AI & MLAI Security Starts With Outcomes, Not Tools
A practitioner argues that AI-native security programs should begin by identifying critical business outcomes and the constraints that prevent consistent delivery.
> Search
30 results for “critical”
AI & ML
Cyber CrimeFBI Seizes Domains Tied to Chinese Hacking Tools
The FBI has seized seven domains linked to Chinese state-sponsored hackers, disrupting two key platforms used in attacks on critical infrastructure.
SecurityFortra BoKS Patches Fix Critical Auth Bypass
Fortra fixed eight bugs in BoKS, including a 9.9-severity auth bypass and a 9.1 command injection, but reported no known exploitation.
SecurityGitLab's 9.9 Gateway Flaw: Self-Hosters First
GitLab patched a critical AI Gateway flaw scoring 9.9, but the fix only reaches organizations running their own gateway.
Cyber CrimeFortinet Zero-Day Hits FortiMail Gateways
Fortinet reports active exploitation of a critical FortiMail flaw, with patches still pending and CISA ordering federal fixes by October 4th.
SecurityRUSI: EU Vendor Rules Face Definition Gap
RUSI warns the EU lacks a clear high-risk vendor definition, leaving members exposed to Chinese equipment risks.
SecurityOsavul Raises €8.5M for Hybrid Threat AI
Osavul's Series A round led by 33N Ventures will expand its AI platform that spots hostile intent across cyber, physical, and information domains.
SecurityCisco WAN Manager Flaw Opens Admin Door
A critical authentication bypass in Cisco Catalyst SD-WAN Manager let attackers reach an admin API, and the fix requires an upgrade.
Cyber CrimeNetScaler Flaw Weaponized for Deep Access
LevelBlue says attackers exploited a critical NetScaler bug to plant web shells, create superuser accounts, and exfiltrate configuration data.
SecurityWatchGuard Patches 15 Fireware OS Flaws
WatchGuard fixed a critical Fireware OS code injection flaw and 13 high-severity bugs, plus three Access Point vulnerabilities disclosed a day earlier.
SecurityChrome 154 Fixes 108 Flaws, 11 Critical
Google's latest stable release patches a wide swath of memory-safety bugs, but most bug bounty payouts remain undecided.
SecurityF5 zero-day hits BIG-IP APM deployments
F5 patched a critical BIG-IP APM zero-day exploited in remote code execution attacks, as CISA ordered federal agencies to secure networks by Friday.
SecurityWordPress 7.1.2 Patches Critical LFI-to-RCE Flaw
WordPress fixed a critical flaw in versions 4.7.0 through 7.1.1 that can lead to code execution on servers lacking a page-prefixed theme folder and register_argc_argv off.
Cyber CrimeStolen Passwords Expose 1,787 Water Providers
SpyCloud research finds infostealer malware has harvested credentials tied to 1,787 U.S. water and wastewater organizations, some reaching operational networks.
SecurityOne Week, Nine Flaws, No Easy Fix
SecurityWeek's roundup covers a ransomware sentencing, a zero-click AI plugin flaw, and a critical SAP bug under active scrutiny.
SecurityWhat Microsoft's AI Patch Wave Means
Microsoft patched 18 vulnerabilities across Azure and Copilot products, all rated critical, with fixes applied server-side so customers need not act.
SecurityCheck Point's Fifth Critical Flaw Since July
A new 9.8-severity stack overflow lets unauthenticated attackers hit Security Management Servers as root, and it's not the first this summer.
Tech NewsMazama's 10GW Geothermal Bet on Oregon
Khosla-backed Mazama Energy raised a $135M Series B to drill horizontal wells into rock hot enough to run on supercritical fluid.
SecurityCISA Ties Decoy Systems to Zero Trust
New CISA guidance details how decoys, lures, and honeypots can expose adversaries already operating inside critical infrastructure networks.
Cyber CrimeMeteor Network Hit by Cyberattack
The International Meteor Organization says a cyberattack dealt a critical blow to its aging infrastructure, forcing weeks of partial downtime.
SecurityOracle's Monthly Patch Push Targets Fusion Middleware
Oracle's September update delivers 673 patches across 17 product families, with Fusion Middleware carrying five maximum-severity flaws.
SecurityScreenConnect Flaw Under Attack, Patch Urged
CISA orders federal agencies to fix a critical ConnectWise ScreenConnect flaw exploited in the wild, with over 1,000 instances still exposed.
SecurityWooCommerce Plugin Flaw Fuels Web Shell Attacks
Attackers are exploiting a critical WooCommerce Wholesale Lead Capture vulnerability to upload PHP web shells and achieve remote code execution.
SecurityDutch NCSC warns Check Point VPN flaws
Dutch NCSC warns two critical Check Point VPN flaws could be exploited soon, after fixes shipped on September 9.
SecurityGitLab's Patch Race Against Active Exploits
GitLab patches a maximum-severity path traversal flaw and a critical EE deserialization bug as researchers report in-the-wild probing within hours.
SecurityAndroid's Patch Flood Returns After Quiet Summer
Google's September 2026 Android updates fix 180 vulnerabilities, including 26 critical flaws, after two consecutive bulletins with no security fixes.
SecurityFortinet Critical Patches Target JWT Bypass and Browser Proxy
Fortinet patches two critical flaws: one bypassing FortiMonitorOnSight auth via JWT, another allowing browser traffic proxy.
SecurityIvanti's Patch Cascade: Critical RCE Flaws Resolved
Ivanti addresses critical and high-severity vulnerabilities across Neurons for ITSM, Sentry, and EPMM, urging immediate updates.
SecurityN-able's Fourth N-central Hotfix Still Leaves Exploitation Question Open
N-able shipped a fourth N-central hotfix for a critical RCE flaw, but its own statements conflict on whether it's been exploited.
SecurityMikroTik routers under active attack via new SSH flaws
CERT Poland warns of active exploitation of two critical MikroTik RouterOS vulnerabilities, enabling full router hijacking.