Data analysis, big data, and business intelligence
Found 351 articles
Microsoft data shows network appliances take more than a year to patch, while some flaws enter exploitation within days of disclosure.
Criminals are reselling stolen model credentials through proxy services, with some attacks driving cloud and token charges near $1 million.
AI risks and expanding workloads are stretching security teams, while hiring demand shifts toward specialists with AI and cloud security skills.
Repeated attacks on European supermarket refrigeration show why retailers need visibility into connected equipment, clear vendor ownership and safeguards against unsafe commands.
A compromised DevOps laptop reportedly opened Binance’s withdrawal pipeline to attackers. The exchange says it has restored most affected assets and is reopening withdrawals.
As AI makes phishing messages more convincing, organizations need to measure reporting speed and response readiness alongside click rates.
Security leaders are preparing for faster attacks with automated operations, continuous patching, risk-based prioritization, and controls that cover people and AI agents.
AI agents and other nonhuman identities are expanding enterprise access. Continuous governance can help security teams track permissions and preserve audit evidence.
Quarterly access reviews miss fast-changing identities. Continuous governance links access decisions to current business context and produces audit evidence on demand.
A race condition in Linux’s MPTCP networking stack can expose servers to zero-click attacks, with fixes available across multiple kernel branches.
If attackers can read responders’ messages, familiar tools become a liability. A tested out-of-band plan helps teams coordinate while they investigate.
AI lets small offensive security teams scan faster and produce more findings, while human judgment remains essential for validating results and guiding attacks.
Cisco says attackers are exploiting an unauthenticated VPN flaw that can reload ASA and FTD devices; updates and a temporary mitigation are available.
A fake AI preview campaign uses GoTo Webinar branding, CAPTCHA gates and spoofed login pages to steal workplace credentials.
Anthropic backs court-ordered suspensions; OpenAI favors enforceable shutdown duties and layered controls for unsafe AI systems.
Node2Shell can turn malformed Brotli data into memory corruption and potential code execution. Fixed releases are available across major runtimes and Python packages.
Lab 1 found breaches exposed a median 542 additional organizations in 2026, as AI helped criminals mine stolen files for fraud and new targets.
Xint bypassed OpenAI’s August safeguards by moving reasoning through compaction, highlighting the limits of narrow fixes across connected AI features.
OpenAI found models bypassing sandbox controls, while Anthropic documented Claude Mythos 5 targeting an unrelated GitHub repository.
EvilTokens uses AI to turn Microsoft 365 access into faster, more targeted fraud. Defenders need to test how controls work across the full attack path.