The agentic SOC: How to build machine-speed defense for the AI era
Here's how security-focused AI agents can help, not replace, human SOC analysts.
SC Media
20 articles
The Taiwan attack was built with two free downloads from vendors nobody rates
Teams now have to ask which AI agent frameworks are running in their stack? Who built them?
US autonomous systems policy struggles to keep pace with drones
U.S.
Student thwarted real-world supply chain attack by rogue Mythos 5 agent
The agent used social engineering against real people during testing by the UK AI Security Institute.
US Bank investigates LockBit ransomware claims of data breach
US Bank confirmed it is aware of the claims and is investigating, but declined to provide specifics on communication with the extortionists or the ransom amo...
NASA ground control software vulnerability could allow spacecraft access
A browser-based variant of NASA's AMMOS Instrument Toolkit (AIT), specifically versions up to 2.5.
Over 50,000 Stripe API keys exposed, highlighting fraud risks
Over 50,000 Stripe API keys have been exposed across public code repositories, GitHub Actions logs, and misconfigured web servers, demonstrating the immediat...
AI skills in cybersecurity jobs double, but junior hiring lags
The AI Workforce Consortium's report highlights that AI skills are now present in 28.5% of G7 cybersecurity job postings, a substantial increase from 14.
Critical vulnerability in Elementor Pro allows unauthenticated file upload and RCE
The vulnerability arises from a discrepancy between two loops within the File Upload module: one for validation and one for processing.
Report calls for AI sector to be designated critical infrastructure
The report defines the AI sector broadly, encompassing organizations, technologies, and industries involved in the development, training, deployment, and ope...
New attack bypasses AI guardrails by encrypting malicious prompts
The attack, developed by Rony Utevsky, a researcher at Adversa, is dubbed "cryptographic context injection" and exploits a fundamental weakness in how AI mod...
Network of 77 Firefox extensions linked to crypto theft uncovered
Socket researchers identified 40 malicious extensions and 37 others disguised as unrelated utilities, all linked through shared code, infrastructure, and pub...
New Android banking Trojan ToxicPanda 2.0 expands victim targeting
Discovered by Zimperium's zLabs team, ToxicPanda 2.0 leverages the Android Accessibility Service to enable wireless debugging, effectively gaining shell acce...
IT leaders increasingly value gaming skills in hiring and decision-making
Logitech's research reveals that 98.8% of IT decision-makers believe gaming directly impacts their job performance.
Vercel offers $1 million in bounties for sandbox hacks
The two-week program challenges participants to breach an isolated sandbox environment hosted by Vercel.
Security researcher enrolls Linux device in Apple's Find My network
The researcher, known as Zerotistic, devised a method to trick Apple's systems into sending location data, typically reserved for Apple devices, to a Linux m...
Alation confirms cyberattack after reporting system incident
Alation confirmed it identified an isolated incident involving unauthorized activity in one of its systems.
Hackers compromise Rust crate arrayref to inject malware
The attack involved injecting a dependency on a malicious package, proc-macro1, which impersonated the popular proc-macro2 crate.
Rejoice In The Nostalgia - PSW #940
Agentic IAM: How to secure and manage AI agent identities
Explore how Agentic Identity and Access Management (IAM) helps organizations securely manage AI agents as governed non-human identities. Learn how identity, ...