Siemens Desigo CC patch files falsely flagged as malware
The issue affects patch files for Desigo CC versions 7 through 9.
SC Media
20 articles
AI agents are already exploring your network. How do you detect their intent?
AI agents and MCP tools are creating new cybersecurity risks and blind spots.
AI Identity Security: The Hidden Risks of Non-Human Identities & Agents - WC #1
How autonomous defense and remediation stands up to AI cyber threats
AI tools like ADR can help humans and machines work side-by-side to defeat today’s threats.
‘Mythos-level’ Fable model released to public: How Anthropic plans to prevent misuse
Safeguard layers aim to block and reroute cyber-related requests while retaining Mythos-level capabilities.
CISA directs federal agencies on prioritization of cyber vulnerabilities
The new directive, BOD 26-04, mandates that federal agencies focus on vulnerabilities that affect publicly exposed assets, can be fully automated by attacker...
JDY botnet expands, enabling rapid exploitation of disclosed vulnerabilities
Initially flagged as part of the KV-botnet, JDY has evolved into an independent reconnaissance capability following the U.S.
Ransomware group The Gentlemen linked to Russian national
The Gentlemen ransomware group, as analyzed by Check Point Software, operates on a ransomware-as-a-service model, attracting skilled hackers with an unusuall...
ShinyHunters gang targets Oracle PeopleSoft servers in data theft attacks
The ShinyHunters gang is exploiting a combination of old and zero-day vulnerabilities, referred to as a "gadget chain," to target both cloud and on-premises ...
Scammers use short videos on social media to spread Vidar infostealer
This new attack method involves creating seemingly helpful tutorial videos that promise free access to premium applications such as Spotify Premium or Micros...
Zscaler expands zero-trust SASE platform with AI-driven management
The expanded SASE platform features the ZAgent Framework, enabling administrators to manage configurations, troubleshooting, and policies using natural-langu...
NPM v12 to block supply-chain attacks with new security measures
The upcoming npm v12 will introduce stricter security protocols for the "npm install" command, a critical step in downloading and installing project dependen...
ServiceNow says security researchers, not hackers, accessed data
ServiceNow investigates access issue, says no attacker activity found.
Chinese APTs have made identity part of the intrusion path
Don’t merely identify the attacker – understand how they behave.
Ivanti releases patches for critical Sentry vulnerabilities
The vulnerabilities, tracked as CVE-2026-10520 and CVE-2026-10523, affect Ivanti Sentry, formerly MobileIron Sentry, which secures traffic between corporate ...
Mini Shai-Hulud ‘Hades’ variant affects 23 PyPI package versions
The JavaScript stealer payload includes an anti-analysis LLM prompt injection.
Innovation Without Data Security Risk as AI Unlocks Budgets and Identity Challenges - Tony Kelly - BSW #451
AI-driven computer worm demonstrates autonomous network exploitation
The AI worm, tested on an isolated 33-host network, demonstrated a significant ability to adapt and exploit.
Veeam releases security update for critical backup server vulnerability
The vulnerability, tracked as CVE-2026-44963, affects Veeam Backup & Replication (VBR) versions 12.3.
Rubrik enhances data security with AI agents and autonomous recovery
Rubrik introduced Rubrik AI, an agent-first interface for its Security Cloud and Agent Cloud, allowing customers to define business outcomes that the softwar...