AI Agent Gateway: Open-source tool keeps credentials out of agent configs
Tuskira’s AI Agent Gateway is an open-source solution that sits between AI agents and everything they call: the MCP tool servers that connect them to service...
general
20 articles
ASOS Hacked as Attackers Abuse Customer Notification Platform to Threaten Data Leak
ASOS is investigating unauthorized activity involving third-party customer communication platforms after some shoppers received an alarming app notification ...
OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing
The OpenSSH team released version 10.6 on Oct.
GitHub Copilot CLI Flaw Lets Attackers Steal Developer Secrets Using Encrypted Prompt Injection
Security researchers have revealed an attack against GitHub Copilot CLI that can expose developer secrets through an attacker-controlled webpage. This techni...
Anthropic Opens Claude’s Advanced Cyber Capabilities to Verified Red Teams With Reduced Restrictions
On October 6, 2026, Anthropic announced an expanded Cyber Verification Program (CVP) that gives vetted security professionals access to advanced Claude capab...
AI endpoint management: Visibility, compliance, and remediation
Endpoint estates are growing faster than the teams that look after them. Hybrid work, cloud adoption, contractor laptops, a steady stream of new CVEs, and ri...
Even with OT network visibility, critical infrastructure operators struggle with legacy equipment
Large critical infrastructure operators run seven separate security tools on average, and most still cannot see every asset on their operational technology (...
Automation, AI agents or people? Sorting out who handles each security finding
Just over half of the 200 senior security and technology leaders polled for ArmorCode say their organizations will struggle to simplify their software securi...
Check your X.Org server version because a dozen vulnerabilities have been patched
X.Org fixed 12 security flaws in the X server and Xwayland, with the repairs shipping in xorg-server 21.
Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System
The Arizona Supreme Court said the information was copied for people dating back as far as 30 years. The post Personal Information for Over 1 Million People ...
ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach
British online fashion retailer ASOS is investigating unauthorised activity after attackers used its official mobile app to send…
A personnel file is a map: Why the FBI breach matters
The government needs to protect personnel records as strongly as it protects its own secrets.
Karina Portugal Makes the Case for Know Your Agent
Karina Portugal has spent more than ten years working in digital identity, fraud prevention, anti-money laundering and Know…
Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks
The FBI and Secret Service warned Fortinet users that FortiBleed, uncovered this summer, is a continuing threat. The post Alert: FortiBleed remains active ca...
Changing the game: How AI forces organizations to revisit assumptions about recovery and resilience
AI changes recovery plans because it is at once a threat accelerator, a new kind of critical infrastructure and a defensive tool.
Ninja Forms plugin flaw exploited to hack WordPress sites
Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooComme...
Typing, textGrain, NetScaler, Fortinet, Copilot, LibreOffice, Dots, Aaran Leyland - SWN #622
Wiretapping change sparks big privacy fight in the Golden State
An update to a state wiretapping law will end private lawsuits over some internet tracking and surveillance, pitting businesses against privacy groups and un...
Hackers exploit 32 zero-days on first day of Pwn2Own Ireland
On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32 ze...
Critical Atlassian flaw exposes files across eight products
Unauthenticated attackers could steal credentials and gain access to CI/CD systems.