Ruby on Rails critical bug puts every image upload under scrutiny
A new critical vulnerability in the Ruby on Rails (“Rails”) web application framework, CVE-2026-66066, could turn a seemingly i...
Technology
222 articles in this category
ChainDrop credential stealing worm infects over 400 npm packages
A self-propagating worm-like attack is hitting the npm registry, having infected 444 packages from more than a dozen publishers so...
Airlock Digital Unveils Agentic AI Control & Governance to Extend Preventative Endpoint Security
Airlock Digital, a leader in preventative endpoint security, today announced Agentic AI Control & Governance at Black Hat U...
Critical Azure Cosmos DB flaw threatened cross-tenant database takeover
A critical vulnerability in Microsoft Azure’s Cosmos DB database service could have enabled attackers to escape the platform’s Gre...
The top new cybersecurity products at Black Hat USA 2026
Black Hat 2026 is shaping up to be another AI-heavy conference, but this year’s announcements suggest the industry is moving be...
The top cybersecurity product announcements from Black Hat 2026
Black Hat 2026 is shaping up to be another AI-heavy conference, but this year’s announcements suggest the industry is moving be...
Google ADK flaws reveal what happens when AI agents trust the wrong message
Security flaws in automated workflows in the GitHub repository for Google’s Agent Development Kit for Python could allow public...
Secure AI adoption starts with API best practices
You don’t need to be a fortune teller to understand where enterprise IT is headed. McKinsey reported in November that 62% of gl...
The Minnesota attackers may hold a better backup of your plant than you do
More than 30 Minnesota community water systems were hit by coordinated cyber activity against their operational technology on J...
Attackers are crafting malicious AI instruction files to turn your agentic workflows into quiet criminal helpers
AI agents are increasingly being deployed across the enterprise, a rapid adoption that has significantly broadened the organizatio...
Zero Networks targets AI agent security gaps with network-level ‘Least Agency’ controls
While AI security today is largely focused on restricting what an agent can do, Zero Networks says it has built a failsafe. The...
Stop depending on heroics and start operationalizing third-party risk
In cybersecurity, third-party risk management normally looks simple on paper: evaluate your vendor, learn the risk, report out...
AI is making cybersecurity fundamentals more important than ever
When OpenAI disclosed that one of its models escaped a test environment and broke into Hugging Face’s systems on its own, headl...
DefCon security conference bans smart glasses with recording capabilities
It’s a sign of the times: Security conference DefCon has added smart glasses to its list of banned audio- or video-recording de...
Google adds to confusion with new names for threat actors
Google is creating a new naming scheme for the bad actors behind cybersecurity threats, hoping that it will help to standardize...
Broadcom patches vulnerabilities all over VMware
Broadcom has addresses five vulnerabilities in its VMware product range, three of which have been accorded a “critical” rating....
Microsoft almost gave away the keys to everyone’s Azure Cosmos DBs
Microsoft has had a narrow escape from total embarrassment: A security company uncovered a critical vulnerability that could have...
JetBrains says a crafted HTTP request could break TeamCity
JetBrains is warning of a critical security vulnerability in its TeamCity DevOps platform that could allow unauthenticated atta...
After OpenAI, Anthropic finds Claude breached three organizations during cyber tests
Less than two weeks after OpenAI disclosed that an experimental AI model breached Hugging Face during a cybersecurity evaluatio...
5 key priorities for your Black Hat agenda — and what to avoid
Two major conferences loom large on the US cybersecurity events calendar: The RSA Conference and Black Hat. RSA was launched in...