Copilot worm can spread through Microsoft Word docs
An “AI worm” can spread through Microsoft Word documents using Copilot as a vector, a prominent Norwegian AI researcher reporte...
Technology
222 articles in this category
Microsoft confirms an AI worm is propagating through Copilot and other MS apps
A prominent Norwegian AI researcher on Tuesday posted details about an AI worm that is wreaking havoc in various Microsoft appl...
A coordinated attack hit 30+ Minnesota water systems. Who did it, and what does a Rockwell notice add to the picture?
A coordinated cyberattack that targeted more than 30 Minnesota community water systems has alarmed industrial cybersecurity exp...
AI agents gain access to financial workflows amid growing governance gaps
AI agents are now being allowed to create business records, approve transactions, and execute financial workflows. ERP security...
Critical Ruflo flaw lets attackers hijack AI agents through exposed MCP bridge
A critical vulnerability in the open-source AI agent platform Ruflo could allow unauthenticated attackers to take control of en...
Russian hackers turn Exchange flaw into ‘half-click’ mailbox takeover
A Russia-aligned threat group used a “half-click” exploit against Microsoft Exchange’s Outlook Web Access to install a browser-bas...
A Scattered Spider member was indicted. Microsoft’s GDID went to trial.
A recently released criminal complaint against Peter Stokes, an alleged member of the Scattered Spider cybercrime group, reveal...
CISA unveils a six-step blueprint for isolating critical infrastructure during cyberattacks
Most IT operators understand that critical infrastructure should be isolated in crisis situations, but many don’t know how to d...
Mythos takes its first shot at post-quantum cryptography
Anthropic’s Claude Mythos Preview model has helped researchers discover ways to speed up attacks against two widely studied cry...
Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities
Sweet Security, the proactive runtime enforcement company for cloud and AI, today announced its further expansion into AI secur...
OpenAI rogue AI agent’s attack expanded beyond Hugging Face
The autonomous AI agent that escaped during OpenAI testing exploited weaknesses across a customer workload, a third-party cloud...
It’s easier to steal cargo than toothpaste
Our cybersecurity world can get quite interesting and even close to science fiction sometimes. No, it’s not AI this time, but some...
Risk-based patching is the future. AI made it table stakes
CISA’s new Binding Operational Directive (BOD) 26-04 marks one of the most important changes to federal vulnerability managemen...
How MFA gets hacked — and strategies to prevent it
The security benefits of multifactor authentication (MFA) are well-known, yet MFA continues to be poorly, sporadically, and inc...
Ransomware report: VPNs in the crosshairs, AI attacks
Ransomware attacks were up year over year in June for the fourth consecutive month, according to the NCC Group, though attacks...
Fortinet’s new FortiGate platform converges firewall, SASE technologies
Fortinet has expanded its firewall family with new high-speed boxes that, when combined with the vendor’s FortiSASE Outpost sof...
A 13-year-old flaw is exposing tens of thousands of data center management systems
The ‘no man’s land’ beneath the OS on enterprise servers is becoming the malicious actors’ next target. Attackers are gainin...
The CSO’s blind spot: Why platform engineering 2.0 is now a security imperative
Security leaders have spent the last decade building controls around people and code. Shift-left practices caught vulnerabiliti...
Arista patches maximum severity vulnerability that is already being exploited
Arista has patched a VeloCloud Orchestrator (VCO) security hole that has been actively leveraged in the wild, one that the vend...
Infoblox joins crowded EASM market with DNS-centric approach
With AI compressing reconnaissance and exploit development from weeks to hours, security vendors are racing to help enterprises...