RustDuck botnet rapidly evolves with migration to Rust
RustDuck targets a variety of IoT devices, including routers, cameras, and Android set-top boxes, as well as exposed servers running software like ThinkPHP a...
SC Media
20 articles
The identity crisis at the heart of AI regulation
AI regulation may force the internet to solve its long-standing identity problem.
Rise of the machines: How to secure and win the AI revolution
Agentic SOC isn't here to take away your job -- it's here to make your job better.
The 5 pillars of agentic AI security
Companies that build governance into their agentic AI programs will succeed in this new era.
Microsoft Azure’s CLI target of automated password spray attacks
Huntress researchers saw 78 user accounts compromised across 64 organizations.
‘BioShocking’ jailbreak tricks AI browsers into disclosing private data
A website framed as a game led AI assistants to submit private GitHub file contents.
Performance Through People as Executives Struggle and Mentorship Matters - Greg Hoffman - BSW #454
AI Cocaine Recipes, Russian Hack, Scattered Spider, Cisco, Amazon Q – Aaran Leyland - SWN #594
Leaders call for workforce overhaul as AI reshapes critical infrastructure
Leaders urge faster workforce adaptation as AI reshapes cyber and infrastructure.
Critical Oracle E-Business Suite bug actively exploited
Critical Oracle EBS flaw now exploited, prompting urgent patching guidance.
AI is Writing Your Code… And It’s Insecure | The New AppSec Reality - WC #1
ICIT founder on AI, quantum and critical infrastructure
Parham Eftekhari discusses AI, quantum and the future of critical infrastructure trust.
Lessons learned from The Mandalorian and Grogu
This is the way: The old will protect the young until the young protects the old.
Anonymous researcher dumps zero-day exploits for multiple software products
The disclosed exploits include a critical pre-authentication remote code execution vulnerability in libssh2 (CVE-2026-55200) and an authentication bypass vul...
New websites referencing Venezuela earthquake pose online risks
Cyber threat intelligence provider WhoisXML API identified 212 newly registered domains referencing the Venezuela earthquake between June 24 and June 28, 2026.
Russian influence operations shift focus to US and Europe, leveraging AI
Google threat hunters report that Russian influence campaigns are increasingly targeting the EU and NATO, aiming to divide Western coalitions and advance Mos...
Attack exploiting SimpleHelp vulnerability deploys novel loader, infostealer
The TaskWeaver loader delivers Djinn Stealer, which targets dev credentials and AI tokens.
WhatsApp introduces usernames to enhance user privacy
The new username functionality enables users to set a unique handle and share that instead of their personal phone number when initiating conversations.
Indian bank domain registrar allegedly leaks sensitive data
A security researcher, operating under the pseudonym "Srikanth L" and affiliated with CashlessConsumer, has alleged that the IDRBT's Domain Registration Port...
Straiker raises $64 million to secure enterprise AI agents
The company's agentic security platform discovers, tests, and monitors AI agents to identify and mitigate vulnerabilities before and after deployment.