AI-powered attacks, AI-powered defenses, and the vulnerabilities of the models themselves.
602 articles
Signal President Meredith Whittaker warns that the concentration of power in three major tech companies poses a fundamental threat to collective cybersecurity and privacy. She advocates for greater scrutiny of AI development within these dominant firms.
Bloomberg Technology · 92d ago
The Australian Signals Directorate (ASD) has updated its Information Security Manual (ISM) with new and revised controls. These changes place a stronger emphasis on the security competencies required of software developers.
iTNews Australia · 94d ago
Twenty, a startup specializing in offensive cyber weapons, has raised $100 million in a Series B round, reaching unicorn status. The firm is positioned as America's first venture-backed cyber warfare company.
The Next Web (TNW) · 94d ago
A hacking group named FulcrumSec claims to have stolen 1.3 terabytes of data from Novo Nordisk. The company has refused to pay the $25 million ransom demand.
The Next Web (TNW) · 94d ago
Microsoft released benchmarking data suggesting that integrated email security partners provide only marginal improvements over its native Defender for Office 365 protections. While Microsoft claims superior threat detection, industry experts argue that a defense-in-depth approach remains necessary for enterprise security.
Computerworld · 94d ago
A new Android banking trojan named Rokarolla has been identified, capable of targeting 217 financial and crypto applications. The malware grants operators extensive control, including the ability to steal PINs, SMS codes, and clipboard data.
The Next Web (TNW) · 95d ago
The US Department of Transportation has concluded its investigation into the 2024 Delta Air Lines service disruption. The incident was triggered by a faulty software update from cybersecurity firm CrowdStrike.
iTNews Australia · 95d ago
Cloudflare has launched its DMARC Management tool to all customers, providing unified visibility into email authentication. The service includes advanced reporting, record analysis, and SPF audits to help users reach full DMARC enforcement.
Cloudflare Blog · 95d ago
Chainguard has introduced the Athena coalition, a collaborative effort leveraging AI to identify and remediate vulnerabilities in open-source software. The initiative aims to patch security flaws before malicious actors can exploit them.
ZDNet AI · 95d ago
A China-linked espionage group has been using a built-in Google Workspace feature to exfiltrate sensitive data from research and military networks. The attackers reconfigured workspace rules to automatically copy and forward internal messages.
The Next Web (TNW) · 96d ago
Security researchers have identified a campaign by a group known as UNC6508 targeting research institutions in the US and Canada. The activity highlights ongoing cyber espionage risks facing high-value intellectual property in the research sector.
iTNews Australia · 96d ago
New research reveals a massive gap in AI governance, where 85% of IT teams claim control over AI agents, but only 42% can identify their owners. The study highlights that organizational leaders are significantly more likely to conceal their AI usage for competitive advantages.
VentureBeat · 96d ago
Docker has officially joined the Athena coalition, a cross-industry initiative focused on addressing the rising security threats in software supply chains. The move comes as attackers increasingly leverage AI to exploit vulnerabilities at a faster pace.
Docker Blog · 96d ago
Over two dozen companies, including JPMorgan Chase, are collaborating to identify and fix software vulnerabilities. They are leveraging advanced AI models to scan and secure open-source codebases.
Bloomberg Technology · 96d ago
This article argues that AI has lowered the cost of cyber deception, necessitating a shift from passive data storage to a proactive defensive control plane. It emphasizes that defenders must prioritize data truth and context to effectively counter AI-driven threats.
VentureBeat · 96d ago
The FBI has launched a 22,000 square-foot Cyber Range in Huntsville, Alabama, designed to simulate real-world cyberattacks. The facility features a fully functional replica of a town, including critical infrastructure like power companies and data centers, to train against modern digital threats.
The Verge · 97d ago
Microsoft's latest Patch Tuesday update addresses a record number of vulnerabilities, significantly influenced by AI-driven bug hunting techniques. The release also highlights critical security concerns regarding burner phones and ransomware exploits.
Wired · 98d ago
Two Russian state-linked hacking groups are exploiting a path traversal vulnerability (CVE-2025-8088) in WinRAR to deploy malware. Despite being patched a year ago, the flaw remains a vector for credential theft against Ukrainian targets.
The Next Web (TNW) · 102d ago
France's government-backed encrypted messenger, Tchap, has been compromised. Officials and the attacker are currently disputing the extent of the data breach.
The Next Web (TNW) · 102d ago
Meta has officially reported that the spyware developer NSO Group is still actively targeting WhatsApp users. This ongoing security threat highlights the persistent challenges in protecting encrypted communication platforms from sophisticated surveillance tools.
Engadget · 103d ago
Cloudflare has enabled customers to utilize Cloudforce One threat intelligence directly within their Web Application Firewall (WAF). This allows security teams to automate real-time blocking of traffic associated with specific threat actors and industries.
Cloudflare Blog · 103d ago
WhatsApp has successfully identified and disrupted spear phishing attempts orchestrated by the spyware firm NSO. This action reinforces platform security against state-sponsored or commercial surveillance tools.
Meta Newsroom · 103d ago
Rubrik CEO Bipul Sinha highlights that the rise of AI agents significantly expands the attack surface for enterprises. He advocates for a strategic shift from traditional attack prevention to rapid data recovery.
Bloomberg Technology · 106d ago
Upwind has announced a new 'Security for AI' initiative, shifting its focus toward securing the entire AI stack rather than treating AI security as a standalone product. This strategy integrates security directly into agentic AI workflows and infrastructure.
The Next Web (TNW) · 107d ago
The article argues that AI's primary cybersecurity risk isn't just finding vulnerabilities, but the rapid weaponization of patched exploits and the scaling of sophisticated social engineering. It highlights that the automation of post-exploitation tasks poses a greater threat to digital infrastructure than initial vulnerability discovery.
LessWrong AI · 107d ago
Dashlane disclosed how attackers successfully downloaded encrypted password vaults by targeting a large volume of users. The company emphasizes that the vaults remained encrypted, limiting the immediate impact of the data exposure.
Ars Technica · 107d ago
CrowdStrike reported revenue figures in line with analyst expectations. The company highlights the growing urgency for cybersecurity solutions as hackers increasingly leverage powerful AI tools.
Bloomberg Technology · 108d ago
Dashlane issued a security advisory confirming that 20 encrypted user vaults were stolen. The company has provided limited details regarding the breach, maintaining silence on specific vectors.
Ars Technica · 108d ago
Palo Alto Networks raised its profit outlook, citing strong demand for security services driven by AI-related threats. Companies are increasingly investing in AI-powered security to mitigate emerging risks.
Bloomberg Technology · 109d ago
Investors are closely watching upcoming earnings reports from Palo Alto Networks and CrowdStrike to determine if the 37% rally in cybersecurity stocks is sustainable. These companies are central to the AI-driven cybersecurity landscape.
Bloomberg Technology · 109d ago