13 in-demand IT security certifications for higher pay
With change a constant, cybersecurity professionals looking to improve their careers can benefit from the latest insights into em...
Technology
222 articles in this category
16-year-old KVM flaw allows attackers to escape VMs and take over Linux servers
A critical vulnerability in the Kernel-based Virtual Machine (KVM) module of the Linux kernel allows attackers with root access...
Watch out for fake support calls in Microsoft Teams
Palo Alto Networks’ security division, Unit 42, is warning of yet another campaign targeting Microsoft Teams users. The new...
Why The Gentlemen ransomware is a test of identity and recovery controls
The Gentlemen ransomware underscores a challenge many CISOs face: stopping attackers after they gain an initial foothold. Resea...
The modern CISO is becoming the next CFO
At some point, every security leader gets asked a version of the same question: Are we good? It tends to arrive when something is...
Insignary Closes SBOM Accuracy Gap With Binary-Level Clarity for Regulatory Risk
Most software composition analysis tools read what developers declare. Insignary Clarity’s patented binary-first platform analy...
Zscaler finds autonomous agents succumb to IPI traps
In a test of major LLMs, Zscaler found that some autonomous AI agents fell victim to frauds, reinforcing how easily some high-e...
AI agents fall for indirect prompt injection traps
Some autonomous AI agents fell victim to frauds, reinforcing how easily some high-end enterprise agents can be conned by scheme...
The agentic blind spots in your zero trust program
Stephen Wilson, field chief technology officer for HashiCorp, an IBM company, likens AI agents to “really smart kindergartners....
Identity: The operational control plane for agentic AI
Existing security controls weren’t designed for AI agents. Static credentials and standing privileges aren’t sufficient for...
Operationalizing Agentic AI: from assisted to autonomous
Ever since ChatGPT made its public debut nearly four years ago, governance and security have largely lagged behind AI adoption....
This AI agent autonomously hacked a network, adapted on the fly, and demanded a ransom
A fully autonomous AI agent conducted an end-to-end cyber intrusion and extortion campaign after exploiting a vulnerable Langfl...
Single points of failure fail. The SaaS layer is not an exception
Higher education has consolidated its entire academic operation into a handful of massive SaaS platforms. The LMS manages instr...
AI isn’t closing the skills gap — it’s exposing the validation gap
If you wanted to become a basketball star, how would you get started? You wouldn’t read a book on basketball and take an online...
7 cyber risk assessment gotchas to avoid
A cyber risk assessment helps security teams identify, estimate, and prioritize potential threats and vulnerabilities to key en...
Microsoft 365 users fall victim to one-in-a-million password spray attack
Microsoft users have been hit by a massive, automated password spray attack. Among those targeted by the attack were clients...
Adobe premieres a second Patch Tuesday each month to deliver fixes faster
Adobe will now issue security patches for its products twice as often to deal with the increasing pace of software vulnerabilit...
New CitrixBleed-like NetScaler flaw sees exploit attempts in the wild
Citrix NetScaler appliances have been a constant target for attackers in recent years, most recently through an information leak...
Argo CD flaw shows why GitOps infrastructure should be treated as tier zero
A newly disclosed vulnerability in Argo CD is drawing attention to the security risks of GitOps platforms, with researchers war...
Sandbox bypass flaws in Cursor IDE highlight prompt injection as an RCE vector
Researchers have discovered two vulnerabilities in the widely used Cursor AI-enabled integrated development environment (IDE) tha...