Defenders can’t use AI in the same way attackers can, but there’s much they can do to unlock the potential of agentic cyber defence.
The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organization" in the information technology (IT) services industry, once...
The awards presented at Proofpoint Protect 2026 celebrate partners driving customer impact, growth and secure AI adoption worldwide.
Officials discussed setting up a mechanism for the two countries to notify each other of AI incidents which could threaten national security.
Malware can hide inside legitimate-looking files, exploit vulnerabilities, execute malicious scripts, or remain dormant until specific conditions are met. For security teams, identifying a...
Kaspersky GERT experts dive into the technical incident analysis of PAYLOAD ransomware: an encryptionless, binary-less operation that abused Active Directory mechanisms for managing Group Policy Objects.
We explore how AWS neutralizes exposed IAM credentials using managed policies, detailing GitHub secret scanning and CloudTrail monitoring strategies. The post From Exposure to Lockdown: How AWS...
The death of blocklisting and resurrection of positive controls
Einem unbefugten Angreifer ist es gelungen, auf in einem IT-System der LMU gespeicherte Stammdaten zu Immatrikulationen zuzugreifen. Derzeit müssen wir davon ausgehen, dass diese Daten auch...
Image: Shutterstock What’s new: Ships enroute the U.S. boarded by US Coast Guard and FBI because they were compromised by cyberattacks. Why it’s important: Large commercial vessels are large!...
As AI opens new paths to company data while making familiar attacks faster and cheaper, SMBs need protection designed around the time and expertise available to operate it
In other news: Hackers claim breach of Russia's election commission; OpenAI was behind the RubyGems May incident; Gyazo and Revolut got hacked.
This short blog post is about abusing a privilege escalation bug that Microsoft recently fixed in Windows, CVE-2026-66804, that I and 14 others reported. This issue is an incomplete fix for...
The drone hauled in off Florida appears to be of the same family as those used by the U.S. military to strike Iran. The post Shahed-136 Clone Found By Florida Fisherman, Eglin AFB Admits It Lost A...
Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported initial access vectors in breach research,...
High time to stop kicking the security can down the road, investor tells The Reg
Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal...
SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution...
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4...
Google's Gemini model has become the latest artificial intelligence (AI) system to access the internet and break into other companies during a cybersecurity evaluation. The development was first...
An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on September 18. The French security company had...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited Vulnerabilities (KEV) catalog, citing...
AI labs are toying with an industry-wide pact to slow development. Meanwhile, widely available AI chatbots are already helping uncover a tidal wave of security flaws.
As dozens of cities end contracts for its controversial license plate readers, Flock is rolling out a voluntary severance program, WIRED has learned.
A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the highest level of access on a machine. Kernel maintainers have fixed...
WordPress today released patches to fix a new set of vulnerabilities in its core software, one of which could allow a crafted web link, opened by a logged-in administrator, to install a theme from...
Uzbek financier Kakhramonjon Olimov, who in the summer of 2025 claimed that he had been kidnapped and tortured in France, is now himself being formally accused…
Short essay about squid egg sacs. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan) has been attributed to a fresh set of cyber attacks targeting government and defense entities in...
Israel's Oct. 27 Knesset election will feature 38 electoral lists to choose from set against the background of an ongoing war with Iran in a nation on the brink of civil strife. Most of all,...