access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
Hackers target exposed Vite dev servers to steal AWS, Azure secrets
A mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configurations from AWS and Azure deployments. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-target-exposed-vite-dev-servers-to-steal-aws-azure-secrets/ also interesting: Cybersecurity Snapshot: Study Raises Open Source Security Red Flags, as Cyber Agencies Offer Prevention Tips Against Telecom Spying Attacks Getting the Most Value Out…
-
New York Seizes a Dozen Celebrity Deepfake Websites
In the biggest-ever legal action against harmful deepfake websites, the Manhattan District Attorney’s Office has seized 12 sites that collectively targeted around 1,200 victims. First seen on wired.com Jump to article: www.wired.com/story/new-york-seizes-a-dozen-celebrity-deepfake-websites/ also interesting: 7 biggest cybersecurity stories of 2024 Phishing click rates tripled in 2024 despite user training Patch Tuesday for May: Five zero…
-
Mantax Otax Targets Android Phones With Spyware and Ransomware
Mantax Otax Android malware steals messages, PINs, and files, monitors screens, and uses ransomware and harassment to pressure victims into paying. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/cybersecurity/news-mantax-otax-android-malware-apac-indonesia/ also interesting: Russian cyberespionage groups target Signal users with fake group invites Man jailed for teaching criminals how to use malware Google Warns Over 1 Billion…
-
Revolut Reveals Data Breach Tied to Faked Official Request
Financial Platform Was Socially Engineered Into Disclosing Sensitive Customer Data. Digital financial platform Revolut is notifying customers that it suffered a data breach exposing their personal details after it fell for an official-looking impersonation scam involving a request for customer information sent using a legitimate government agency domain email. First seen on govinfosecurity.com Jump to…
-
Revolut Reveals Data Breach Tied to Faked Official Request
Financial Platform Was Socially Engineered Into Disclosing Sensitive Customer Data. Digital financial platform Revolut is notifying customers that it suffered a data breach exposing their personal details after it fell for an official-looking impersonation scam involving a request for customer information sent using a legitimate government agency domain email. First seen on govinfosecurity.com Jump to…
-
Weshalb guter Ransomware-Schutz für Backups nicht nur Daten schützt, sondern auch das Repository prüft
Unveränderliche Backups gelten als letzte Verteidigungslinie gegen Ransomware. Doch was passiert, wenn Angreifer nicht die Produktivsysteme, sondern das Backup-Repository selbst ins Visier nehmen? Kai Hambrecht von Grau Data geht dieser Frage auf den Grund. Übermäßige Admin-Rechte, Active-Directory-Anbindung, unzureichende Netzwerksegmentierung oder manipulierte Restore-Punkte können dazu führen, dass Backups im Ernstfall nicht mehr verfügbar oder wiederherstellbar sind.…
-
Hundreds of fake government websites target users in Central Asia
The sites are designed to collect victims’ contact details, which scammers then use to target them through phone or email to steal money, personal information or gain access to their devices. First seen on therecord.media Jump to article: therecord.media/hundreds-of-fake-gov-websites-central-asia-scam also interesting: 7 biggest cybersecurity stories of 2024 TDL001 – Cybersecurity Explained: Privacy, Threats, and the…
-
Pro-Ukraine Hacking Cat group deploying new malware against Russian targets
The pro-Ukraine hacktivist group Hacking Cat has evolved from carrying out website defacements and data leaks to more sophisticated and destructive attacks on Russian targets, researchers said. First seen on therecord.media Jump to article: therecord.media/ukraine-malware-russia-ransomware also interesting: The most notorious and damaging ransomware of all time UK blames Russia’s infamous ‘Fancy Bear’ group for Microsoft…
-
Bigger AI Security Budgets Should Be Coming In 2027: GuidePoint CISO
CISOs looking for a boost in budget to help secure the surging adoption of AI around their organizations could begin to see a much-needed spending increase starting next year, according to GuidePoint Security’s Gary Brickhouse. First seen on crn.com Jump to article: www.crn.com/news/security/2026/bigger-ai-security-budgets-should-be-coming-in-2027-guidepoint-ciso also interesting: How CISOs Can Lead the Responsible AI Charge AI Integration,…
-
Sonar Supports OpenAI’s Call for Collective Action on Cyber Defense
The window to strengthen cyber defense is narrowing, as advanced AI models compress the time between vulnerability disclosure and exploitation from months to minutes. It’s the responsibility of the defenders to match that pace. That is why we’ve signed OpenAI’s… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/sonar-supports-openais-call-for-collective-action-on-cyber-defense/ also interesting: 9 top bug bounty programs…
-
Common web application security risks every SME should understand
For many UK SMEs, a web application is not just a website. It is the place customers log in, place orders, book services, submit forms, or access account information. That means a weakness in the application can quickly become a… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/common-web-application-security-risks-every-sme-should-understand/ also interesting: The 7 most in-demand cybersecurity…
-
Zero Data Retention: What Every AI Provider Actually Promises You
A security questionnaire lands in your inbox three weeks before the deal closes. Question 14 asks whether your AI provider retains customer data, and for how long. You check the provider’s trust page, see the words “zero data retention,” and… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/zero-data-retention-what-every-ai-provider-actually-promises-you/ also interesting: 20% of Generative AI ‘Jailbreak’…
-
Using AI for Weapons Development
Last week, Anthropic released a long and detailed document describing current misuses of their Claude models. I’m still reading it, but I wanted to flag this: We identified a cell of threat actors based in northern Yemen running three weapons… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/using-ai-for-weapons-development/ also interesting: AI Infused with XDR, SIEM,…
-
Malicious Twitch Extension Exposes 31,000 Users’ OAuth Tokens
Socket has discovered a Twitch browser extension forwarding users’ OAuth tokens to a Russian bot service First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/malicious-twitch-extension-oauth/ also interesting: Russian hackers deliver malicious RDP configuration files to thousands Cybersecurity Snapshot: NIST Offers Zero Trust Implementation Advice, While OpenAI Shares ChatGPT Misuse Incidents 12 ways attackers abuse cloud services…
-
âš¡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits
AI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job. Some models are also crossing lines on their own. That is not a great combination.The rest of the week is more familiar: old bugs still working, fresh exploit chains, exposed systems,…
-
Texas Judge Finds TikTok Liable for Misleading Parents About Child Safety Controls
Tags: controlA Texas judge found TikTok liable for misleading parents about child safety controls, shifting the case toward penalties and possible restrictions. The post Texas Judge Finds TikTok Liable for Misleading Parents About Child Safety Controls appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-texas-tiktok-child-safety-liability-ruling/ also interesting: Policymakers weigh U.S., China AI competition…
-
OpenAI Agents Linked to 2,000 RubyGems Packages, Alleged RubyDoc RCE
Researchers linked OpenAI agents to RubyGems abuse and alleged RubyDoc RCE, highlighting risks around autonomous AI, build systems, and credentials. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/news-openai-rubygems-rubydoc-rce/ also interesting: RCE flaw in OpenAI’s Codex CLI highlights new risks to dev environments Top 5 real-world AI security threats revealed in 2025 RCE by design: MCP…
-
U.S. CISA adds GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added [1, 2] the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Two of the above vulnerabilities affect JFrog Artifactory. CVE-2026-42016 can allow attackers to bypass authorization checks and…
-
Phishing ohne Webserver: Neuartige Browser-Angriffe aufgedeckt
Angreifer generieren gefälschte Anmeldeseiten mittels Blob-URLs direkt im Arbeitsspeicher der Opfer. Der Missbrauch vertrauenswürdiger Microsoft-Dienste hebelt klassische Filter aus. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/phishing-ohne-webserver also interesting: Die wachsende Gefahr KI-gestützter Cyberangriffe CISOs should address identity management ‘as fast as they can’ says CrowdStrike exec OAuth-Apps für M365-Phishing missbraucht Nigeria arrests dev of…
-
Malicious actors already using critical GitLab flaw, CISA and others warn
The vulnerability could let unauthenticated users access sensitive files from software-development environments. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/gitlab-vulnerability-exploitation-cisa-kev/830278/ also interesting: Cybersecurity Snapshot: AI Will Take Center Stage in Cyber in 2026, Google Says, as MITRE Revamps ATTCK Framework Cybersecurity Snapshot: AI Will Take Center Stage in Cyber in 2026, Google Says, as MITRE…
-
Security teams increasingly outflanked by AI agents
Tags: aiA report warns that non-human identities are growing beyond the ability of existing systems to track.; First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/security-teams-increasingly-outflanked-by-ai-agents/830290/ also interesting: MSSP Alert Live 2024: Why AI is a Business Opportunity for MSPs NSFOCUS ISOP Receives International Recognition: AI Drives Enterprise Security Operations from “Complex” to “Simple” Agentic AI took…
-
Nicht empirisch belegbar: Bedrohung durch KI-Systeme nur subjektiv
Tags: aiAm Max-Planck-Institut für Sicherheit und Privatsphäre wird die Warnung vor KI zwar ernst genommen, aber nicht überbewertet. First seen on golem.de Jump to article: www.golem.de/news/nicht-empirisch-belegbar-bedrohung-durch-ki-systeme-nur-subjektiv-2609-212996.html also interesting: Report: Cloud security benefiting from AI workloads surge ReliaQuest secures $500 Million in funding, boosting AI-driven cybersecurity operations AI supply chain threats loom, as security practices lag Securing…
-
Immuniweb-Gründer nennt Debatte ‘over-hyped” – Anthropic untersucht vierten Zugriff von Claude auf Fremdsystem
Tags: accessFirst seen on security-insider.de Jump to article: www.security-insider.de/claude-sicherheitstest-anthropic-adminzugriff-drittsystem-a-7071a4bf10621b0de2ab13f746df5241/ also interesting: Android 16 Takes Action Against Scammers with In-Call Security Features Two arrested for stealing Taylor Swift Eras Tour tickets and selling for a $600,000 profit in cybercrime scheme SonicWall SMA1000 Vulnerability Allow Attackers to Exploit Encoded URLs To Remotely Gain Internal Systems Access 3 Things…
-
Human Attacker Hits Machine-Speed Exploitation of Marimo RCE
A human attacker exploited a Marimo RCE and reached an SSH bastion in eight seconds First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/human-attacker-machine-speed/ also interesting: Palo Alto Networks discloses RCE zero-day vulnerability Apache Tomcat Vulnerability Exploited to Execute Malicious Arbitrary Code on Servers Microsoft Entra ID RCE Flaw Lets Unauthorized Attackers Execute Code Remotely Over…
-
Why Patch Automation Needs Brakes, Not Just an Accelerator
Patch automation can help IT teams keep pace with growing update volumes, but deploying faster also means bad updates can spread faster. Action1 explains how update rings, predefined success criteria, and human oversight can make automated patching faster without sacrificing control. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/why-patch-automation-needs-brakes-not-just-an-accelerator/ also interesting: Microsoft fixes bug causing…
-
LG Pushes Back on Claims That Its Smart TVs Are Spying on Users
Researchers allege LG smart TVs can capture ambient audio and scan home networks, while LG disputes the findings and explains its privacy controls. The post LG Pushes Back on Claims That Its Smart TVs Are Spying on Users appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-lg-smart-tv-ambient-audio-privacy-claims/ also interesting: New Report: Governments…
-
Securing the Skies: Aviation’s Top Security Leaders to Watch
Aviation runs on trust measured in safety margins, and its cybersecurity leadership carries a version of the same burden: operational technology that cannot go down, regulators on several continents, and passengers who never see the work unless it fails. The… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/securing-the-skies-aviations-top-security-leaders-to-watch/ also interesting: The 10 biggest issues CISOs…
-
Chicago’s CISOs to Watch: Security Leadership Citywide
Chicago has always been a city of markets, underwriters, and makers, and its security leadership reflects that mix. The CISOs below run cyber programmes at a ratings agency, a derivatives exchange, a mutual insurance group, a pharmaceutical manufacturer, and an… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/chicagos-cisos-to-watch-security-leadership-citywide/ also interesting: 7 biggest cybersecurity stories of…
-
Cybersecurity Leaders to Watch in London: Securing Britain’s Business Capital
London hosts the head offices of insurers, payment providers, publishers, industrial groups, and consumer brands, each operating under a regulatory environment shaped by GDPR, NIS2, FCA supervision, and the UK’s evolving cyber resilience legislation. The security leaders below have built… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/cybersecurity-leaders-to-watch-in-london-securing-britains-business-capital/ also interesting: 7 biggest cybersecurity stories of…
-
Daily OT Security News: September 14, 2026
This is the Daily OT Security News briefing for September 14, 2026. OT-ISAC, NCSA, TXOne conduct Predictive Resilience exercise, focus on evidence-driven OT cybersecurity decisions OT-ISAC, Thailand’s National Cyber Security Agency (NCSA), and TXOne Networks conducted a Predictive Resilience Exercise… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-14-2026/ also interesting: The Imperative of Tunnel-Free Trusted…
-
Claude Code vs. AWS Kiro vs. GitHub Copilot: Should Every Developer Use the Same AI Coding Tool?
AI coding tools are no longer experimental side projects inside engineering teams. They are becoming part of the software delivery system. GitHub Copilot can plan changes, edit code, execute development tasks, and operate through agent mode. Claude Code can navigate… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/claude-code-vs-aws-kiro-vs-github-copilot-should-every-developer-use-the-same-ai-coding-tool/ also interesting: Mit dem Harmony-SASE-MCP-Server integriert Check…
-
JFrog und Wiz schließen die Lücke zwischen Cloud-Risiko und verifiziertem Software-Fix
JFrog integriert Wiz und verbindet Cloud-Risikoerkennung mit verifizierten Code-Korrekturen für mehr Transparenz und schnellere Remediation. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/jfrog-und-wiz-schliessen-die-luecke-zwischen-cloud-risiko-und-verifiziertem-software-fix/a46392/ also interesting: The 7 most in-demand cybersecurity skills today Top 12 ways hackers broke into your systems in 2024 Be Certain Your Data is Guarded with Cloud Compliance Agentic AI is both…
-
SpiderSilk Hunts External Threats With AI-Based Scanner
The Dubai-based threat detection startup uses artificial intelligence tools to scan billions of IP addresses to find exposed assets, leaked data, and zero-day vulnerabilities. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/spidersilk-hunts-external-threats-ai-scanning also interesting: Cloud Access Security Broker ein Kaufratgeber China-linked hackers target Japan’s national security and high-tech industries Wiz’s Security GraphDB vs. DeepTempo’s LogLM…
-
Red Heron nutzt kritische Gitea-Lücke für internationale Cyberangriffe
Die Acronis Threat Research Unit hat eine internationale Angriffskampagne auf öffentlich erreichbare Gitea-Server aufgedeckt. Die Gruppe Red Heron automatisierte die Ausnutzung einer kritischen Schwachstelle, um Quellcode, Zugangsdaten und interne Konfigurationen zu stehlen. Im Visier standen unter anderem Organisationen aus dem Energie- und Industriesektor sowie Systeme mit Bezug zu Wahlen. Ein neu entdecktes Linux-Rootkit ermöglichte den…
-
IT-Sicherheit und KI it-sa kind of Magic
Check Point Software wird in diesem Jahr auf der it-sa in Nürnberg vom 27. bis 29. Oktober in Halle 7A am Stand 212 ausstellen. Neben dem Sicherheitshersteller werden auch die Reseller NTT Data und Netuse auf der Fläche präsent sein und über die Sicherheitstechnologien informieren. Highlight des Messeauftritts wird ein Magier sein, der mit seinen…
-
Microsoft’s Patching
Once a month, Microsoft pushes a security update to all Windows users. Tomorrow’s is a new record: Microsoft’s patch for September is a doozy, with a record number of roughly 972 vulnerabilities fixed and 112 of them meeting the high… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/microsofts-patching/ also interesting: Frage: BlackLotus-Schwachstelle und ablaufendes UEFI-Zertifikat…
-
PaperCut Flaw Compromise Illustrates the Maturing Use of AI By Attackers
A likely Russian bad actor used multiple AI tools and hundreds of AI agents to exploit two vulnerabilities in PaperCut software to attack hundreds of companies in 48 countries, the latest example of the growing maturity in the use of AI by adversaries. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/papercut-flaw-compromise-illustrates-the-maturity-use-of-ai-by-attackers/ also interesting: The 2024…
-
Vorwürfe der Opposition – Hackerangriff in Berlin Zugangsdaten wurden veröffentlicht
First seen on security-insider.de Jump to article: www.security-insider.de/hackerangriff-berlin-ultimatum-30-bitcoins-rhysida-a-abcb426930181105790694dd8e057b4f/ also interesting: Cyberangriff auf einen Schulbezirk in Tennessee, USA SAP-Schwachstellen gefährden Windows-Nutzerdaten KI-Gefahren rücken Integritätsschutz in den Mittelpunkt Neue Variante des Shai-Hulud Worm – Supply-Chain-Angriff trifft über 1.000 npm-Pakete
-
Check Point stärkt Firewall-Strategie: Leader-Position im Gartner Magic Quadrant 2026
Check Point wird im Gartner Magic Quadrant 2026 als Leader für Hybrid-Mesh-Firewalls ausgezeichnet und verbindet Netzwerksicherheit mit KI-Schutz. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-staerkt-firewall-strategie-leader-position-im-gartner-magic-quadrant-2026/a46390/ also interesting: Stealth Is the Strategy: Rethinking Infrastructure Defense CASB buyer’s guide: What to know about cloud access security brokers before you buy The Feynman Bet: Why You Still…
-
AI Changed the Exposure Problem. Validation Needs to Change With It.
There’s a lot of noise around AI and cybersecurity right now. What’s actually important is far simpler, if often lost in the hubbub. Vulnerability discovery is getting faster and happening at a much greater scale, while defenders still have to work out which findings actually deserve their action.In the first half of 2026, a whopping…
-
Defense Cyber Spending Set to Surge Amid Rising Attacks on Military Systems
MarketsandMarkets has projected the cyber warfare market to double by 2031, amid growing demand for defensive and offensive cyber capabilities in the military First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/defense-cyber-spending-attacks/ also interesting: Successful Military Attacks are Driving Nation States to Cyber Options Cybersecurity Snapshot: U.S. Gov’t Urges Adoption of Memory-Safe Languages and Warns About…
-
ENISA launched the CRA Single Reporting Platform for actively exploited vulnerabilities
The EU Agency for Cybersecurity switched on the Cyber Resilience Act’s Single Reporting Platform on 11 September 2026, the same day the law’s reporting obligations … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/14/enisa-cra-single-reporting-platform/ also interesting: Cybersecurity Snapshot: Study Raises Open Source Security Red Flags, as Cyber Agencies Offer Prevention Tips Against Telecom Spying Attacks…
-
Revolut handed customer data to fraudsters using government email account
British fintech Revolut confirmed disclosing sensitive customer data to fraudsters who submitted emergency data requests from a legitimate government email account. First seen on therecord.media Jump to article: therecord.media/revolut-scam-crypto-impersonation also interesting: Biden’s final push: Using AI to bolster cybersecurity standards Cybersecurity Snapshot: Tenable Report Spotlights Cloud Exposures, as Google Catches Pro-Russia Hackers Impersonating Feds APT…
-
Cyber Threat Landscape: Real Attack Alerts and Recent Incidents
The Current Threat PictureThe supplied Seceon overview presents a clear picture of a modern enterprise threat landscape. Credential attacks, suspicious cloud authentication, VPN brute force, data-loss events, and major external campaigns can occur alongside one another. The most important operational… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/cyber-threat-landscape-real-attack-alerts-and-recent-incidents/ also interesting: Cybersecurity Snapshot: Study Raises Open…
-
How to Verify Email Addresses in WordPress With EasyDMARC
Originally published at How to Verify Email Addresses in WordPress With EasyDMARC by EasyDMARC. Collecting email addresses through WordPress is easy. Making sure those addresses are real and usable is a different challenge. A form can accept an address that… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/how-to-verify-email-addresses-in-wordpress-with-easydmarc/ also interesting: Critical WordPress Plugin Flaw Exposes…
-
RDP, Sound und mehr: Windows-Updates bereiten Nutzern allerhand Probleme
Laut Microsoft lösen die neuen Windows-Updates Probleme mit Linux-VMs, USB-Audio und RDP-Verbindungen aus. Doch da scheint noch mehr kaputt zu sein. First seen on golem.de Jump to article: www.golem.de/news/rdp-sound-und-mehr-windows-updates-bereiten-nutzern-allerhand-probleme-2609-212982.html also interesting: Microsoft’s February 2025 Patch Tuesday Addresses 55 CVEs (CVE-2025-21418, CVE-2025-21391) The most notorious and damaging ransomware of all time Cybersecurity Snapshot: AI Will Take…
-
Behörden-PDFs: Vertrauliche Daten trotz Schwärzung rekonstruierbar
Tags: unclassifiedUnsere Analyse von knapp 5.000 Behörden-PDFs zeigt, wie scheinbar geschwärzte Angaben wieder sichtbar werden und warum das nicht nur am eingesetzten Programm festzumachen ist. First seen on golem.de Jump to article: www.golem.de/news/behoerden-pdfs-vertrauliche-daten-trotz-schwaerzung-rekonstruierbar-2609-212878.html also interesting: Secure Boot-neutering PKfail debacle is more prevalent than anyone knew Exim: Umgehung des Attachment-Filters ermöglicht Schadcodeanhänge Bitcoin Scorches Past $57,000 As…