A powerful iPhone hacking toolkit dubbed “DarkSword” has been used since November 2025 to compromise devices by exploiting zero-day iOS vulnerabilities, Google researchers have shared. iOS vulnerabilities exploited by DarkSword Two weeks ago, Google Threat Intelligence Group (GTIG) and iVerify disclosed the existence of Coruna, a spy-grade iOS exploit kit that has been used in…
Category: AI
AI, Exploits, Global Security News, Network Security
Telnet vulnerability opens door to remote code execution as root
A critical Telnet vulnerability with a CVSS rating of 9.8 enables attackers to take full control of affected systems before authentication even kicks in, security researchers at Dream Security have warned. Tracked as CVE-2026-32746, the vulnerability is in GNU inetutils telnetd, is a widely deployed implementation of the Telnet remote access protocol found across legacy…
AI, Global Security News, malware, Risk Management
Flare Foretrace helps employees detect and fix identity risks to strengthen enterprise security
Flare has unveiled the general availability of Foretrace, a new business-to-business-to-employee (B2B2E) product that delivers enterprise-grade identity protection directly to employees. Built on the same threat intelligence infrastructure used by security teams to defend their organizations, Foretrace allows individuals to monitor and remediate their personal digital identity exposures. The spread of infostealer malware and the…
AI, Global Security News
4chan shrugs off UK regulator, refuses to pay £520,000 over online safety violations
The U.K.’s media regulator Ofcom fined 4chan £450,000 under the Online Safety Act for failing to introduce age checks to stop children from accessing pornographic content on its platform. 4chan is an online forum notorious for its extreme right-wing content, gory videos, and non-consensual pornography. The regulator ordered the company to introduce age assurance measures…
AI, Apps, Global Security News
Versa Secure Enterprise Browser delivers browser-native security for enterprise apps
Versa has revealed early access to Versa Secure Enterprise Browser, a new browser-native security capability within the VersaONE Universal SASE Platform that protects employees, contractors, and partner users as they access web, SaaS, and enterprise AI applications by enforcing security, access, and data protection policies directly within the browser session. The browser has become the…
AI, Exploits, Global Security News, Government & Policy, malware, Risk Management, Russia
DarkSword emerges as powerful iOS exploit tool in global attacks
DarkSword, a new iOS exploit kit, is used by multiple actors to steal data in campaigns targeting Saudi Arabia, Turkey, Malaysia, and Ukraine. Lookout Threat Labs discovered a new iOS exploit kit called DarkSword that has been used since late 2025 by multiple threat actors, including surveillance vendors and likely nation-state actors. The toolkit enables…
AI, Global Security News
7 Ways to Prevent Privilege Escalation via Password Resets
Password resets are often weaker than login security, making them a prime target for privilege escalation. Specops Software explains how attackers abuse reset workflows and how to secure them. […]
AI, Apps, Compliance, Global Security News
Ingram Micro Bets Big on AI for Channel Partners
AI demand is accelerating across the channel, but many partners are still struggling to turn the hype into real revenue. Ingram Micro is positioning itself at the center of that shift, expanding its AI enablement programs and investing in platform-driven innovation to help MSPs and solution providers operationalize AI. Through new training pathways, patented technologies,…
AI, Exploits, Global Security News, Risk Management
Cobalt adds continuous pentesting AI capabilities to scale offensive security and real-world risk
Cobalt has released new AI capabilities for continuous pentesting. Delivered through the Cobalt Offensive Security Platform, these next-generation components integrate AI with human pentesters and more than a decade of proprietary pentesting intelligence to accelerate the speed, scale, and depth of offensive security programs. Attackers are increasingly using AI to automate reconnaissance, vulnerability discovery, and…
AI, Global Security News, Risk Management
Discern brings six AI agents to streamline security analysis, prioritization, and remediation
Discern Security has introduced new agentic AI capabilities across its proactive security platform, designed to help security teams move faster from data to action. As environments become more complex and security teams face growing tool sprawl, fragmented workflows, and too much data with too little clarity, Discern provides an easier way to understand posture, prioritize…
AI, Global Security News
Entro Security AGA brings governance and control to enterprise AI agents and access
Entro Security has launched its Agentic Governance & Administration (AGA), a new pillar of the Entro platform designed to help security and identity teams govern AI agents and AI access across enterprise systems. Applied to the new realities of AI-driven access, AGA brings governance back to fundamentals of inventory, ownership, least privilege, auditability, and enforcement…
AI, Apps, Cybersecurity, Global Security News
The React 19 Security Audit: Hardening Your App Against “React2Shell” and RSC Vulnerabilities
In this post, I will talk about the React 19 security audit: and show you how to hardening your app against “React2Shell” and RSC vulnerabilities. TL;DR The rollout of React 19 Server Components (RSC) fundamentally shifted the application attack surface. This led to critical late-2025 and early-2026 deserialization vulnerabilities, headlined by the CVSS 10.0 “React2Shell.”…
AI, Apps, Global Security News
Komodor unveils Klaudia AI extensibility framework to power multi-agent incident resolution
Komodor has unveiled a new extensibility framework that transforms its Klaudia AI technology into a universal multi-agent platform for troubleshooting and optimizing the performance of complex cloud native infrastructures and applications. This new architecture enables organizations to extend Klaudia AI with their own tools, services and agents, and combine these with more than 50 specialized…
AI, Compliance, Cybersecurity, Data Breaches, Global Security News, malware, Risk Management
Ready for macOS Threats: Expanding Your SOC’s Cross-Platform Analysis with ANY.RUN
Enterprise security teams are no longer defending a single-platform environment. They are expected to investigate threats across multiple platforms every day, often under constant pressure to move faster and make the right call early. When analysis workflows are split across different tools and environments, triage slows down, investigations take longer, and business risks grow. To help SOC and MSSP teams handle cross-platform threats…
AI, Data Breaches, Global Security News, Risk Management
Illumio Defines Breach Containment for the AI Era
AI security graph enhancements build dynamic, real-time picture of system-wide lateral movement risk to direct containment strategy and execution
AI, Apps, Cybersecurity, Endpoint, Global Security News, malware, Network Security, Risk Management
5 Best Rootkit Scanners and Removers: Anti-Rootkit Tools in 2026
This guide is for IT professionals, security teams, and everyday users who want to detect and remove stealthy rootkit malware, and it covers the best rootkit scanners and removal tools available today. Rootkits are particularly dangerous because they embed deep within an operating system, allowing attackers to hide malicious activity and maintain persistent access without…
AI, Cybersecurity, Global Security News, malware
New Perseus Android Banking Malware Monitors Notes Apps to Extract Sensitive Data
Cybersecurity researchers have disclosed a new Android malware family called Perseus that’s being actively distributed in the wild with an aim to conduct device takeover (DTO) and financial fraud. Perseus is built upon the foundations of Cerberus and Phoenix, at the same time evolving into a “more flexible and capable platform” for compromising Android devices…
AI, Global Security News
ECI Software Solutions Named 2026 Great Place To Work in Eight Countries for Employee-Driven Culture
COMPANY NEWS: ECI achievesfifth straight year of recognition in Australia, with employee feedback improving across every category
AI, Apps, Endpoint, Global Security News
ManageEngine Endpoint Central Advances Towards Autonomous Endpoint Security with EDR and Secure Private Access
Company Unveils the First Natively Built Platform Combining UEM, Endpoint Security (EPP with EDR), Digital Employee Experience (DEX), and Secure Private Access Introduces AI-powered endpoint threat detection and automated remediation Enforces Zero Trust access to intranet applications through device trust verification Free trial available at https://mnge.it/EDR
AI, Global Security News
F5 and NVIDIA advance AI factory economics with new capabilities for accelerated AI inference
F5 BIG-IP Next for Kubernetes accelerated with BlueField DPUs improves token throughput, reduces cost per token, and enables secure multi-tenant AI infrastructure, transforming AI factories for the agentic era
AI, Global Security News
Teleport announced Beams, wants to remove major barrier to agentic AI
Teleport today announced Beams, a trusted runtime designed to solve the security and IAM challenges blocking teams from designing and running AI agents in production infrastructure. Beams runs each agent in an isolated Firecracker VM with built-in identity. Each Beam is connected to infrastructure and inference services without secrets, with audit and access control. Beams…
AI, Cybersecurity, Data Breaches, Endpoint, Global Security News
Secure endpoint management systems immediately, CISA urges
The US Cybersecurity and Infrastructure Security Agency (CISA) warns that the cyberattack on Stryker Corporation serves as a signal to U.S. organizations that foreign cyber activity tied to Middle East conflicts may be spilling into their operations. Attackers breached Stryker’s internal Microsoft environment and reportedly wiped 200,000 systems, servers, and mobile devices, while extracting 50…
AI, Global Security News, Risk Management
Delinea finds 90% of Australian Organisations Pressure Security Teams to Loosen Identity Controls for AI
GUEST RESEARCH: New research highlights visibility gaps around AI-driven identities, rising NHI risks, and an AI security confidence paradox
AI, APAC, Global Security News
Jet Technologies Doubles PDQ Labels’ Digital Output with Second Screen L350 Installation
Jet Technologies has completed the installation of a second Screen Truepress Jet L350UV SAI at PDQ Labels, making it the first converter in the ANZ region with two machines, doubling its inkjet output capacity for the next phase in its digital production strategy.
AI, Cybersecurity, Global Security News
Fake Windsurf IDE Extension Uses Solana Blockchain to Steal Developer Data
Cybersecurity researchers at Bitdefender have discovered a malicious Windsurf IDE extension using the Solana blockchain to steal developer credentials.
AI, Cybersecurity, Data Breaches, Global Security News, Network Security
Bot Traffic, Click Farms, and Ad Fraud: The Cyber Threats Marketers Keep Ignoring
Bot traffic and click farms are draining ad budgets worldwide. Discover why ad fraud is a cybersecurity problem and how businesses can fight back. When cybersecurity professionals think about threats, they usually focus on ransomware, phishing, data breaches, and network intrusions. Rarely does ad fraud make the list. Yet this overlooked category of cybercrime is…
AI, Global Security News
How Ceros Gives Security Teams Visibility and Control in Claude Code
Security teams have spent years building identity and access controls for human users and service accounts. But a new category of actor has quietly entered most enterprise environments, and it operates entirely outside those controls. Claude Code, Anthropic’s AI coding agent, is now running across engineering organizations at scale. It reads files, executes shell commands,…
AI, Global Security News, malware
Google limits Android accessibility API to curb malware abuse
Google is restricting how Android apps can use accessibility features after years of abuse by banking Trojans and mobile malware. The changes, introduced in Android 17.2, limit access to the accessibility API when Advanced Protection Mode (APM) is enabled. Apps that do not serve a core accessibility function can no longer use these services, closing…
AI, Data Breaches, Global Security News
900,000 contact records exposed in Aura data breach
Aura, the online safety service, confirmed that an unauthorized party accessed about 900,000 records, mostly names and email addresses from a marketing tool linked to a company it acquired in 2021. The incident occurred as a result of a targeted phone phishing attack that tricked one of the employees. Aura believes that contact information related…
AI, Endpoint, Global Security News
EDR killers are now standard equipment in ransomware attacks
Ransomware attackers routinely deploy tools designed to disable endpoint detection and response software before launching encryptors. These tools, known as EDR killers, have become a standard component of ransomware intrusions. ESET Research tracked nearly 90 EDR killers actively used in the wild. The workflow is consistent across groups: an attacker gains high privileges, deploys an…
AI, Cloud Security, Compliance, Cybersecurity, Global Security News, Risk Management
5 key priorities for your RSAC 2026 agenda
RSA Conference 2026 arrives at a significant inflection point for the cybersecurity industry — one that will see its more than 43,000 attendees and 600-plus exhibitors navigating an agenda that has fundamentally shifted in character. For the first time, “AI” is not a track at RSAC. It is the event. Of the 450-plus sessions across…
AI, Data Breaches, Exploits, Global Security News, Government & Policy, malware, Network Security
Interlock group exploiting the CISCO FMC flaw CVE-2026-20131 36 days before disclosure
The Interlock ransomware group has exploited a Cisco FMC zero-day RCE vulnerability in attacks since late January. The Interlock ransomware group has been exploiting a critical zero-day RCE vulnerability, tracked as CVE-2026-20131 (CVSS score of 10.0), in Cisco Secure Firewall Management Center (FMC) since late January. The vulnerability is a remote code execution flaw that…
AI, Exploits, Global Security News
DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover
A new exploit kit for Apple iOS devices designed to steal sensitive data from is being wielded by multiple threat actors since at least November 2025, according to reports from Google Threat Intelligence Group (GTIG), iVerify, and Lookout. According to GTIG, multiple commercial surveillance vendors and suspected state-sponsored actors have utilized the full-chain exploit kit,…
AI, Global Security News
When algorithms decide: The hidden role of AI in insurance claims
GUEST OPINION: When you file an insurance claim after an accident, you probably assume that a human adjuster will review your case file and decide how much compensation you’ll get. That may have been true several years ago, but today’s claims are being evaluated by artificial intelligence (AI) algorithms. Many of today’s insurance companies rely…
AI, Global Security News
UK: Regulation Drives Cyber Spending for Critical Infrastructure Orgs
35% of security leaders working in the UK’s critical infrastructure said regulatory requirements are the primary influence on their security programs
AI, Data Breaches, Global Security News, Network Security
Your MFA isn’t broken — it’s being bypassed, and your employees can’t tell the difference
Multi-factor authentication was supposed to be the solution. For years, security teams have told employees that MFA would keep them safe. Password stolen? No problem — attackers still need that second factor. But adversary-in-the-middle (AiTM) phishing has changed everything. These attacks do not try to steal passwords and MFA codes separately. They capture the entire…
AI, Europe, Global Security News, Government & Policy, Risk Management, Russia
Russia establishes Vienna as key western spy hub targeting NATO
Russia uses Vienna as its largest Western spy hub, monitoring NATO and other sensitive communications via diplomatic sites and satellite dishes. Western intelligence reports that Russia has transformed Vienna into its largest Western spy hub, steadily expanding surveillance over the past two years. Using diplomatic compounds and rooftop satellite clusters, Russia monitors sensitive communications across…
AI, Apps, Global Security News
Arcjet enables inline defense against prompt injection in production AI systems
Arcjet has released AI Prompt Injection Protection, a new capability designed to stop prompt injection attacks before they reach production AI models. The feature detects hostile prompts at the application boundary and gives developers a decision point inside the request lifecycle where malicious instructions can be blocked before inference occurs. Companies are shipping AI features…
AI, Global Security News
Samba 4.24.0 ships Kerberos hardening and a CVE fix for domain encryption defaults
Samba 4.24.0 arrived carrying a set of Kerberos security changes aimed at Active Directory deployments. The release fixes a vulnerability, extends audit coverage for sensitive AD attributes, and introduces configuration options to counter two related Kerberos impersonation techniques. A CVE drives the encryption default change The most directly security-relevant change in 4.24.0 is a shift…
AI, Global Security News, Network Security, privacy
Java 26 ships with new cryptography API and HTTP/3 support
Oracle released JDK 26, the 17th consecutive feature release delivered under the six-month cadence the project adopted in 2018. The release includes ten JDK Enhancement Proposals spanning language changes, garbage collection improvements, cryptographic tooling, and network protocol support. PEM encoding API targets cryptographic integration JEP 524 introduces a second preview of a PEM encoding API…
AI, Global Security News, Risk Management
Omnix AI Advisor brings real-time credential threat insights to enterprise security teams
Dashlane has unveiled Omnix AI Advisor, a natural-language AI security assistant embedded into the Dashlane Omnix platform. Built upon Omnix’s advanced credential protection and visibility capabilities, Omnix AI Advisor accelerates enterprises’ transition to a proactive security posture by turning real-time credential risk data, such as dark web exposure and phishing logs, into contextual, actionable intelligence.…
AI, Compliance, Cybersecurity, Global Security News, Government & Policy, malware, Network Security, Risk Management
Iran war set to hit global IT spending, IDC warns
The conflict in the Middle East threatens to weigh heavily on the global economy, with soaring oil prices expected to dampen GDP growth and prompt businesses and consumers to reduce technology spending, according to analysts at IDC. The key question – and one with few answers – is how long the fighting will continue. The…
AI, APAC, Apps, Compliance, Global Security News, Government & Policy, Network Security, Risk Management
Anthropic ban heralds new era of supply chain risk — with no clear playbook
The Trump administration’s decision to ban AI company Anthropic from Pentagon assets and other government systems as a “supply chain risk” could force CISOs into a position few have faced before: preparing to identify, isolate, and potentially remove a specific AI technology from across their organizations without a clear understanding of where it resides or…
AI, Compliance, Data Breaches, Europe, Global Security News, Risk Management
The True Cost of Cyber Downtime: A UK Board-Level Briefing
Written by Sean Tilley, Senior Sales Director EMEA at 11:11 Systems Cyber downtime carries measurable financial consequences, and those consequences are becoming clearer with each major incident. Research from 11:11 Systems shows that 78% of European organisations report losses of up to $500,000 per hour following a cyber-related outage, while 6% face costs exceeding £1 million per…
AI, Global Security News
AI got it wrong with high confidence. Now what?
In this Help Net Security interview, Christian Debes, Head of Data Analytics & AI at SPRYFOX, talks about the growing gap between what AI models do and what their operators can explain. He argues this gap is already a liability, particularly when decisions affect people or money and no one can say why a model…
AI, Apps, Global Security News
Your APIs are under siege, and attackers are just getting warmed up
Internet-facing systems are handling sustained levels of malicious traffic across APIs, web applications, and DDoS channels. Akamai’s State of the Internet security report places these patterns within the same operating environment, with activity increasing across each area through 2025. The number of web attacks against apps and APIs continued an upward trajectory from January 2024…
AI, Global Security News
7.2 Terawatt-Hours of Wasted Power. Shipping Containers. WinDC’s Radical Bet on Portable AI Factories in Australia – and the world!
WinDC, with help from Armada and friends, just unveiled the country’s first portable AI factory on Sydney Harbour. Their pitch: stop fighting the grid. Move the compute to where the electrons already are.
AI, Global Security News
Apple Is Way Behind in AI—and Still Making a Fortune From It
The iPhone maker’s AI revenue is set to top $1 billion this year, reassuring investors who are wary of the sky-high spending of its rivals.
AI, Exploits, Global Security News
Interesting Message Stored in Cowrie Logs, (Wed, Mar 18th)
This activity was found and reported by BACS student Adam Thorman as part of one of his assignments which I posted his final paper [1] last week. This activity appeared to only have occurred on the 19 Feb 2026 where at least 2 sensors detected on the same day by DShield sensor in the cowrie logs…
AI, Cybersecurity, Global Security News
Smashing Security podcast #459: This clever scam nearly hijacked a tech CEO’s Apple ID
In episode 459 of Smashing Security, we dive into a chillingly clever account takeover attempt targeting WordPress co-founder Matt Mullenweg – involving MFA fatigue, real Apple alerts, a convincing support call, and a phishing page that oh-so-nearly worked. If a famous techie could have this happen to you, can you be sure you’re immune? Plus:…
AI, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security, privacy
This clever scam nearly hijacked a tech CEO’s Apple ID
In episode 459 of Smashing Security, we dive into a chillingly clever account takeover attempt targeting WordPress co-founder Matt Mullenweg – involving MFA fatigue, real Apple alerts, a convincing support call, and a phishing page that oh-so-nearly worked. If a famous techie could have this happen to you, can you be sure you’re immune? Plus:…
AI, Global Security News
Copyright Lures Mask a Multi‑Stage PureLog Stealer Attack on Key Industries
We investigated a stealthy multi‑stage attack campaign that delivers PureLog Stealer entirely in memory using encrypted, fileless techniques.
AI, Global Security News
Aura confirms data breach exposing 900,000 marketing contacts
Identity protection company Aura has confirmed that an authorized party gained access to nearly 900,000 customer records containing names and email addresses. […]
AI, Apps, Compliance, Cybersecurity, Endpoint, Exploits, Global Security News, malware, Network Security, Risk Management
Top 8 Endpoint Detection & Response (EDR) Solutions in 2026
This guide is for IT and security teams evaluating the best endpoint detection and response (EDR) solutions in 2026, covering top platforms and the features that matter most for threat detection and response. EDR tools play a critical role in identifying and stopping threats at the device level by continuously monitoring endpoint activity and enabling…
AI, Compliance, Cybersecurity, Exploits, Funding, Global Security News, Government & Policy, Network Security, Risk Management
Cisco’s latest vulnerability spree has a more troubling pattern underneath
Cisco customers have confronted a flood of actively exploited vulnerabilities affecting the vendor’s network edge software since late February, and researchers say that five of the nine vulnerabilities Cisco disclosed in its firewalls and SD-WAN systems over the past three weeks have already been exploited in the wild. Attackers exploited a pair of these defects…
AI, Global Security News
Computer Vision Frameworks: Features And Future Trends
Computer vision frameworks explained, features, types, and future trends. Learn how AI tools process images, train models, and…
AI, Exploits, Global Security News
DarkSword: iPhone Exploit Kit Serves Spies & Thieves Alike
A sophisticated iOS exploit chain leverages multiple zero-day vulnerabilities and is targeting users in Saudi Arabia, Turkey, Malaysia, and Ukraine.
AI, Cybersecurity, Exploits, Global Security News, Network Security, Risk Management
U.S. CISA adds Microsoft SharePoint and Zimbra flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SharePoint and Zimbra flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added ([1, 2]) SharePoint and Zimbra flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws added to the catalog: CVE-2026-20963 (CVSS score of 8.8) – Microsoft SharePoint Deserialization…
AI, Global Security News, Risk Management
Severe Cyclone Narelle Category 5 Approaches with 260km/h Winds, as Readiness Becomes Critical
There is a particular kind of silence that settles over a community before a cyclone hits. It is not calm. It is anticipation. You hear it in the way people speak at the local servo, in the steady cadence of official briefings, in the quiet urgency of people preparing their homes. Far North Queensland is…
AI, Exploits, Global Security News, Government & Policy
CISA orders feds to patch Zimbra XSS flaw exploited in attacks
CISA has ordered U.S. government agencies to secure their servers against an actively exploited vulnerability in the Zimbra Collaboration Suite (ZCS). […]
AI, Apps, Compliance, Cybersecurity, Data Breaches, Endpoint, Global Security News, Government & Policy, malware, Network Security, Risk Management
6 Best Digital Forensics Tools Used in 2026
This guide is for security professionals, IT teams, and investigators evaluating the best digital forensics tools in 2026, covering top platforms and how they support modern investigations. As cyber incidents, insider threats, and legal disputes become more complex, organizations need reliable tools to collect, analyze, and preserve digital evidence across endpoints, networks, and cloud environments.…
AI, china, Cybersecurity, Exploits, Funding, Global Security News, Government & Policy, Network Security, privacy
U.S. robotics companies want federal help to keep Chinese robots out of America’s networks
Executives at top U.S. robotics companies asked Congress for federal dollars, new legislation and a simpler regulatory field, arguing the support is necessary to adapt to the AI era and compete with their well-oiled, state-funded Chinese competitors. The U.S. robotics sector, estimated at $50 billion in value, includes world famous companies like Boston Dynamics. The…
AI, china, Global Security News, Government & Policy, Risk Management
The UK may require AI-generated content to be labeled
The United Kingdom is may introduce labeling requirements for AI-generated content as part of a broader review of copyright law, Reuters reports. The aim is to make it easier for consumers to identify material created by AI and protect them against threats such as deepfakes and disinformation. At the same time, the government emphasized that…
AI, Cloud Security, Cybersecurity, Global Security News, Risk Management
Optiv CRO: AI Driving New Enterprise Security Risks
Enterprise security teams are under increasing pressure as AI adoption accelerates, introducing new risks around identity, governance, and operational resilience. Channel Insider spoke with Optiv CRO John Hurley about how enterprise priorities are shifting—and where partners are seeing the most demand in 2026. Optiv’s advisory model reflects shift toward services-led security Optiv supports its enterprise…
AI, APAC, Global Security News, Risk Management
Copilot and Claude Signal a New AI Services Market
In 2026, the conversation around AI coworkers has become a key talking point in the enterprise industry. Anthropic introduced its Claude Cowork program earlier this year, a solution that transcends traditional AI chatbots and appears capable of doing real, task-driven work on its own. Not long after, Microsoft announced its own take on an agentic…
AI, Global Security News
OFAC Sanctions DPRK IT Worker Network Funding WMD Programs Through Fake Remote Jobs
The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has sanctioned six individuals and two entities for their involvement in the Democratic People’s Republic of Korea (DPRK) information technology (IT) worker scheme with an aim to defraud U.S. businesses and generate illicit revenue for the regime to fund its weapons of mass…
AI, Global Security News
“Claudy Day” Flaws Allow Data Theft via Fake Claude AI Ads, Report
Researchers detail “Claudy Day” flaws in Claude AI that could enable data theft using fake Google Ads, hidden…
AI, Exploits, Global Security News, malware, Risk Management
Are you ready for shape-shifting apps?
With a 60% surge in App Store submissions as developers embrace vibe coding and AI-assisted development tools, Apple’s App Store team has identified an emerging security challenge: what happens when an app you download later evolves into something fundamentally different — without Apple having a chance to review those changes. Vibe coding the new attack surface…
AI, Global Security News, privacy
AI could be suppressing wages for young workers
Growing AI adoption has slowed the hiring of young workers in software development and customer service jobs, and recent data suggests it could also be exerting pressure on entry-level wages, according industry experts. “For software developers, there’s been about a 20% decline for entry-level people aged 22 to 26,” said Erik Brynjolfsson, director of the…
AI, Apps, Global Security News
Kore.ai Launches Agent Management Platform to Bring Governance and Control to Enterprise AI
COMPANY NEWS: Kore.ai, a provider of agentic applications and a market-leading enterprise AI platform, today announced the launch of its Agent Management Platform (AMP), a unified command centre designed to govern, monitor, and manage AI agents and AI systems across the enterprise.
AI, Exploits, Global Security News
Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
Amazon Threat Intelligence is warning of an active Interlock ransomware campaign that’s exploiting a recently disclosed critical security flaw in Cisco Secure Firewall Management Center (FMC) Software. The vulnerability in question is CVE-2026-20131 (CVSS score: 10.0), a case of insecure deserialization of user-supplied Java byte stream, which could allow an unauthenticated, remote attacker to
AI, Apps, Compliance, Exploits, Global Security News, Government & Policy, malware, Network Security
Amazon threat intelligence teams identify Interlock ransomware campaign targeting enterprise firewalls
Amazon threat intelligence has identified an active Interlock ransomware campaign exploiting CVE-2026-20131, a critical vulnerability in Cisco Secure Firewall Management Center (FMC) Software that could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device, which was disclosed by Cisco on March 4, 2026. After Cisco’s disclosure, Amazon threat…
AI, Apps, Cloud Security, Compliance, Cybersecurity, Data Breaches, Data Security, Endpoint, Exploits, Funding, Global Security News, malware, Network Security, Risk Management, Venture
Meet the 2026 Cybersecurity Startups Beating Hackers at Their Own Game
Cyber threats are advancing fast in 2026… and startups are leading the charge to stop them. Startups are racing to counter new threats like AI-powered phishing, deepfake fraud, ransomware-as-a-service, and supply-chain attacks. At the same time, venture capital is returning to cybersecurity, AI is reshaping both offense and defense, and regulators are raising the bar…
AI, Apps, Global Security News, Venture
Databricks, Accenture Double Down On Enterprise AI Buildout
Databricks and Accenture are rolling out a joint business group to help companies move beyond the pilot phase and into AI that’s actually up and running. Business group focuses on scaling AI applications through data and consulting expertise The two companies said the group will focus on building and scaling AI applications and agents, combining…
AI, Cybersecurity, Global Security News, malware, Network Security, privacy, Risk Management
Free Antivirus Software Face-Off: Which One Protects Best?
Free antivirus software isn’t what it used to be. It’s better. In 2025, some of the most respected names in cybersecurity are offering powerful tools at no cost. If you’re looking for solid protection without opening your wallet, you’re in the right place. I tested and reviewed the top free antivirus products available today, focusing…
AI, Cybersecurity, Exploits, Global Security News, Government & Policy, Network Security, Risk Management
Researchers warn of unpatched, critical Telnetd flaw affecting all versions
CVE-2026-32746 is a critical flaw in GNU InetUtils telnetd that allows remote attackers to execute code with elevated privileges Cybersecurity company Dream disclosed a critical flaw, tracked as CVE-2026-32746 (CVSS score of 9.8), in GNU InetUtils telnetd that lets unauthenticated remote attackers execute code with elevated privileges. The issue stems from an out-of-bounds write in…
AI, Global Security News, Risk Management
Token Security advances AI agent protection with intent-based controls
Token Security has unveiled intent-based AI agent security, a new approach that governs autonomous agents in enterprise environments by aligning their permissions with their intended purpose. As organizations deploy autonomous AI agents across enterprise infrastructure, security models are struggling to contain the risks. Token Security has been advancing the concept of intent-based security for AI…
AI, Global Security News, Network Security
‘Claudy Day’ Trio of Flaws Exposes Claude Users to Data Theft
A prompt injection vulnerability paired with other flaws can turn a Google search into a full attack chain that could threaten enterprise networks.
AI, Europe, Global Security News
Australian GPS-Alternative Unicorn Raises $110 Million for Expansion
An Australian startup that helps aircraft, ships and other vehicles navigate GPS dead zones has raised $110 million, hitting Silicon Valley’s prized unicorn status as it seeks to accelerate growth in the U.S. and Europe.
AI, Apps, Cloud Security, Data Breaches, Exploits, Global Security News, Network Security, Risk Management
8 Best Application Firewall (WAF) Solutions for 2026
This guide is for IT teams, security professionals, and organizations evaluating the best web application firewall (WAF) solutions in 2026, covering top platforms and how they protect modern applications. A WAF remains a critical component of a strong application security strategy, helping detect and block attacks that target web apps, APIs, and user data. As…
AI, Apps, Compliance, Cybersecurity, Data Breaches, Global Security News, Government & Policy, Network Security, privacy, Risk Management
Protect Your Privacy: Best Secure Messaging Apps in 2026
Think your messages are private? Think again. Someone could be reading them. Someone could be listening to your calls. From public Wi-Fi to fake login pages, attackers have countless ways to slip between you and the person you’re communicating with, without you ever knowing. Without a trusted messaging app, you’re leaving the door wide open.…
AI, APAC, Global Security News
Dropzone AI releases autonomous Threat Hunting agent for continuous SOC detection
Dropzone AI has released the AI Threat Hunter, its newest AI agent that enables security teams to proactively search for threats across their environments around the clock. The AI Threat Hunter is the next agent joining the Dropzone’s Agentic SOC team, expanding what AI agents can do across the full spectrum of detection and response.…
AI, Global Security News
Crypto Scam “ShieldGuard” Dismantled After Malware Discovery
ShieldGuard Chrome extension posed as a crypto security tool but stole wallets and drained user data
AI, Global Security News
Backslash adds cross-product support to secure AI skills in developer environments
Backslash Security has revealed new cross-product support for agentic AI Skills within its platform, enabling organizations to discover, assess, and apply security guardrails to Skills used across AI-native software development environments. The developer ecosystem of AI-powered coding agents and tools is rapidly expanding with new extensibility layers, including Skills, Model Context Protocol (MCP) servers, prompt…
AI, Global Security News
Menlo Security delivers unified governance and threat prevention for AI agents and humans
Menlo Security has unveiled the Browser Security Platform, purpose-built to secure the agentic enterprise, where autonomous AI agents will outnumber human employees and the browser has become the operating system for both. Menlo provides unified control plane to apply machine-speed governance and threat prevention to both human and non-human actors, deployed globally on Menlo’s elastic…
AI, Exploits, Global Security News, Government & Policy, Russia
Second iOS exploit kit emerges from suspected Russian hackers using possible U.S. government-developed tools
Researchers have discovered a second instance of suspected Russian hackers repurposing iOS exploits believed to originally be made on behalf of the U.S. government, pointing to what they say are several foreboding trends. iVerify, Lookout and Google collaborated on the research published Wednesday, a follow-up to earlier revelations about a similar exploit kit, Coruna. While…
AI, Compliance, Cybersecurity, Global Security News
Summit Holdings Debuts “MSP as a Service” Operations Model
Summit Holdings is introducing a new MSP-as-a-Service (MSPaaS) operating model to help managed service providers scale faster and improve profitability amid mounting industry pressures. The offering combines white-labeled operational support with integrated tooling, allowing MSPs to expand service delivery and recurring revenue without adding internal headcount. The move comes as many MSPs face growing cybersecurity…
AI, Apps, Global Security News, Risk Management
Torq Introduces New Agentic Builder for SOC Workflows
Torq, an agentic security operations leader, has announced the debut of Agentic Builder, which turns human intent into agentic outcomes. Delivering production-grade agentic workflows An extension of the Torq AI SOC Platform, the Builder enables SOCs to shift the cognitive load of engineering security automation from humans to machines. The Agentic Builder delivers Cursor-level capabilities…
AI, Global Security News
Nordstrom’s email system abused to send crypto scams to customers
Customers of upscale department store chain Nordstrom received fraudulent messages from a legitimate company email address that promoted cryptocurrency scams disguised as a St. Patrick’s Day promotion. […]
AI, Global Security News
Lwart Environmental Solutions Expands Long-Standing Relationship with Rimini Street, Consolidating VMware and SAP Support to Regain Control of Licensing and Roadmap Decisions
Brazilian oil re‑refinery avoids forced upgrades, stabilises core systems and redirects IT investment toward business innovation
AI, Global Security News
Graylog advances explainable AI and automated workflows for faster threat detection
Graylog has revealed advances in explainable AI and automated investigation workflows that help small-to-mid-sized security teams detect threats faster, investigate with confidence, and cut the manual documentation work that consumes analyst time. “Lean security teams don’t have the luxury of analyst bench depth or months of automation tuning,” said Andy Grolnick, CEO of Graylog. “Every…
AI, Global Security News
Snowflake Launches Project SnowWork, Bringing Outcome-Driven AI to Every Business User
COMPANY NEWS: Designed to orchestrate planning, analysis, and execution, Project SnowWork is an autonomous enterprise AI platform that helps business users accelerate everyday work Launching in research preview to a limited set of customers, Project SnowWork handles complex, multi-step tasks and delivers real, data-driven outcomes to business users Project SnowWork brings Snowflake’s vision for the…
AI, Global Security News, Risk Management
Secure Code Warrior Launches Trust Agent: AI to Enable Safe, Scalable AI-Driven Development
COMPANY NEWS: New AI Software Governance solution makes AI-generated code visible at commit, enforces policy before production, and connects real development behavior to measurable risk reduction
AI, Global Security News
Scans for “adminer”, (Wed, Mar 18th)
A very popular target of attackers scanning our honeypots is “phpmyadmin”. phpMyAdmin is a script first released in the late 90s, before many security concepts had been discovered. It’s rich history of vulnerabilities made it a favorite target. Its alternative, “adminer”, began appearing about a decade later (https://www.adminer.org). One of its main “selling” points was simplicity.…
AI, Compliance, Cybersecurity, Data Security, Endpoint, Global Security News, Government & Policy, Network Security, privacy, Risk Management
Top 7 Full Disk Encryption Software Solutions in 2026
This guide is for IT teams, security leaders, and businesses evaluating the best full disk encryption solutions in 2026, covering how they work and why they matter for protecting sensitive data. Full disk encryption serves as a critical first line of defense by securing hard drives, external storage, and endpoints against unauthorized access. As cyber…
AI, Global Security News, privacy, Risk Management
Firefox is getting a free built-in VPN
Mozilla is adding a free built-in VPN to Firefox, with the feature arriving in Firefox 149 on March 24. Privacy concerns often follow free VPN services, especially when unclear data practices put user information at risk. Mozilla says its version is grounded in its data principles and focus on trust, aiming to avoid the kinds…
AI, Data Breaches, Exploits, Global Security News, privacy, Risk Management
CVE-2026-20643: Vulnerability in WebKit Navigation API May Bypass Same Origin Policy
Just a little over a month after fixing the actively exploited CVE-2026-20700 zero-day, Apple has now issued its first Background Security Improvements release to address CVE-2026-20643, a WebKit vulnerability that could allow maliciously crafted web content to bypass the Same Origin Policy, one of the browser’s core security boundaries. The issue in the limelight adds…
AI, Global Security News, Government & Policy
SideWinder Espionage Campaign Expands Across Southeast Asia
The suspected India-linked threat group targets governments, telecom, and critical infrastructure using spear-phishing, old vulnerabilities, and rapidly rotating infrastructure to maintain persistent access.
AI, Global Security News, Network Security
Corelight’s Agentic Triage turns SOC alerts into evidence-backed investigations
Corelight has introduced a new set of agentic AI capabilities aimed at helping security operations centers (SOCs) cut down on repetitive, time-consuming tasks. The updates are designed to boost analyst efficiency, speed up response times, and build trust through greater transparency. The release includes Agentic Triage to streamline SOC workflows, a new suite of machine…
AI, Global Security News
TrojAI unveils new capabilities to secure agentic AI beyond the prompt layer
TrojAI has announced major new capabilities designed to secure the growing deployment of agentic AI in the enterprise going beyond the prompt layer. “The innovations we are unveiling this week address some of the most significant and rapid changes to the AI security ecosystem. Enterprise deployment of agents is accelerating quickly, and these new TrojAI…