SecurityAI Speed, Human-Speed Guardrails
A SailPoint report finds most organizations still run identity security at human speed even as they deploy AI agents that operate far faster.
> Search
30 results for “rat”
Security
AI & MLAI Security Starts With Outcomes, Not Tools
A practitioner argues that AI-native security programs should begin by identifying critical business outcomes and the constraints that prevent consistent delivery.
SecurityLet's Encrypt to shorten cert lifetimes in 2027
Let's Encrypt will cut certificate lifetimes from 90 to 64 days starting February 10, 2027, pushing administrators toward automated renewal.
Cyber CrimeUAC-0099 Turns MATCHBOIL Into Long-Term Tool
ESET tracked MATCHBOIL versions from April 2024 to April 2026, linking the downloader to Russia-aligned UAC-0099 operating in Ukraine.
Cyber CrimeMALFEX npm Campaign Hidden in Eight Packages
CloudSEK and Checkmarx say a lone actor shipped 12 npm packages since 2023, eight flagged malicious and downloaded 40,767 times.
Cyber CrimeArizona Courts Breach Hits 1.3 Million
A phishing email led to the theft of personal data for 1.3 million people from Arizona's court system, officials say.
AI & MLMelius bets on ad creative after a full reset
Ex-Ramp engineers raise $25M for Melius, an AI platform for generating ad campaigns, after scrapping their first product entirely.
Cyber CrimeBackdoors Hide Behind Email Security Brands
Rapid7 says Linux implants in South Korea and Taiwan impersonate SpamSniper and ShareTech to slip past defenders.
SecurityAtlassian's unpatched datacenter flaw
Atlassian warns datacenter users to patch a 9.3-rated arbitrary file access flaw or pull instances off the internet.
SecurityExchange Flaw Opens Mailboxes to Insiders
Microsoft pushed out-of-band fixes for CVE-2026-96940, a high-severity Exchange Server authorization flaw rated 8.8.
AI & MLOpenAI to test visual ads inside ChatGPT image generation in the U.S.
OpenAI is expanding advertising in ChatGPT with a visual format that will appear while users generate images, starting later this month in the U.S.
SecurityOne CISO or two? The role's scope problem
CISOs are juggling technical work and business strategy, and some question whether one title can hold both.
SecurityNetScaler Zero-Day Poses Patching Puzzle
Citrix rushed out emergency updates for a SAML authentication flaw already exploited in attacks, but administrators may need to patch twice.
AI & MLTrump Taps Clayton to Lead AI Task Force
President Trump names intelligence director Jay Clayton to head a new federal AI task force, following a voluntary self-policing accord with tech firms.
AI & MLAnthropic Opens Voice Data Training Tap
Claude users can now opt in to share voice recordings for AI model training, with a separate toggle that keeps text chats private.
Tech NewsMicrosoft's Windows 11 repair effort: six months on
Six months into Microsoft's push to fix Windows 11, TechRadar's report card weighs five wins against three unresolved complaints.
Tech NewsAmazon Drops Data Center NDAs
AWS CEO Matt Garman says the company no longer uses NDAs with government agencies, as more than 100 data center moratoriums are weighed across the U.S.
SecurityMI5: MSS Front Funded 100+ Academics
The alert urges U.K. universities to review CGTRI ties, warning that continuing collaboration could lead to prosecution.
AI & MLSean Parker returns to music, AI rules in tow
Sean Parker is rebuilding Stability AI around music, two years after helping rescue it, reports say.
Cyber CrimeTeen ran KillSec ransomware, cops say
A 16-year-old led a ransomware crew that claimed about 1,000 attacks, according to European police.
SecurityEngland's schools recover faster from cyberattacks
Ofqual survey finds secondary schools reporting fewer incidents and quicker recovery, but training and responsibility gaps persist.
SecurityICO gets new board and a Manchester home
The UK data protection watchdog becomes a corporate body after a leadership scandal and a move from Wilmslow to Manchester.
Cyber CrimeNetScaler Flaw Weaponized for Deep Access
LevelBlue says attackers exploited a critical NetScaler bug to plant web shells, create superuser accounts, and exfiltrate configuration data.
Cyber CrimeZimbra Bug Exploited for Mailbox Theft
Microsoft says attackers chained a patched Zimbra command-injection flaw into web shells, credential theft and cloud exfiltration.
AI & MLAI's Double-Edged Sword in the SOC
Swimlane study finds AI boosts analyst capacity, but a quarter say it limits skill development and nearly half expect a steeper path into the profession.
Cyber CrimeFake ChatGPT GPT Spreads RAT Malware
Huntress found attackers using custom GPTs and Google Sites to deliver a ClickFix RAT called @input, impacting dozens of users.
SecurityCheck Point Zero-Day Hit Management Servers
Attackers exploited a management server flaw in July while a separate VPN bug now draws ongoing attempts against small-business firewalls.
Cyber CrimeFake Twilio npm Probe Hid Credential Theft
Researchers say a package posing as an authorized Twilio bug-bounty probe went through 11 versions before trying to exfiltrate API credentials.
AI & MLAI malware cuts humans out of C2 loop
Cisco Talos says it has identified CLOSEDQUORUM, a proof-of-concept implant that uses an LLM panel to drive an attack without a live operator.
Cyber CrimeStolen Passwords Expose 1,787 Water Providers
SpyCloud research finds infostealer malware has harvested credentials tied to 1,787 U.S. water and wastewater organizations, some reaching operational networks.