Executive Summary In this research we introduce a prompt-crafting technique for bypassing quick LLM-based policy checks — using plain English (no emojis, base64, invisible formatting, etc.) A...
The acting director of the Cybersecurity and Infrastructure Security Agency issued a sober warning Wednesday about the significant and possibly devastating cybersecurity vulnerabilities Americans...
[Control systems] Advantech security advisory (AV26-907)
Independent researchers have identified multiple new websites where AI agents seemingly built by OpenAI took unauthorized actions, such as accessing websites, posting messages, and sharing data to...
Wildberries told several Russian media outlets earlier this week that payments to some sellers were delayed by security measures introduced after a distributed denial-of-service (DDoS) attack...
New Proofpoint Prism Investigator and Human Communications Intelligence capabilities help organizations investigate risk faster and understand intent across human and AI interactions
Multiple vulnerabilities have been discovered in Ivanti products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these...
1.1.1.1 now validates DNSSEC signatures using NIST’s post-quantum ML-DSA-44 algorithm. Here is how we manage 2,420-byte signatures and downgrade risks at scale.
Fortra security advisory (AV26-906)
Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234, the example admin key in LiteLLM's own setup guide. LiteLLM is an open-source AI...
Anthropic on Wednesday disclosed a fourth incident in which its artificial intelligence (AI) model broke into real third-party systems, marking the latest in a growing list of cases that have...
Cyble has rolled out a significant upgrade to Executive Monitoring inside Cyble Vision, bringing unified findings, AI-driven scoring, and expanded alerting together in a single protection suite....
Palo Alto Networks security advisory (AV26-905)
Use of Hard-coded Credentials vulnerability (CVE-2026-17038) has been found in drEryk Gabinet software.
Image: European Space Agency What’s new: A report on the impact and potential impact of solar activity on GPS/GNSS in November 2025. The report also includes a short discussion on the possible...
Delivering unified cloud security and accelerating secure modernization to protect citizen data and critical infrastructure.
Infostealer malware is behind a large share of today's credential compromise — and it usually doesn't start with a breach at all. When a security team hears "data breach," the instinct is to look...
Give an AI agent a mere rumor of an exploit, and it’s enough for them to find it. What’s worse, I found I could use my own agents to find the exploit just by knowing roughly what it was about and...
Learn how root access on a compromised K8s node allows attackers to utilize SPIFFE/SPIRE metadata to spoof and harvest co-located workload identities. The post The Machine With Many Faces:...
MITRE ATT&CK Walkthrough: T1047 (Windows Management Instrumentation)
InquiryIQ, a previously unreported prototype, tested a model from xAI, maker of Grok, to surface associates, social accounts, and other information about people identified through Clearview.
Iranian hackers pushed back after Wednesday’s denial of their claim that they hit AT&T service in major Texas cities on Labor Day, declaring that those rebuffing their claim “don’t even know what...
Learn why Tenable treats agentic LLMs as untrusted insiders, and how we’ve made sure you can control and monitor the AI agents making changes in your production security environmentKey takeawaysAI...
LLM-based code scanners won’t help attackers build a nuclear weapon, but that refusal could work in their favor
In August 2026, healthcare and pharmaceutical company McKesson was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published a substantial corpus of data they...
An AD RMS Service Group account exports the AD RMS Server Licensor Certificate private key. That 1172-byte key decrypts every document the deployment ever protected, offline, and keeps doing so...
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Amberleigh Jack. This week's edition is sponsored by Authentik.You can hear a podcast discussion of this...
If you have a StubHub account, you are open to a major vulnerability of having your StubHub hacked. Learn more about how you are at risk & how Huntress' Security Awareness Training can help.
How do you protect computers from attackers if you’re not familiar with hacking techniques? The historical answer to this question has been antivirus and firewalls. However, the last several years...