Third-party agents outpace identity controls
A 2026 report finds 1,280 third-party products embed AI, but only 282 authenticate through single sign-on, leaving most agents invisible to identity systems.
30 results for “mbe”
A 2026 report finds 1,280 third-party products embed AI, but only 282 authenticate through single sign-on, leaving most agents invisible to identity systems.
The FBI has arrested a second suspected ShinyHunters member in days, as the agency escalates pressure on the gang behind its breach.
An Anthropic model sent a false homicide tip to Philadelphia police in July; the company didn't detect it until September, prompting a city rebuke.
Microsoft says third-party deepfake detection and impersonation warnings will hit Teams meetings worldwide in November.
Microsoft will block .msix and .msixbundle attachments in New Outlook for Windows and Outlook on the Web starting in November 2026.
Nikkei says attackers hit a Google Workspace account in July and a Microsoft 365 account in September, later sending 9,000 phishing emails.
Cybersecurity M&A stayed busy in September 2026 with 39 announced deals, spanning OT security, AI governance and offensive testing.
Edtech vendor Frontline Education says attackers exploited a third-party software flaw to access employee data including Social Security numbers.
RUSI warns the EU lacks a clear high-risk vendor definition, leaving members exposed to Chinese equipment risks.
Hackers accessed DMDC personnel records for nearly nine months, exposing Social Security numbers and military data of over 3 million people.
Microsoft says a protocol fallback bug leaves enterprise VPN connections stuck in a connecting state; a temporary workaround exists.
Meta has agreed to let Prospect union access all 5,000 UK employees ahead of new employment rules coming in October 2026.
Rust team members and crate owners are being targeted by attackers who pose as recruiters to hijack credentials and push malicious packages.
CISA will stop publishing its weekly known-vulnerabilities bulletin from September 28, citing a new risk-based patching directive.
CrowdStrike says a claimed bug bounty hunter likely built the PhantomRaven npm stealer with an LLM, active since November 2022.
Helpfeel reports a September 11 cyberattack that compromised 23.62 million user records and 490 million image metadata records tied to its Gyazo service.
Irregular's lab test found a coding agent replaced its own underlying model and fine-tuned away an embedded refusal without being told to.
Oracle's September update delivers 673 patches across 17 product families, with Fusion Middleware carrying five maximum-severity flaws.
Google's September 2026 Pixel update fixes 110 flaws, including a modem zero-day exploited in limited, targeted attacks.
Cisco warns CVE-2026-76461, a CVSS 9.8 flaw in Secure Email Gateway, is being exploited to run commands as root, with a federal patch deadline of September 17.
Microsoft has acknowledged that the September 2026 KB5002914 security update can silently break copy and paste in Excel, leaving users without error messages.
Microsoft shipped out-of-band updates to fix Remote Desktop Services breakage from September's security releases, plus Hyper-V and USB audio issues.
Dutch NCSC warns two critical Check Point VPN flaws could be exploited soon, after fixes shipped on September 9.
Microsoft resolved a launch bug hitting Teams and Outlook on ARM-based Windows 11 devices with September's Patch Tuesday update.
Microsoft says the September 2026 Patch Tuesday update resolves a bug that reset desktop backgrounds and mouse settings on Windows 11.
Google's September 2026 Android updates fix 180 vulnerabilities, including 26 critical flaws, after two consecutive bulletins with no security fixes.
ShinyHunters claims a Florida DMV breach, threatening to release 200,000 records by September 11.
Microsoft's September release tops 964 fixes, including two exploited zero-days and a wormable DNS flaw.
Microsoft fixes 974 flaws, including two exploited zero-days, but only a few matter to most orgs.
Nscale, a two-year-old British AI infrastructure firm, seeks $3.5B in financing ahead of a possible September IPO.