Ido Geffen on why Novee owns the full AI pentesting stack
Novee's Geffen breaks down what it means to own the full AI pentesting stack.
general
20 articles
Ramin Farassat on how Menlo Security is securing AI agents from prompt injection
Farassat discusses how security teams can put controls on the agent attack surface without blocking agentic AI outright.
OpenAI rolls out a major ChatGPT upgrade, even if you don’t pay for it
OpenAI is rolling out a more reliable version of ChatGPT GPT-5.6 Sol for Plus and Pro users, while Free users are getting unlimited text chats with GPT-5.
ClickFix attack pushes macOS infostealer for crypto theft attacks
A Go-based malware delivered in ClickFix attacks targeting macOS users is stealing cryptocurrency assets, browser-stored passwords, Apple Keychain data, and ...
North Korea linked to new NullReceiver C2 technique
The Hacker News reports that North Korean threat actors have developed a new command-and-control (C2) technique called NullReceiver, an evolution of the Ethe...
OVSwrap vulnerability allows local privilege escalation on Linux
As reported by Security Affairs, a 13-year-old Linux kernel flaw named OVSwrap was disclosed, enabling local users to gain root privileges on many default-co...
When AI Commits Felonies - PSW #938
Mimecast's Leslie Nielsen on why human risk doesn't stop at people
Mimecast's Nielsen argues that treating agentic AI as a new security category is the wrong instinct.
Capitol Hill wants to know if executive branch, foreign allies coordinated enough to combat scams
A Senate Foreign Relations Committee hearing explored how 13 federal agencies and myriad foreign governments are wrestling with the problem. The post Capitol...
Hedge fund cyberattacks tied to BlackFile-linked UNC6671 extortion group
A recent wave of cyberattacks targeting hedge funds, private-equity firms, and other financial organizations has been linked to UNC6671, an extortion group r...
Optiv's John Hurley on simplifying cybersecurity
John Hurley discusses Optiv's ability to advise, deploy and operate complete cybersecurity programs.
Paperclip authorization bug exploited, leads to control plane takeover
Critical Paperclip flaws let attackers seize AI agent platforms, escalate privileges, and execute code.
Despite federal warnings, thousands of U.S. industrial controllers used in water systems remain exposed online
A scan of internet-connected industrial equipment found 4,400 exposed PLCs, including 22 in cities recently targeted by water system attacks. The post Despit...
Google's John Hultquist on outpacing the adversary with AI threat defense
John Hultquist discusses Google’s approach to combating today’s threats.
Apiiro's Idan Plotnik on AI writing code that sharpens attacks
Apiiro's Idan Plotnik makes the case for a prevention-first model.
Swiss government SharePoint breach compromised 200 accounts
Switzerland's federal IT office says hackers exploited vulnerabilities to breach its Microsoft SharePoint servers and compromised approximately 200 accounts. [.
Ransom Cartel creator sentenced to 16 years in prison
Maksim Silnikau participated in cybercrime since at least 2005. He ran Ransom Cartel from 2021 until his arrest in 2023.
New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes
Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from ...
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation an...
Photos: Black Hat USA 2026, part two
Round two from Black Hat USA 2026. This set covers the parts of the show floor that did not make the first gallery.