Cyber CrimeNewNorthflank breach exposes AI key theft risk
Cloud platform Northflank told customers to rotate all secrets after a breach led to unauthorized use of AI API keys stored on its systems.
> Search
30 results for “security”
Cyber CrimeNew
Cyber CrimeNewn0n's AI habit cost $7K, leaked its playbook
A newcomer extortion crew used AI to script attacks on 23 organizations, then left its own server wide open for researchers to read.
SecurityNewA hands-on way to gauge AI ransomware risk
OWASP volunteers released RAID-AI, a free manual self-assessment that maps AI controls to NIST and CISA frameworks.
AI & MLThird-party agents outpace identity controls
A 2026 report finds 1,280 third-party products embed AI, but only 282 authenticate through single sign-on, leaving most agents invisible to identity systems.
Cyber CrimeGhostAction Returns, Hits 340+ Maintainer Repos
A credential-theft campaign has compromised two open-source maintainer accounts to push malicious GitHub Actions workflows into more than 340 repositories.
SecurityAWS AgentCore Flaw Let One Prompt Hijack All Agents
Researchers say a single chat prompt could extract cloud credentials and let an attacker take over every AgentCore agent in an AWS account and region.
SecurityAI Speed, Human-Speed Guardrails
A SailPoint report finds most organizations still run identity security at human speed even as they deploy AI agents that operate far faster.
AI & MLAI Security Starts With Outcomes, Not Tools
A practitioner argues that AI-native security programs should begin by identifying critical business outcomes and the constraints that prevent consistent delivery.
AI & MLAI Training Gap Tests Governance
ISACA research shows 32% of digital trust professionals say their organizations fail to address AI risks, as adoption climbs.
Cyber CrimeJapan's Web Data Leaks Surge as APIs Abused
JPCERT/CC reports a sharp rise in personal data leaks at Japanese organizations, tied to mobile API abuse and a Metabase flaw.
Cyber CrimeRansomware Hits Japanese Cloud Serving 495 Orgs
IDC Frontier says a ransomware attack on its IDCF Cloud disrupted East Japan Region 1 and locked 495 companies and local governments out of management consoles.
SecurityLet's Encrypt to shorten cert lifetimes in 2027
Let's Encrypt will cut certificate lifetimes from 90 to 64 days starting February 10, 2027, pushing administrators toward automated renewal.
SecurityEdge PQC Progress Masks Deeper Gaps
Post-quantum key exchange is spreading across top websites, but experts warn edge adoption does not equal enterprise readiness.
SecurityTeams Adds Deepfake Detection to Calls
Microsoft says third-party deepfake detection and impersonation warnings will hit Teams meetings worldwide in November.
Cyber CrimeASOS breach traced to impersonation tactic
ASOS says an employee's stolen credentials, obtained through social engineering, exposed names and contact details held on third-party platforms.
SecurityRein Lands $25M for AI Agent Security
Tel Aviv and New York startup Rein Security raises $25 million Series A to guard AI agents with runtime controls and governance.
CloudAWS Agent Flaws Expose Control Gap
Repeated AWS agent security fixes that later resurfaced show the tension between agent autonomy and isolation, researchers say.
AI & MLAWS Sandbox Targets Rogue AI Agents
AWS's new Strands Box uses OS isolation and custom policies to curb AI agent behavior, but security experts warn controls have gaps.
AI & MLAWS sandbox aims to tame rogue AI agents
Amazon's new open-source Strands Box uses OS-level isolation and policy rules to stop autonomous agents from going rogue.
Cyber CrimeStates sue TP-Link over China ties, security claims
Florida, Iowa, Montana, and Nebraska allege TP-Link misled buyers about router security and undisclosed reliance on Chinese suppliers.
SecurityCISO Data: Cyber Risk Moves Into Workflow
Five years of Voice of the CISO research show risk shifting from the perimeter to the flow of daily work, with AI governance and human risk at the center.
SecurityHadrian's Series B Fuels AI Pentesting Push
Hadrian raises $40 million to expand its AI offensive security platform and challenge the slow pace of manual pentesting.
Cyber CrimeBackdoors Hide Behind Email Security Brands
Rapid7 says Linux implants in South Korea and Taiwan impersonate SpamSniper and ShareTech to slip past defenders.
SecurityPwn2Own Ireland Day One Yields 32 Zero-Days
Researchers exploited 32 zero-days at Pwn2Own Ireland 2026, targeting phones, printers, smart home hubs and AI infrastructure for $388,500.
Cyber CrimeFBI Ousts Contractor Over Missed Patch
FBI cyber chief says a third-party contractor failed to apply a security patch, enabling the ShinyHunters breach of employee data.
SecurityOutlook Adds Two More Blocked File Types
Microsoft will block .msix and .msixbundle attachments in New Outlook for Windows and Outlook on the Web starting in November 2026.
SecurityRed Hat Batch-Fixes 400 Open-Source Flaws
Red Hat's Lightwell Clearinghouse exits pilot after remediating over 400 novel vulnerabilities in foundational Java libraries since June.
AI & MLCopilot CLI's Model Lottery Problem
Adversa AI says encrypted 'zombie instructions' on web pages can extract secrets through GitHub Copilot CLI, depending on which model handles the session.
SecuritySeptember M&A: 39 Deals Reshape Security
Cybersecurity M&A stayed busy in September 2026 with 39 announced deals, spanning OT security, AI governance and offensive testing.
SecurityMedical Devices Lag on Quantum-Safe Crypto
Forescout found only 6% of IoMT and 16% of medical OT devices run SSH that can move to post-quantum cryptography.