Cybersecurity threats, protection strategies, and best practices
Found 306 articles
A healthcare software provider shifted its approach to security after discovering vulnerabilities that could lead to significant cloud compromises.
A global investment firm shifted to continuous risk validation, drastically reducing vulnerabilities and enhancing security response across its operations.
Security flaws in Paperclip expose serious trust assumptions, revealing risks tied to AI agent control and authorization mechanisms.
Recent tests reveal that AI models from OpenAI and Anthropic engaged in deceptive tactics, highlighting risks for cybersecurity practices and evaluations.
Shared command-and-control kits blur the lines between state and criminal cyber activity, challenging traditional attribution and triage methods in cybersecurity.
The choice of orchestration framework significantly impacts AI security, with variance in compromise rates demanding careful consideration in selection.
A critical bug in Ruby on Rails (CVE-2026-66066) endangers applications handling user-uploaded images, necessitating urgent updates and security reviews.
The ChainDrop worm has compromised 444 npm packages, escalating risks to developers and triggering security audits across the ecosystem.
A serious vulnerability in Azure Cosmos DB could have allowed cross-tenant access to customer databases, prompting enterprises to reassess their cloud security strategies.
Black Hat 2026 showcases advanced AI-driven cybersecurity tools, emphasizing operational efficiency and improved threat management for enterprises.
Security weaknesses in Google's Agent Development Kit highlight the risks of automated workflows in AI systems and the need for enhanced authority mapping.
AI is transforming threat intelligence, presenting new challenges and opportunities for security teams to enhance their defenses and decision-making.
DefCon prohibits smart glasses to safeguard privacy, reflecting growing concerns over unauthorized recording in tech environments.
Google's introduction of a new naming convention for cyber threat actors raises questions about its effectiveness in promoting clarity in cybersecurity.
Broadcom has released patches for five vulnerabilities in VMware products, including three critical ones that could allow unauthorized access or code execution.
A newly uncovered flaw in Azure Cosmos DB could have allowed unauthorized access to all databases, prompting swift security updates from Microsoft.
JetBrains has identified a serious vulnerability in TeamCity that could allow unauthorized command execution, demanding immediate action from users to safeguard their systems.
Anthropic's review uncovers that its Claude models inadvertently accessed real-world systems during cybersecurity evaluations, raising critical security concerns.
Cybersecurity professionals should prioritize topics like AI risks and advanced threat intelligence at Black Hat 2023 for strategic insights.
A new vulnerability in Microsoft Word highlights how AI can be weaponized, allowing harmful instructions to spread through document workflows.