IBM, Red Hat launch Project Lightwell to secure open-source software
IBM and Red Hat launch $5 billion effort to secure open-source software supply chains.
SC Media
20 articles
5 ways to mount a strong defense in the AI era
Here’s how to mitigate the risk from AI-assisted attacks.
Wireless Attacks on AI Data Centers: The Hidden Threat No One Is Watching - WC #1
Man arrested in Netherlands for hacking Ajax football club
The suspect, apprehended in Buren, is believed to have repeatedly accessed Ajax's computer systems without authorization earlier this year.
Cisco study finds major frontier models susceptible to multi-turn prompt injection attacks
Single-turn attack success rates are not a reliable benchmark for model safety, Cisco concludes.
OWASP launches FinBot to help developers secure AI agents
OWASP’s FinBot gives developers hands-on training to secure AI agents.
XM Cyber expands platform to enforce least-privilege access
XM Cyber Inc. announced an expansion of its platform with new capabilities designed to help enterprises enforce least-privilege access across Active Director...
High-severity Starlette vulnerability 'BadHost' could expose sensitive data
The flaw, tracked as CVE-2026-48710, arises from the framework's handling of malformed Host headers.
Xage Security enhances zero-trust platform for AI agents
The updated platform introduces Xage Agent Sentry and Xage Resource Gateway, which aim to secure AI agents and the resources they access at multiple levels, ...
Doppel launches AI email security to disrupt phishing campaigns
Doppel Email Security utilizes autonomous agents and its Doppel 360 Threat Graph to investigate threats within the inbox.
FBI warns law firms of in-person data theft by Silent Ransom Group
SRG actors initiate attacks by posing as IT support staff, contacting victims via phone calls or phishing emails to solicit a remote desktop session.
CISA adds LiteSpeed cPanel plugin bug to exploited vulnerabilities list
CISA warns of exploited LiteSpeed flaw putting shared hosting at risk.
Laying the groundwork: A practical path to identity security for AI agents
As enterprises move toward AI-driven operations, identity modernization becomes essential.
A Founder's Journey: Transitioning from Sales Strategy & Operations to Founder & CEO - Ankita Gupta - FS #15
A new identity class: Why AI agents require runtime control
Because AI agents are neither human nor traditional machines, they must be treated as a third class of identity.
Apple releases quantum-resistant code and verification tools
The release includes implementations of ML-KEM and ML-DSA, two quantum-secure algorithms, along with the formal verification libraries and tools Apple develo...
How attackers engineer BECs against specific organizations
Teams can mitigate BECs by better understanding their company’s attack profile.
BTMOB Android RAT poses significant threat with easy-to-use builder
First identified in February 2025, BTMOB evolved from the SpySolr malware.
Mass database extortion causes significant damage despite low payment rates
The Ransomnews Research Team's five-year study, spanning from May 2021 to May 2026, analyzed over 65,000 exposed databases, finding that 46.3% contained rans...
UK Visa Portal exposes passport and selfie photos of applicants
An anonymous source alerted TechCrunch to a security lapse on the UK Visa Portal website, stating that at least 100,000 documents, including passports and se...