Microsoft, Nvidia push provenance checks as open-weight AI adoption accelerates
Microsoft and Nvidia are urging enterprises to assess the security of open-weight AI models throughout deployment, […]
ConnectWise backup credentials exposed multiple Microsoft 365 tenants
ConnectWise has disabled key cloud services and is investigating unauthorized access to customers’ Microsoft 365 environments […]
The password nobody owns: Taking machines to zero standing privilege (ZSP)
Ask your infrastructure lead who owns the service account behind the overnight finance batch and notice […]
9 rising malware trends every security pro should know
Malware is evolving rapidly, driven by advances in AI and changes in computing infrastructures. Security professionals […]
ShinyHunters Exploits Oracle PeopleSoft to Steal Sensitive Data
Imagine finding out that someone has been accessing your organization’s systems, stealing data, and moving between […]
EDR Alert Checklist: The Information Security Teams Need for Faster Investigation and Response
Key Takeaways A structured EDR alert checklist helps analysts review critical evidence consistently and reduce investigation […]
Hallucinated domain in official OpenAI skill underscores AI supply chain risks
Researchers have discovered a first-of-its-kind supply-chain vulnerability in OpenAI’s official skills repository. OpenAI maintains an official […]
Xbow spent $40K on AI and cracked Google Chrome wide open
A chain of vulnerabilities in Google’s Chrome browser could have enabled researchers to take control of […]
Bank of America spent millions on anti-money-laundering tech, but not enough to avoid a $1.2B fine
Bank of America has had to spend big on IT in response to an AI security […]
Linux kernel gets a fix for a flaw that enabled attackers to escape VMs
The Linux kernel’s networking stack was found vulnerable to a guest-to-host escape attack, in which an […]