AI-powered attacks, AI-powered defenses, and the vulnerabilities of the models themselves.
602 articles
Microsoft's July security patch cycle has addressed over 600 CVEs, including several vulnerabilities that are already being actively exploited. The sheer volume of patches has caused significant operational strain for IT and security teams.
iTNews Australia · 66d ago
Microsoft is transitioning Entra ID to passkeys as the default authentication method, phasing out SMS and voice-based MFA by February 2027. This move aims to combat AI-driven phishing and credential theft by establishing a passwordless security standard.
Computerworld · 66d ago
The Pentagon has paused a mandatory cybersecurity audit requirement for defense suppliers due to a severe shortage of accredited assessors. With over 100,000 companies requiring audits but only 100 licensed assessors available, the program faced an impossible bottleneck.
The Next Web (TNW) · 67d ago
CISA has issued a warning regarding Russian state-sponsored hackers targeting residential routers. The agency urges users to remain vigilant as these devices are increasingly used as residential proxies for malicious activity.
Ars Technica · 68d ago
Microsoft has released a fix for the 'RoguePlanet' zero-day vulnerability affecting Microsoft Defender. The flaw was identified as a disk-filling bug, and researchers have subsequently discovered additional security holes in the software.
iTNews Australia · 68d ago
The EU and UK have shifted their strategy by sanctioning the broader Russian cyber apparatus rather than just individual hackers. This move targets the intelligence services and infrastructure that facilitate state-sponsored cyber operations.
The Next Web (TNW) · 68d ago
A massive leak of SFPD drone footage from the Skydio platform highlights the privacy and security vulnerabilities of urban surveillance systems. The incident exposes the risks of data aggregation and potential unauthorized access to sensitive aerial imagery.
Wired · 68d ago
Toll Group is restructuring its data protection supply chain to address third-party risks in the AI era. The initiative aims to secure data across all external integrations.
iTNews Australia · 69d ago
Fraudsters are using AI to create convincing fake news articles that mimic reputable publishers to promote scam investment platforms. These clones often feature fabricated stories about public figures to build false credibility.
The Guardian Technology · 69d ago
The paper introduces 'idiobionics,' a new research field focused on the intersection of privacy and intelligent robotic prostheses. It highlights potential adversarial attacks on bionic limbs and provides a roadmap for securing human-facing autonomous systems.
ArXiv AI · 71d ago
Cloudflare analyzes nine NIST-proposed post-quantum signature algorithms, emphasizing the urgent need for robust security. They recommend ML-DSA as the most reliable choice for current implementation.
Cloudflare Blog · 72d ago
IBM and Red Hat have introduced Lightwell, a new initiative designed to protect open-source software from security vulnerabilities discovered by AI. The launch includes two commercial offerings: Lightwell Network and Lightwell Clearinghouse Premier.
ZDNet AI · 73d ago
The rapid development of frontier AI models in China is raising alarms among US policymakers regarding national security. This shift highlights the intensifying global competition in foundational AI capabilities.
Bloomberg Technology · 73d ago
Autonomous AI agents can now execute full system breaches in just 27 seconds, rendering traditional human-in-the-loop security workflows obsolete. Enterprises must shift toward cyber resilience by automating data recovery and implementing context-aware security systems.
VentureBeat · 73d ago
Savi is launching a new mobile app for iOS and Android designed to protect consumers from sophisticated AI-powered scams, such as deepfake ransom demands. The company recently secured $7 million in seed funding to support its mission of AI-based security.
TechCrunch AI · 74d ago
Recent reports of a fully autonomous AI ransomware attack have been clarified to show that human operators were still required for target selection and credential management. This highlights that current AI agents in cybercrime act as force multipliers rather than fully independent actors.
TechCrunch AI · 75d ago
The Zero Day Clock project reveals that the time between vulnerability disclosure and exploitation has plummeted to under 2 hours in 2026. This trend forces enterprises to drastically accelerate their patch management and threat monitoring cycles.
IT之家 · 76d ago
Israeli startup Dream, known for its cybersecurity solutions, has tripled its valuation to $3 billion. The company is now targeting the Latin American government sector to combat rising regional cyber threats.
The Next Web (TNW) · 78d ago
Attackers executed 81 million login attempts against Microsoft 365 users via an automated password spray campaign. The breach exploited gaps in multi-factor authentication (MFA) configurations, specifically targeting non-enforced apps.
Computerworld · 78d ago
The future of the cybersecurity industry is increasingly tied to the ability to secure and govern artificial intelligence systems. Professionals who can bridge the gap between traditional security and AI-specific governance are becoming the most sought-after talent.
TechRadar AI · 78d ago
Google has taken action to disrupt the NetNut proxy network, which has been identified as a facilitator for malware operations. This move highlights the ongoing efforts by major tech companies to secure infrastructure against abuse.
iTNews Australia · 79d ago
This article explores how security teams can leverage Amazon Bedrock to combat the rising threat of sophisticated, AI-generated phishing emails. It highlights the integration of generative AI and OSINT to identify malicious patterns.
AWS Machine Learning Blog · 79d ago
A critical vulnerability in Microsoft Defender, codenamed 'BlueHammer' (CVE-2026-33825), is being actively exploited by ransomware groups. The flaw allows authenticated attackers to escalate privileges within enterprise networks.
cnBeta (Full RSS) · 79d ago
A mysterious Chinese AI research team known as 'MopMonk' has achieved a top 7 ranking on the CyberGym cybersecurity benchmark. The team secured a 73.1% performance score, highlighting the growing capabilities of specialized AI in security-focused tasks.
Pandaily · 81d ago
Researchers at KIT have developed a method to identify individuals by analyzing Wi-Fi beamforming feedback (BFI) signals, which capture unique gait patterns. While currently in the lab stage, this highlights potential privacy risks in wireless network security.
虎嗅 · 81d ago
Bendigo Bank is restructuring its security operations center (SOC) to incorporate agentic AI workflows. This move aims to modernize their security stack and operational efficiency.
iTNews Australia · 82d ago
Apple is shifting its software update cadence to release security patches earlier. This strategy is a direct response to the increasing sophistication of AI-powered cyber attacks.
iTNews Australia · 82d ago
Confidential images and supplier documents for the upcoming iPhone 18 Pro have appeared on the dark web. This follows a significant cyberattack on Apple supplier Tata Electronics.
Digital Trends · 82d ago
F5 is evolving its infrastructure expertise to address the security challenges of the AI era. CEO François Locoh-Donou announced a new initiative focused on securing AI-driven applications and deployments.
GeekWire · 84d ago
The Pentagon is investigating a data exposure from the private group Dialog that leaked personal information of high-level national security officials. The breach included details on a senior White House intelligence official and an active-duty special operations officer.
Wired · 85d ago