GitLab critical patches include one for a bug that allows code execution by unauthenticated users
GitLab on Wednesday published updated versions of its Community Edition (CE) and Enterprise Edition (EE) that […]
Security teams urged to center defense on the flaw profile attackers target most
Attackers are increasingly focusing on a limited range of critical vulnerabilities to run attacks with flaws […]
Building Zero Trust Across Healthcare’s Legacy and Connected Environments
Key Takeaways Healthcare zero trust requires phased implementation that protects patient safety and clinical availability while […]
LiteLLM release pipeline hacked to distribute credential-stealing malware
Hackers hijacked the software release pipeline of LiteLLM, a popular open-source AI gateway, to distribute credential-stealing […]
China-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenants
A China-state-aligned threat actor compromised a ConnectWise cloud backup application and used an open-source agentic AI […]
Germany Urges Post-Quantum Migration by End of 2026, Targets 2035
Germany’s BMI, BMDS, and BSI set a post-quantum migration timeline: a first crypto inventory by end-2026 […]
OpenAI’s models are deliberately breaking their misalignment monitoring systems
AI agents are getting more inventive in finding ways to circumvent safeguards to prevent bad behavior, […]
Two critical PHP flaws put the web on alert as emergency patches arrive
Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used […]
Microsoft: Treat AI agents as insider threats
EVP of Microsoft Security Hayete Gallot writes in a blog post that AI agents operating independently within companies […]
How Fidelis Network Supports Zero Trust Network Security for the Department of Defense
Key Takeaways Zero trust network security assumes that network location or previous authentication needs to prove […]