open-source tools very easy to recommend to most people without a moment's hesitation.

PaperCut flaws were exploited across 440 servers using hundreds of AI agents. Learn which versions are affected and what security teams should do now.

The post AI Agents Help Hackers Compromise 440 PaperCut Servers appeared first on TechRepublic.

ENISA has gained access to Anthropic’s Mythos 5, giving EU officials a chance to independently test the cyber AI after months of negotiations.

The post EU Gets Access to Anthropic Cyber AI — But Not Its Newest Model appeared first on TechRepublic.

Thailand’s Cloud Security Standard took effect Sept. 10, 2026, raising compliance requirements for government, CII organizations, and cloud providers.

The post Thailand’s Cloud Security Standard Is Now in Force: What Providers and CII Operators Must Review appeared first on TechRepublic.

This is the second data breach affecting a company that hardware crypto wallet maker Trezor relies on.

Anthropic said it stopped multiple attempts by scientists this year to use its technology for research that could help develop biological weapons, as experts increasingly fear the threat that AI poses to public safety.

The startup gave five examples of times actors “circumvented controls” and made other efforts to “obfuscate” the purpose of their research to dodge safeguards. The cases involved some users in nations that it prohibits from accessing its models, which include Russia, China, and Iran.

“We hope that by sharing these examples, we spark a conversation within the AI industry and with governments about emerging biological risks and how best to counter them,” Anthropic said in a report about efforts to use its models for malicious activity.

Read full article

Comments

© Getty Images | picture alliance

The hackers allegedly spent a year hoarding documents before IDScan closed the door.

Google’s September Android update fixes 180 security flaws, including critical bugs. Learn how to check your phone’s security patch level.

The post 180 Android Security Flaws Patched: What Users Should Do appeared first on TechRepublic.

CISA’s ChatGPT incident exposes a growing AI governance gap as enterprises struggle to define who is accountable for actions taken by AI agents.

The post CISA’s ChatGPT Incident Exposes a Bigger AI Governance Problem appeared first on TechRepublic.

It can be painful to change password managers on your phone, not to mention insecure — you might have to download files that expose your passwords in plain text, and recreate all your passkeys. Google now claims to have fixed this with a new "transfer experience" that helps you switch password managers on Android, including passkeys.

The ID checking company said the data breach included people's full names and driver's licenses and other government-issued identity documents.

Amazon named cybersecurity veteran Kevin Mandia to its board of directors, adding new security expertise a few months after former NSA director Keith Alexander stepped down.

Mandia founded Mandiant, the breach-investigation firm Google acquired for $5.4 billion in 2022, and remained at the search giant as a strategic advisor through July 2025, according to his LinkedIn profile. He now leads Armadin, an AI security startup he started last year.

Amazon said in its announcement that “cybersecurity is one of the most consequential risks and responsibilities organizations face today, and the threat landscape continues to evolve rapidly alongside advances in AI.”

Amazon added a cybersecurity specialist to its board in 2020, when it elected Alexander, who also led U.S. Cyber Command. Mandia comes from the other side of the field, with two decades spent investigating corporate breaches rather than defending government networks.

His appointment also puts an AI security entrepreneur on the board of a company whose cloud infrastructure underpins much of the internet. Armadin, founded in September 2025, uses AI to run attacks against corporate networks, probing defenses the way an intruder would.

The board’s Security Committee, which oversees Amazon’s cybersecurity policies and its response to significant cyber incidents, is now chaired by Dan Huttenlocher, dean of the MIT Schwarzman College of Computing. Mandia joins as a member, along with former Bridgewater co-CEO Jon Rubinstein.

Amazon also named Mandia to the board’s Audit Committee, according to a securities filing.

Mandia received 4,086 restricted stock units in connection with his election to the board, vesting in three equal annual installments beginning Nov. 15, 2027, the filing shows. The shares were worth about $1.03 million at Amazon’s closing price Wednesday.

The filing disclosed that his sister-in-law, Kristin Mandia, is an Amazon employee with an annual salary of $185,000. The company said her compensation is consistent with that of other employees at her level with similar responsibilities.

Researchers say that they exploited the microphone and content recognition features of an LG TV to listen to user conversations.

The early days of people having internet in their homes were pretty wild. Viruses were pretty much everywhere, and unlike now, many users had no clue what to do with them. I was a tween in the early '00s, but I remember intervening when my mom's PC had what felt like hundreds of them, with pop-ups and ads covering up the entire desktop, impossible to remove.

Microsoft’s record September Patch Tuesday fixes 974 vulnerabilities, including two exploited zero-days. Here’s what IT teams should prioritize.

The post Microsoft Fixes 974 Flaws in Record Patch Tuesday appeared first on TechRepublic.

Android keeps a running list of every Wi-Fi network you've ever joined, and it never expires on its own. Most people are carrying dozens of entries they've long forgotten. That list is more revealing — and more useful to strangers — than it first appears.

The three Indian companies are accused of using hackers to steal information used to sway litigation.

Get AI-powered threat protection, encrypted connections, and more with this VPN lifetime subscription today.

The post This $50 lifetime VPN adds AI-powered protection to your connection appeared first on TechRepublic.