CybersecuritySoftware

Microsoft Blocks Windows File Previews Over Security Fears

Microsoft has quietly disabled file preview capabilities for internet-downloaded documents in Windows 11, citing vulnerability to credential theft. The change affects files with the “Mark of the Web” attribute and represents the latest in a series of security moves this month. Security analysts suggest the blanket approach might inconvenience legitimate users while addressing a specific NTLM hash leakage risk.

Microsoft appears to be taking a scorched-earth approach to a specific Windows security vulnerability, with reports indicating the company has disabled file previews for all internet-downloaded documents. The change, which reportedly took effect October 14, automatically blocks File Explorer’s preview function for any files bearing the “Mark of the Web” attribute—Microsoft’s method for flagging content obtained from online sources.

Credential Theft Concerns Prompt Drastic Action

BusinessCybersecurity

Former GCHQ Technology Chief Assumes Academic Role in Cybersecurity Leadership

The former Chief Technology Officer of GCHQ has joined the University of Manchester as Professor of Cyber Security. Sources indicate his seven-year tenure involved developing critical national security capabilities. Analysts suggest this move signals growing collaboration between intelligence agencies and academic institutions.

Intelligence Veteran Transitions to Academic Leadership

Gaven Smith, who served as Director General for Technology and Chief Technology Officer at GCHQ until late 2023, has assumed a new position as Professor of Cyber Security at the University of Manchester, according to recent reports. During his seven-year tenure as CTO, sources indicate he was responsible for research and development of numerous critical UK national security capabilities that supported the agency’s evolving mission requirements.

BusinessCybersecurity

Former L3Harris Cyber Executive Charged With Stealing Trade Secrets for Russia

Federal prosecutors allege a former L3Harris cyber division manager stole eight trade secrets and sold them to a Russian buyer. The Department of Justice is seeking forfeiture of $1.3 million in allegedly illicit proceeds from the scheme.

Federal Charges Against Defense Contractor Executive

The U.S. Department of Justice has formally accused a former L3Harris cybersecurity executive of stealing trade secrets and selling them to a buyer in Russia, according to court documents obtained by TechCrunch. The criminal information document, filed on October 14, alleges that Peter Williams stole eight trade secrets from two unnamed companies between April 2022 and August 2025.

CybersecuritySoftware

Microsoft’s Smart Card Authentication Change Forces Registry Workaround

Microsoft has intentionally modified smart card authentication in recent Windows updates, creating certificate operation failures across multiple Windows versions. The temporary solution requires users to implement a registry hack that will only function until April 2026 updates. Administrators face increased workload as they must manually apply the workaround to affected devices.

Authentication Changes Break Smart Card Functionality

Microsoft has confirmed that recent authentication issues affecting smart card users were intentionally implemented rather than accidental, according to reports. The changes were made as part of security improvements addressing CVE-2024-30098, with sources indicating the modification requires RSA-based smart card certificates to utilize KSP (Key Storage Provider) instead of CSP (Cryptographic Service Provider).

AICybersecuritySoftware

Reddit Files Lawsuit Alleging Perplexity AI Illegally Scraped Content Through Third Parties

Reddit has filed a lawsuit against Perplexity AI, accusing the company of illegally scraping content to train its artificial intelligence systems. The social media platform claims it caught Perplexity using third-party data scraping firms to access Reddit content without permission. According to reports, Reddit used a clever detection method involving a “test post” that proved Perplexity was accessing restricted content.

Legal Battle Over AI Training Data

Reddit has initiated legal action against artificial intelligence company Perplexity, alleging the AI firm engaged in unauthorized data scraping of Reddit content to train its AI systems. According to the complaint filed in court, Perplexity collaborated with three data scraping companies—AWMProxy, Oxylabs, and SerpApi—to access Reddit’s content without proper authorization. Sources indicate that Perplexity maintained business relationships with at least one of these scraping firms to systematically extract data from Reddit’s platform.

AICybersecuritySoftware

Reddit Files Lawsuit Against Perplexity AI Over Alleged Data Scraping Practices

Reddit has initiated legal action against Perplexity AI, accusing the company of illegally harvesting user-generated content to train its artificial intelligence models. The lawsuit names three data firms allegedly involved in circumventing Reddit’s anti-scraping measures. This marks the second such lawsuit Reddit has filed against AI companies in recent months.

Legal Battle Over AI Training Data Intensifies

Reddit has filed a federal lawsuit against Perplexity AI, alleging the artificial intelligence company illegally scraped user-generated content from its platform to train its AI models, according to court documents filed in New York. The social media platform is seeking monetary damages and a permanent injunction to prevent further use of its data, the report states.

CybersecuritySoftware

Vidar Infostealer Emerges as Top Cybercrime Tool Following Lumma Stealer’s Decline

Cybersecurity researchers report that Vidar 2.0 has emerged as the dominant information stealer following Lumma Stealer’s infrastructure disruption. The upgraded malware features multithreaded architecture for faster data exfiltration and improved evasion capabilities, according to recent analysis.

Cybercrime Landscape Shifts as New Infostealer Rises

An upgraded version of the Vidar information stealer has filled the vacuum left by the declining Lumma Stealer, according to recent cybersecurity reports. The new Vidar 2.0 version features significant architectural improvements that enable faster data theft and better evasion of security measures, sources indicate.