The password nobody owns: Taking machines to zero standing privilege (ZSP)
Ask your infrastructure lead who owns the service account behind the overnight finance batch and notice […]
9 rising malware trends every security pro should know
Malware is evolving rapidly, driven by advances in AI and changes in computing infrastructures. Security professionals […]
ShinyHunters Exploits Oracle PeopleSoft to Steal Sensitive Data
Imagine finding out that someone has been accessing your organization’s systems, stealing data, and moving between […]
EDR Alert Checklist: The Information Security Teams Need for Faster Investigation and Response
Key Takeaways A structured EDR alert checklist helps analysts review critical evidence consistently and reduce investigation […]
Hallucinated domain in official OpenAI skill underscores AI supply chain risks
Researchers have discovered a first-of-its-kind supply-chain vulnerability in OpenAI’s official skills repository. OpenAI maintains an official […]
Xbow spent $40K on AI and cracked Google Chrome wide open
A chain of vulnerabilities in Google’s Chrome browser could have enabled researchers to take control of […]
Bank of America spent millions on anti-money-laundering tech, but not enough to avoid a $1.2B fine
Bank of America has had to spend big on IT in response to an AI security […]
Linux kernel gets a fix for a flaw that enabled attackers to escape VMs
The Linux kernel’s networking stack was found vulnerable to a guest-to-host escape attack, in which an […]
BeyondTrust zero-day tied to Chinese spies puts Remote Support users on alert
Organizations running self-hosted BeyondTrust Remote Support should treat exposed appliances as potentially compromised after a suspected […]
Cyberattack AIs must be trained only on air-gapped systems, hundreds of AI researchers say
Current security procedures for training AI models are inadequate, hundreds of AI researchers have warned governments […]