WatchTowr researchers have disclosed a technical analysis and a “Detection Artefact Generator” for CVE-2026-50751, an authentication bypass flaw in Check Point’s Remote Access VPN and Mobile Access, which the vendor confirmed to be actively exploited. The attacks were limited, but with this information now public, a larger wave of opportunistic attacks may be expected. From…
Category: AI
AI, Cybersecurity, Global Security News
Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code
Cybersecurity researchers have described what they say is a new class of attack that can trick artificial intelligence (AI) coding agents into running arbitrary code on developer machines. Called Agentjacking by Tenet Security, the attack can be triggered by means of a fake error report crafted using Sentry, an open-source error-tracking and performance-monitoring platform. “The…
AI, Cybersecurity, Exploits, Funding, Global Security News, Government & Policy, Network Security, Risk Management
CyberCorps is adapting to AI. The budget isn’t keeping up.
The digital battlefield is expanding and changing faster than ever before. Washington must confront mounting threats to critical networks and systems. But there’s one challenge that stands out above the rest: artificial intelligence. The nation’s cyber experts need to be ready to face this new reality. The CyberCorps: Scholarship for Service program is a federal…
AI, Global Security News, Network Security
Microsoft fixes Windows update failures linked to WUSA installer
Microsoft has fixed a known issue that caused Windows updates released since May 2025 to fail when installed via the Windows Update Standalone Installer (WUSA) from a network share. […]
AI, Global Security News
Rethinking MDR as Attackers and Defenders Embrace AI
For most of the past decade, managed detection and response was the answer to a real problem. Security teams couldn’t staff around the clock, couldn’t hire enough analysts, and needed someone else to handle the alert queue. MDR stepped in. It worked well enough. Until now. The threat landscape has changed faster than the MDR…
AI, Apps, Data Breaches, Endpoint, Exploits, Global Security News, Network Security
Oracle PeopleSoft RCE Flaw Used as Zero-Day in Ongoing ShinyHunters Campaign
ShinyHunters exploited a critical Oracle PeopleSoft zero-day to breach over 100 organizations, mostly universities, before a patch was available. Mandiant and Google’s Threat Intelligence Group published an analysis of an active ShinyHunters campaign on June 11, one day after Oracle finally issued an advisory for the vulnerability being exploited. The gap matters: the activity ran…
AI, Global Security News, Risk Management
Cybercriminals are moving away from mass phishing campaigns
Phishing activity declined by roughly 20% in both 2024 and 2025, according to research from Zscaler’s ThreatLabz team. The drop followed years of growth that pushed phishing activity above 2 billion hits in 2023. “Phishing volume measured by blocked emails is no longer a reliable proxy for phishing risk.” Researchers found greater use of targeted…
AI, Global Security News, Risk Management
Prompt injection breaks today’s AI agents, study warns
Today’s AI web agents have no dependable defenses against prompt injection, according to new research showing that not a single attack scenario was consistently blocked across leading systems powered by GPT‑5 and Gemini. The findings come from StakeBench, a stakeholder-centric benchmark developed by researchers from Nanyang Technological University, ST Engineering, IBM Research, and the University of Illinois…
AI, Apps, Cybersecurity, Global Security News
LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution
Cybersecurity researchers have disclosed details of three now-patched security flaws impacting LangGraph, including a critical vulnerability chain that could result in remote code execution. LangGraph is an open-source framework created by LangChain to build complex, stateful, and multi-agent artificial intelligence (AI) agentic applications. “An SQL injection in LangGraph’s function could
AI, Data Breaches, Exploits, Global Security News
Oracle PeopleSoft zero‑day fuels ShinyHunters extortion spree
A newly disclosed Oracle PeopleSoft zero-day became the weapon of choice in a recent ShinyHunters extortion campaign that primarily targeted universities and other educational institutes. Attackers exploited the critical remote code execution (RCE) flaw in PeopleSoft’s Environment Management component that Oracle started warning customers about on June 10, 2026. In an advisory, the company urged…
AI, APAC, Cybersecurity, Exploits, Global Security News, Network Security, Risk Management
AI is exposing the biggest weakness in cybersecurity: We never built a health model. Until now!
For 30 years, cybersecurity has operated like an emergency room. Reactive. Crisis-driven. Always triaging. We are extraordinarily good at it — our detection is faster, our response playbooks are sharper, our incident teams are more capable than they have ever been. When something goes wrong, the modern security organization runs toward the fire with real…
AI, Global Security News
INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator
An INTERPOL-led operation last month resulted in the disruption of Sniper Dz, a decade-long phishing-as-a-service (PhaaS) platform, Group-IB said Thursday. The effort, codenamed Operation Ramz, took place between October 2025 and February 2026, and saw authorities from 13 countries in the Middle East and North Africa (MENA) region making 201 arrests. Included among them was…
AI, Cybersecurity, Exploits, Global Security News, Venture
Optiv Consulting Targets Secure Agentic AI
Optiv has sold its advisory, consulting, and transformation project-based services business to Vobis Ventures, creating a newly independent Optiv Consulting business focused on helping enterprises securely adopt agentic AI at scale. The deal closed on June 1, with Optiv Consulting initially operating under its current name and serving as Optiv’s priority services partner for the…
AI, Compliance, Cybersecurity, Data Breaches, Endpoint, Global Security News, Network Security, Risk Management
Reinvent Launches Managed Security for MSP Partners
Reinvent Telecom has launched MyCloud Managed Security, a fully managed cybersecurity offering built to help MSPs, VARs, and resellers expand into security services without building their own infrastructure. The new service combines Guided Vulnerability Management and Managed XDR to provide continuous monitoring, threat detection and response, asset discovery, endpoint detection and response, SIEM, SOAR, dark…
AI, Apps, Exploits, Global Security News, malware, Network Security, privacy, Risk Management
21,786 Home Cameras, No Password, No Warning
21,786 live cameras stream with zero authentication. Cheap gear is the real risk, webcamXP open 46% of the time. Your home router is the broadcast tower. In May 2026, Mysterium VPN queried a public internet-wide device index to count every camera and recorder that answers the open internet. They found more than three million reachable…
AI, Apps, Global Security News, Network Security, Risk Management
Zebra Repco Rollout Signals ANZ Channel Services Shift
Back in April, Zebra Technologies Corporation, a company specializing in digitizing and automating workflows to deliver intelligent operations, announced that Repco, the largest reseller and supplier in the automotive aftermarket parts sector across Australia and New Zealand (ANZ), had digitized its last-mile delivery operations with Zebra’s TC5 series mobile computers. The deployment highlights a broader…
AI, Apps, Cybersecurity, Data Breaches, Data Security, Endpoint, Exploits, Funding, Global Security News, Risk Management, Venture
Pax8 Beyond 2026 Vendors Target MSP AI and Security
At this year’s Pax8 Beyond 2026 conference, vendors across the channel unveiled new products, partnerships, and investments focused on helping managed service providers improve operations and scale more efficiently. Several announcements centered on security, documentation, and service delivery, reflecting the challenges MSPs continue to face as customer expectations rise and operational demands increase. Read our…
AI, Compliance, Cybersecurity, Data Security, Global Security News, Government & Policy, Risk Management
MSP Compliance Services Shift to Continuous Monitoring
As enterprises accelerate AI adoption and face an increasingly complex web of cybersecurity and data protection requirements, managed service providers are finding new opportunities to expand beyond traditional IT support and into continuous compliance services. Brian Harmison, CEO of Corsica Technologies, says customers are no longer looking for occasional audit preparation or checkbox exercises. Instead,…
AI, Global Security News
Authorities dismantle crypto laundering service that moved €336 million for cybercriminals
An international law enforcement operation has dismantled a cryptocurrency laundering service linked to ransomware groups and other cybercriminals that processed more than €336 million in illicit funds. The domain seizure notice (Source: Europol) Europol said the service, known as AudiA6, is suspected of laundering cryptocurrency obtained through ransomware attacks and other forms of cybercrime between…
AI, APAC, Cybersecurity, Data Breaches, Europe, Funding, Global Security News, Government & Policy, Risk Management
‘Harvest now, decipher later’: The quantum threat few are preparing for
Quantum technology may feel far off but certain risks are already with us in the form of “harvest now, decrypt later” — an attack vector in which malicious actors steal data now for a future in which they have access to quantum computational tools capable of breaking encryption deployed by most companies today to protect their data.…
AI, china, Global Security News, privacy
Inside the coming war over face cameras
Several trends are now converging that threaten to pit tech companies against tech users. Miniaturization has finally enabled companies to build AI glasses that look and function like normal glasses, but with microphones and cameras. People are increasingly talking to AI, rather than typing. And multimodal input, especially video, is on the rise. Put all…
AI, Europe, Global Security News, Network Security
Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs
Authorities in Europe have disrupted AudiA6, a cryptocurrency laundering service used by ransomware gangs and cybercriminal networks. Europol, in a statement issued Thursday, said the dismantling of AudiA6 cut off a “key financial pipeline used to wash hundreds of millions in illicit profits.” The service is estimated to have been used to launder more than…
AI, Cybersecurity, Global Security News, Network Security
Comcast Business SecurityEdge Preferred strengthens security for small businesses
Comcast Business announced SecurityEdge Preferred, its most advanced network-native cybersecurity solution for small businesses. Because SecurityEdge Preferred is built directly into the Comcast Business network, security can be activated in minutes without deploying additional hardware, managing multiple vendors, or maintaining complex security tools. Rather than adding another layer on top of existing infrastructure, it lives…
AI, Global Security News, Risk Management
How to use NIST and ISO frameworks to govern AI agents
Security leaders no longer need convincing that AI agents introduce risk. What’s missing is how to govern them once they move into production and begin operating autonomously across enterprise environments. AI agents already read sensitive documents, invoke internal APIs, trigger workflows, and make decisions that still require human judgment. From a security perspective, the most…
AI, Global Security News
ZeroFox releases AI Analytics to bring answers directly to security teams
ZeroFox launched ZeroFox AI Analytics, a new platform capability that gives security teams real-time visibility into the signals, patterns, and trends shaping their external threat landscape. ZeroFox AI Analytics gives security teams the ability to move beyond static reports and query their data in real time. Rather than waiting on manual exports or scheduled summaries,…
AI, Global Security News
The assembly line behind 1.5 million malicious domains
Attackers registered roughly 1.5 million malicious domains during the first five months of 2026. The registration patterns resemble industrial output. Most of the domains were created by attackers, put to use within weeks, and concentrated among a small set of registrars, top-level domains, and hosting providers. New research examined more than 1.5 million unique domains…
AI, Global Security News
AI sovereignty makes data centers strategic targets for cyber operations
Data centers built for frontier AI draw hundreds of megawatts of electricity and large volumes of cooling water from fixed locations with known addresses. Each one concentrates tens of thousands of graphics processors, liquid cooling systems, and high-density power equipment inside a single building. This physical footprint turns a nation’s AI capability into something an…
AI, Global Security News, privacy
Product showcase: Avast One turns scam screenshots into actionable security advice
Avast One Free combines privacy, security, identity monitoring, and performance tools in a single platform. The app is available for Windows, macOS, Android, and iOS. Checking the device for security and privacy issues After installing it from the App Store, I ran Smart Scan, which reviews device and privacy settings and identifies areas that require…
AI, Global Security News
New infosec products of the week: June 12, 2026
Here’s a look at the most interesting products from the past week, featuring releases from AISLE, Drata, Elastic, Filigran, IDnow, and Ridge Security. RidgeBot 7.0 automates Active Directory attack simulations for security validation Ridge Security has announced the release of RidgeBot 7.0, an update to its automated security validation platform that introduces automated Windows Active…
AI, Global Security News
KnowBe4 Expands Gamified Training Library With Launch of “Spot the Vish” Game
KnowBe4 Expands Gamified Training Library With Launch of “Spot the Vish” Game. Security coverage from iTWire.
AI, Global Security News
DXC and Anthropic Announce Multi-Year Global Alliance to Bring AI into Mission-Critical Enterprise Systems
DXC and Anthropic Announce Multi-Year Global Alliance to Bring AI into Mission-Critical Enterprise Systems. Strategy coverage from iTWire.
AI, Exploits, Global Security News
Google warns of active Oracle PeopleSoft exploitation campaign linked to ShinyHunters
Google warns of active Oracle PeopleSoft exploitation campaign linked to ShinyHunters. Security coverage from iTWire.
AI, Global Security News
The Teachers Getting $50,000 Bonuses Thanks to a Massive Meta Data Center
The jump in sales tax receipts in the Louisiana parish provides a new talking point in the debate over the AI construction boom.
AI, Global Security News
The AI Price War Is Here, Piling Pressure on OpenAI and Anthropic
Startups and tech giants alike are mixing and matching AI models to avoid the premium prices charged by industry leaders
AI, Global Security News
Phishing Attack Volume Down 20%, but Risk Still Rising
Hackers are valuing quality over quantity, using AI to upgrade their phishing attacks rather than multiplying them.
AI, Global Security News
IAS Expands Brand Safety & Suitability Measurement to YouTube Audio Ads Campaigns
IAS Expands Brand Safety & Suitability Measurement to YouTube Audio Ads Campaigns. Apps coverage from iTWire.
AI, Global Security News
New Relic Report Reveals AI-Generated Code Grades Higher in Review, Yet Triggers Rise in Production Incidents
New Relic Report Reveals AI-Generated Code Grades Higher in Review, Yet Triggers Rise in Production Incidents. Guest Research coverage from iTWire.
AI, Data Breaches, Global Security News
Maine breach portal abused to publish fake data breach disclosures
In an unusual misinformation campaign, fraudulent data breach disclosures were submitted to Maine’s official breach portal and publicly posted before their legitimacy could be verified, prompting companies to deny the claims. […]
AI, Compliance, Global Security News, Risk Management
Google is held liable for false information from its AI
A German court has sparked a legal controversy by ruling that Google is responsible for defamatory comments generated by its own AI system. The search giant had argued that it couldn’t be blamed for the false results, but a Munich court has deemed that not to be the case and has ruled in favor of…
AI, Cybersecurity, Global Security News
Antidetect Browser Technology: The Future of Secure Online Management
In this post, I will talk about the Antidetect Browser technology and the future of secure online management. Online accounts are now part of daily life. Whether someone is managing ads, handling multiple projects, logging into services from different devices, or running automated workflows, they expect one thing: smooth account operation without unnecessary friction. But…
AI, Global Security News
Australian-built blockchain tech just made the first legal crypto bet in Nevada history
Australian-built blockchain tech just made the first legal crypto bet in Nevada history. Deals coverage from iTWire.
AI, Global Security News
OceanLotus targets stock investors and construction firm with SPECTRALVIPER backdoor
Vietnam-aligned threat actor OceanLotus has been linked to two distinct campaigns targeting domestic entities and stock investors with a backdoor known as SPECTRALVIPER, according to ESET.
AI, Exploits, Global Security News
ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities
The ShinyHunters extortion crew exploited an unpatched flaw in Oracle PeopleSoft to break into enterprise systems, steal data, and demand payment to keep it private. The campaign hit universities hardest. Google’s Mandiant attributes it to the group it tracks as UNC6240, and dates the activity between May 27 and June 9. Oracle did not publish…
AI, Global Security News, Russia
Russian national charged in connection with Void Blizzard cyberespionage campaign
Federal prosecutors have charged a Russian national, Denis Nikolayevich Obrezko, with conspiracy to commit unauthorized computer access in connection with a widespread cyberespionage campaign attributed to the Russia-aligned threat group Void Blizzard, according to a recent report by CyberScoop.
AI, Cybersecurity, Global Security News, Risk Management
AI agents are already exploring your network. How do you detect their intent?
AI, Endpoint, Exploits, Global Security News, Network Security
CVE-2026-10520 Exploited: Ivanti Sentry Gateways Compromised Shortly After Patch Release
Attackers are exploiting the critical CVE-2026-10520 flaw in Ivanti Sentry, compromising many internet-exposed gateways shortly after patches were released. Threat actors have started exploiting a maximum-severity OS command injection flaw in Ivanti Sentry, tracked as CVE-2026-10520, that allows remote code execution with root privileges. “An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote…
AI, Global Security News
New Attacks Trick OpenClaw AI Agent Into Running Code and Leaking Secrets
Two security teams have shown, in separate research published this week, that OpenClaw, the popular self-hosted AI agent, can be driven to run attacker-controlled code or hand over sensitive data through ordinary-looking inputs. Imperva buried instructions inside shared contacts, vCards, and location pins that the agent executed without the victim ever seeing them. Varonis built…
AI, Exploits, Global Security News
New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files
Security researcher Chaotic Eclipse (aka Nightmare-Eclipse and MSNightmare) has released a new Windows BitLocker bypass dubbed GreatXML, a day after they published an exploit for Microsoft Defender. “This was an accidental discovery, it took a total of 4 hours to find this,” the researcher said in a post on Blogger. “If you ever attempted to…
AI, APAC, Apps, Cybersecurity, Data Breaches, Exploits, Global Security News, Government & Policy, malware, Network Security, Risk Management, Russia
Ticket Scams to Infrastructure Attacks: FIFA World Cup Cyber Risks
One of fútbol’s premier events is about to hit North America this summer with the FIFA World Cup 2026 stretching across the U.S., Canada, and Mexico. The tournament will feature 48 national teams competing to become champions – up from 32 in previous tournaments – across 16 host cities. It will be the first time…
AI, Europe, Global Security News, Government & Policy, Risk Management, Russia
Russian national charged in connection with Void Blizzard espionage campaign
Federal prosecutors have charged a Russian national with conspiracy to commit unauthorized computer access in connection with a sprawling cyber-espionage campaign linked to the Russia-aligned threat group Void Blizzard, according to a criminal complaint filed in federal court this week. Denis Nikolayevich Obrezko, a Russian citizen, is accused of breaking into systems owned by companies…
AI, Apps, Compliance, Global Security News, Network Security, privacy
WWDC: What IT admins need to know
Under-the-hood AI changes and efficiency improvements at the OS layer across Apple’s platforms are certainly the highlights at WWDC 2026. But there have also been significant changes IT admins will need to prepare for, particularly around Declarative Device Management (DDM). The Intel age is over Apple warned us this was coming, but macOS 27 will not support Intel at all.…
AI, Global Security News
The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm
A new analysis of The Gentlemen operation has revealed that the financially motivated threat group initially operated as an affiliate responsible for conducting double extortion attacks, while leveraging resources from various ransomware-as-a-service (RaaS) schemes like LockBit (aka Tenacious Mantis), Qilin (aka Pestilent Mantis), and Medusa (aka Venomous Mantis). According to a detailed report
AI, Cybersecurity, Exploits, Global Security News, Government & Policy, Risk Management
CISA orders federal agencies to “patch smarter”
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a Binding Operational Directive that will change how the US federal government approaches vulnerability management. The directive arrives as the patching problem has become nearly unmanageable, driven by a surge in newly published vulnerabilities and by AI tools that are accelerating both security research and…
AI, Global Security News
The AI Exchange: Innovators in Payment Security Featuring SecurityMetrics
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about how they are adopting and implementing artificial intelligence (AI) into their organizations.
AI, Global Security News
See the VCs and Family Offices at the Core of the Mega IPO Wave
About three dozen investors, from Silicon Valley titans to a family office in Tampa, hold stakes in SpaceX, OpenAI and Anthropic.
AI, Global Security News
Segmentation Works for OT If Operators Are Paying Attention
Operational technology security remains as difficult as ever, with even the best practice recommendation falling short.
AI, Global Security News
Proxmox releases Mail Gateway 9.1 with quarantine and backup encryption changes
Proxmox Mail Gateway 9.1 adds updated system components, changes to the spam quarantine interface, and encryption for backups. It works as a mail proxy positioned between the firewall and internal mail servers, screening incoming and outgoing traffic for spam, viruses, Trojans, and phishing attempts. Updated system components Version 9.1 runs on Debian 13.5 Trixie and…
AI, Global Security News
How autonomous defense and remediation stands up to AI cyber threats
AI tools like ADR can help humans and machines work side-by-side to defeat today’s threats.
AI, Apps, Global Security News
OnyxC2 Malware-as-a-Service Offers Enterprise-Grade Data Theft
OnyxC2 is a MaaS stealer targeting 210+ apps, using DLL sideloading, encrypted payloads, and remote access features to evade detection. OnyxC2 appeared on a cybercrime forum earlier this year and is sold as a subscription service: $250 per month for the standard build, $500 for the premium tier that includes HVNC, and $6,000 for an…
AI, Apps, Global Security News
OnyxC2 Malware-as-a-Service Offers Enterprise-Grade Data Theft
OnyxC2 is a MaaS stealer targeting 210+ apps, using DLL sideloading, encrypted payloads, and remote access features to evade detection. OnyxC2 appeared on a cybercrime forum earlier this year and is sold as a subscription service: $250 per month for the standard build, $500 for the premium tier that includes HVNC, and $6,000 for an…
AI, Cybersecurity, Global Security News, Government & Policy, Network Security, Risk Management
Team Cymru Expands APJ Operations With New Sydney Hub
External threat intelligence provider Team Cymru has announced the expansion of its Asia-Pacific and Japan (APJ) operations, with Sydney serving as the company’s regional operational hub. The announcement follows RISEx Sydney, where Team Cymru leadership met with customers, partners, and public-sector stakeholders from across the region. Expansion responds to regional cyber visibility demand According to…
AI, Global Security News
Why AI-driven threats are exposing the limits of MSP security stacks
AI-driven attacks are exposing the limits of fragmented MSP security stacks and slow response workflows. Kaseya breaks down why integrated security, automation, and recovery are becoming essential. […]
AI, Global Security News
Cybercriminals Use Fake AI Guides and Dev Tools to Spread AsyncRAT Malware
Fake AI guides hide a multi-stage chain that drops AsyncRAT, with signs of AI-assisted coding
AI, Global Security News, malware
Fake Spotify Premium tutorials on TikTok and Instagram Reels spread malware
Cybercriminals are using TikTok and Instagram Reels videos to spread Vidar, an infostealer malware, through fake downloads for popular paid software, according to ReversingLabs. The researchers uncovered two campaigns behind the activity, each using a different approach to draw in viewers before sending them to external download sites. One campaign centered on fake software installation…
AI, Cybersecurity, Global Security News
Cybersecurity Stars Awards 2026: Winners Announced Across 95 Categories
Most good security work is invisible by design. Today is the exception. The 2026 Cybersecurity Stars Awards winners are announced across 95 subcategories in four main award categories. The reason is simple. Cybersecurity is full of work that deserves recognition and rarely gets it. Products that quietly close real gaps. Teams that stop incidents nobody…
AI, Global Security News, malware, Network Security
ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Action Patch + 28 New Stories
It’s been one of those weeks. You expect the usual noise: recycled malware, sloppy attacks, another easy target getting hit. Instead, there’s a supply chain attack kit in a public repo, a $5,000-a-month RAT that clones browsers, and research showing AI agents can be tricked into leaking real credentials. The bigger problem is how polished…
AI, Global Security News, malware
Hackers Use Fake Claude Code Guide and AI PDFs to Spread AsyncRAT Malware
Hackers are using fake Claude Code guide and AI PDFs to spread AsyncRAT malware via Windows attack using PowerShell and Defender exclusions.
AI, Data Breaches, Endpoint, Exploits, Global Security News, Risk Management
ServiceNow fixes API issue after reports of suspicious tenant activity
ServiceNow is notifying customers after discovering and remediating a vulnerability that could have exposed data via an unauthenticated API endpoint on affected instances. The issue emerged publicly after customers began discussing security notifications from ServiceNow and reports of suspicious activity linked to their environments. According to the company’s advisory, the vulnerability was initially reported through…
AI, APAC, Global Security News, Network Security
OSF Digital Joins Salesforce FDE Partner Network
OSF Digital, a Salesforce-exclusive consulting and services firm, has been chosen to participate in the Salesforce Forward Deployed Engineering (FDE) Partner Network. Salesforce FDE partner network builds agentic AI skills OSF Digital will join a network of firms adopting deep learning, expert skills, and specialized training from Salesforce’s internal teams to help organizations “turn agentic…
AI, Cybersecurity, Exploits, Global Security News
Oracle PeopleSoft servers under attack, Oracle pushes out-of-band security alert
A zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft PeopleTools is being exploited in the wild, Charles Carmakal, CTO at cybersecurity firm Mandiant, part of Google Cloud, warned today. The warning comes a day after Oracle published an out-of-band security alert about the flaw, which is remotely exploitable without authentication, may result in remote code execution, and…
AI, Cybersecurity, Global Security News
Most Cybersecurity Teams Struggle to Find Time for Training on New Cyber Threats
Organizations are aware of the challenges that new technologies like AI bring: but cybersecurity staff struggle to make time for the required training during working hours
AI, Global Security News
KPMG and Microsoft scale trusted, enterprise AI agents globally through deployment of Agent 365 and Copilot
KPMG and Microsoft scale trusted, enterprise AI agents globally through deployment of Agent 365 and Copilot. AI and Data coverage from iTWire.
AI, Global Security News
‘Mythos-level’ Fable model released to public: How Anthropic plans to prevent misuse
Safeguard layers aim to block and reroute cyber-related requests while retaining Mythos-level capabilities.
AI, Global Security News
AI Broke Vulnerability Management. That’s Why CISOs Are Moving Budget to BAS.
For thirty years, vulnerability management ran on a buffer: the months between when a vulnerability was found and when someone could figure out how to weaponize it. The solution was straightforward enough; triage by severity, schedule the fix, validate, and move on. The buffer was what made that work. Today, that buffer is gone. AI…
AI, Compliance, Cybersecurity, Global Security News, Risk Management
AI vendor FDEs: Key considerations and concerns
When it comes to AI deployments, IT leaders are often caught in an awkward middle space, trying to reconcile conflicting directives from senior management with constantly changing AI models, capabilities, and costs; data governance and security needs; and the limitations of their own team. “Very few real benefits can be attained by simply purchasing an…
AI, Exploits, Global Security News, malware, Risk Management
Chaotic Eclipse Strikes Again: New Zero-Day Unlocks BitLocker in Four Hours of Research
GreatXML bypasses BitLocker via Defender offline scan artifacts, giving SYSTEM shell in Recovery Mode. No patch exists. Any machine that ran an offline scan is vulnerable. On June 10, security researcher Chaotic Eclipse (aka Nightmare Eclipse) published a new working exploit dubbed GreatXML that bypasses BitLocker and opens a command shell with full SYSTEM privileges…
AI, china, Global Security News, Government & Policy
FBI seizes 13 websites linked to alleged Chinese intelligence-gathering effort
Federal authorities have seized 13 internet domains allegedly used to target current and former U.S. government employees and military personnel with access to classified and sensitive information. The post FBI seizes 13 websites linked to alleged Chinese intelligence-gathering effort appeared first on Help Net Security.
AI, Global Security News
Extortion-Only Attacks Increase, With Data Theft Dominating Ransomware Claims
Extortion-only attacks are increasing as data theft drives most ransomware claims, with many organizations unable to stop stolen data from being exposed
AI, Global Security News, Network Security, Risk Management
What SRE teams need before they trust AI agents
The future of reliability will not be defined by whether site reliability engineering (SRE) teams use AI agents, but by the conditions under which they choose to trust them. In high-stakes systems, trust is never granted because a demo looks impressive; it is earned through observability, constraints, accountability and repeated evidence that the system helps…
AI, Cybersecurity, Endpoint, Exploits, Global Security News, Network Security, Risk Management
China-linked recon botnet outpaces enterprise defenses
A botnet made up of compromised small office and Internet of Things devices has grown into a larger reconnaissance network capable of rapidly identifying vulnerable internet-facing systems after public vulnerability disclosures, researchers said. The botnet, tracked by Lumen’s Black Lotus Labs as JDY, now comprises more than 1,500 compromised small office and home office, or…
AI, Exploits, Global Security News, Network Security
Fortinet patched a new critical FortiSandbox flaw
Fortinet patched a critical FortiSandbox vulnerability that could let unauthenticated attackers remotely execute commands via crafted HTTP requests. Fortinet released security updates to address several vulnerabilities affecting FortiSandbox, FortiOS, FortiProxy, and FortiPortal. The most severe issue, tracked as CVE-2026-25089 (CVSS score of 9.8), is an OS command injection flaw in FortiSandbox products. The vulnerability could…
AI, Global Security News
OceanLotus Hits Vietnam Investors With SPECTRALVIPER in FireAnt Attack
The Vietnam-aligned threat actor known as OceanLotus has been attributed to two distinct campaigns that targeted domestic entities and stock investors with a backdoor known as SPECTRALVIPER. The campaigns involve a prolonged cyber espionage operation aimed at a Vietnamese infrastructure and transport construction corporation between mid-2024 and February 2026, as well as a supply chain…
AI, Global Security News, privacy, Venture
How to opt out of Google’s new AI training default
Heads-up, my fellow Android-appreciating animals: Google’s in the midst of rolling out a subtle change to its privacy settings that’s well worth your while to notice. The change includes a new clause that says the company can use images, files, video, and audio from your interactions with Google Lens, Search, and Gemini Live to train…
AI, Global Security News, malware
9 out of 10 people can no longer distinguish real from AI-generated content
Online fraud is becoming harder to distinguish from legitimate activity as AI-generated messages, voices, photos, reviews, and identities become more convincing. Nearly nine in ten adults say they can no longer tell what is real from AI-generated content, according to the latest Malwarebytes survey. The share increased from 66% in 2025 to 85% in 2026.…
AI, APAC, Cloud Security, Cybersecurity, Data Breaches, Exploits, Global Security News, Politics, Risk Management
Frontier AI models offer sneak peak of seismic cyber shifts ahead
The advent of Claude Mythos combined with the release of OpenAI’s GPT-5.5 have changed the threat model for CISOs. The arrival of those frontier AI models — and the ones soon to follow — makes it much easier to discover and chain vulnerabilities at a speed and scale that will require most cyber departments to…
AI, Endpoint, Global Security News, Government & Policy, Network Security, privacy, Risk Management
Aged-domain acquisition: The tradecraft phishing operators are using to bypass your mail filter’s reputation score
I’ve spent the past two years working on incident response and threat intelligence, and the pattern I’m about to describe is one I keep seeing show up in cases that should have been caught at the email gateway. The kit families change. The lure templates change. The constant is that phishing-as-a-service operators are buying aged…
AI, Global Security News
Check Point expands MSP platform with with AI governance and unified security bundles
Check Point has announced a major expansion of its Managed Service Provider (MSP) platform, designed to help MSPs secure AI adoption, streamline operations and simplify managed security delivery. The announcement brings together three strategic innovations under a single MSP vision: Securing AI and AI usage for MSPs A new multi-tenant MSP management platform with Management…
AI, Compliance, Cybersecurity, Europe, Global Security News, malware, Network Security, Risk Management
From Infosecurity Europe to CONFidence and C1b3rWall: What Security Teams Are Prioritizing in 2026
Three cities, three cybersecurity conferences, and plenty of conversations with security professionals across Europe. Over the past few weeks, the ANY.RUN team joined Infosecurity Europe in London, CONFidence Conference in Kraków, and C1b3rWall Congress in Ávila. While every event had its own focus, the discussions pointed in the same direction: security teams need faster investigations,…
AI, Europe, Global Security News, Network Security
HubSpot Partner Ecosystem Projected to Reach $42B by 2030
HubSpot is betting big that its partners will turn software into gold as the internet shifts from a network of websites into a playground for AI agents. According to data from the 2026 HubSpot Partner Report — The State of Ecosystems — the customer platform’s partner network has been named one of the top 10…
AI, Global Security News
IDnow launches Trust Platform to help regulated firms move from KYC to continuous trust
IDnow has announced the launch of the IDnow Trust Platform, designed to help regulated organisations orchestrate identity verification, fraud prevention, biometric authentication, and qualified digital trust services throughout the customer lifecycle. “The identity industry is entering its biggest transformation since onboarding first went digital,” said Andreas Bodczek, CEO of IDnow. “For years, organisations treated identity…
AI, Compliance, Global Security News, Network Security
VMware Renewals Put Broadcom Migration Pressure Back in Focus
It is that time again for VMware customers. With another major renewal cycle approaching and a new wave of contracts set to expire in early 2027, organizations are once again weighing whether the platform remains worth the cost—and what options exist if it does not. Higher costs open VMware environments to potential migrations For MSPs,…
AI, Apps, Global Security News, Network Security
Rubrik Q&A: New Partner Integrations, AI Solutions Launched
Recently, Rubrik, a security and AI operations company, made a series of announcements, including new partner integrations and a new agentic-first AI platform. The announcements represent Rubrik’s ongoing commitment to ensuring enterprises are agentic-ready and resilient. You can read more about the announcements here. In light of these new announcements, below is a Q&A with…
AI, Apps, Europe, Exploits, Global Security News, Government & Policy, malware, Network Security
JDY Botnet Evolves After KV Takedown, Targets Military Networks
JDY botnet scans SOHO/IoT devices globally to map services and targets, especially US military networks. Lumen’s Black Lotus Labs reported the resurgence of the JDY botnet, a covert reconnaissance network tied to Chinese state-sponsored hacking groups including Volt Typhoon. The network was first spotted in late 2023 as a cluster inside KV-botnet. The U.S. government…
AI, Data Breaches, Global Security News
Nottingham University data breach affects over 450,000 students
The University of Nottingham confirmed on Wednesday that a hacking group gained access to its student records system in a breach affecting both current students and alums. […]
AI, Global Security News
GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks
GitHub has announced what it said are “breaking changes” coming to npm version 12, one of which turns off install scripts by default to combat software supply chain threats. The changes aim to combat attack techniques that abuse the “npm install” command to trigger the execution of malicious code using npm lifecycle hooks. “Npm install”…
AI, Global Security News
Prompt injection still drives most agentic AI security failures in production
A backdoor sat on PyPI for three hours in March 2026. Nearly 47,000 downloads occurred during the window. The compromised package, LiteLLM, serves as the language-model gateway for CrewAI, DSPy, Microsoft GraphRAG, and dozens of other AI agent frameworks. Anyone pulling an update during that window pulled in an autonomous attack bot named hackerbot-claw along…
AI, Global Security News
X Square Robot open sources its robot-free data collection framework
Companies building robots for physical work spend large amounts of time and money operating machines by hand to gather training examples. Each session with a physical robot produces a small number of demonstrations per day, which slows the growth of datasets used to train embodied AI. Human demonstrators offer a cheaper source of data, and…
AI, Global Security News, Risk Management
Organizations can’t see much of their mobile AI activity
Organizations have limited visibility into AI activity on mobile devices despite security leaders expressing confidence in their AI governance, according to Lookout’s “Solving for the Mobile AI Blind Spot: Executive Confidence Meets Technical Reality” report. Mobile AI visibility gaps Enterprises lack visibility into a large share of mobile AI activity taking place on both corporate-owned…
AI, Global Security News
Only 14% of Australian firms have scaled AI: Asana’s answer is an operating system for human-agent teams
Only 14% of Australian firms have scaled AI: Asana’s answer is an operating system for human-agent teams. AI and Data coverage from iTWire.
AI, Global Security News
AI adoption in financial services accelerating, but growing governance gaps and infrastructure challenges are slowing scale: Nutanix Enterprise Cloud Index
AI adoption in financial services accelerating, but growing governance gaps and infrastructure challenges are slowing scale: Nutanix Enterprise Cloud Index….