Fake Cloudflare CAPTCHA tricks victims into opening a tunnel for attackers
Attackers are using fake CAPTCHA prompts to trick victims into running malicious PowerShell commands as part of a multi-stage intrusion campaign that can est...
enterprise
20 articles
China-linked hackers turn Cisco routers into covert attack infrastructure
A China-linked cyber espionage group has expanded beyond VMware environments to target network and authentication infrastructure that enterprises rely on to ...
Microsoft nudges enterprise security closer to its passwordless future. But ‘123456’ will survive.
Today marks the beginning of the end of an era for enterprise Microsoft authentication. As of Sept.
Windows bug incorrectly tells users that Microsoft Defender Antivirus is turned off
Microsoft on Friday reported that a glitch is causing Windows to tell users that Microsoft Defender Antivirus is turned off when it is in fact fully function...
OpenAI-led coalition warns AI will compress cyberattack timelines, expose enterprise weaknesses
A coalition led by OpenAI is warning that AI will sharply accelerate the speed and scale of cyberattacks, leaving enterprises with a narrowing window to fix ...
Trusted Chrome, Edge extensions weaponized in supply chain campaign
Attackers have turned previously legitimate browser extensions into malware after acquiring them from legitimate publishers, potentially allowing malicious u...
Is your cloud security strategy ready for AI’s looming threat?
Cloud architectures designed to withstand human attackers are facing a new threat: AI agents that rewrite the rules on the pace and scope of attacks. The rec...
ServiceNow patches three maximum severity flaws that could put enterprise data at risk
Code injection and SQL injection attacks have been around for decades, and they are still tried-and-true ways for attackers to compromise systems. ServiceNow...
GPUThor hardware attack can root Nvidia GPU systems
Hardware security researchers from University of Toronto have developed a new memory bit flipping technique that significantly improves on previously known a...
The first 24 hours of an AI agent security incident
Most of what I read on AI agent security follows the same shape: a taxonomy of risks, a list of governance principles and a call to “adopt responsible AI pra...
Beyond compliance: Designing systems that earn customer trust
Over the years, I have learned that customer trust is not built by compliance alone. It comes from how systems actually handle data every day.
CTEM can give your security team a contextual edge
Traditional vulnerability management is accelerating toward a reset, with many security organizations considering continuous threat exposure management (CTEM...
AI can be made to read an email much differently than you do
Security researchers are claiming it is possible for users to see one email in their inbox while their AI assistant reads another. Forcepoint X-Labs has demo...
Critical infrastructure’s long, undefended tail exposed by UK energy attack
A cyberattack that forced a small British electricity generator offline for four days caused no power outage, threatened no part of the national grid, and ma...
NemoClaw’s AI can be poisoned through a browser tab
A vulnerability affecting Nvidia’s NemoClaw could let an attacker gain control of the local Ollama model server through a single malicious website visit on t...
Microsoft warns patch window is collapsing, urges shift to network-level containment
Microsoft is warning that the window for patching vulnerabilities is rapidly shrinking, as attackers move from disclosure to exploitation faster than enterpr...
Who is accountable when your AI agent goes rogue?
AI agents can go to great lengths to complete the tasks their operators assign, and as a series of recent incidents showed, this can include exploiting third...
Nucleus wants to get ahead of scanners on new vulnerabilities
There usually is a crucial time lapse from when a vulnerability is newly disclosed to when security scanners are finally updated to scan for it. Nucleus Secu...
New attack lets hackers plant hidden instructions in AI memory with a single prompt
A newly demonstrated attack technique allows hackers to plant hidden instructions inside an AI agent’s memory with a single prompt, enabling them to influenc...
AI helps Chinese-speaking hackers speed up attacks on exposed servers
A Chinese-speaking cybercrime group is using AI-driven tools to help compromise internet-facing Windows and Linux web servers, according to Cisco Talos, Cisc...