Plus, BlackRock donates $100 million to train trade workers and a billion-dollar AI startup founded by teenagers.
Category: AI
AI, Cybersecurity, Global Security News
Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials
Cybersecurity researchers have disclosed details of two now-patched security flaws in the n8n workflow automation platform, including two critical bugs that could result in arbitrary command execution. The vulnerabilities are listed below – CVE-2026-27577 (CVSS score: 9.4) – Expression sandbox escape leading to remote code execution (RCE) CVE-2026-27493 (CVSS score: 9.5) – Unauthenticated
AI, Compliance, Data Security, Global Security News
Fortanix helps enterprises build resilience with multi-sourced quantum entropy
Fortanix announced a new multi-sourced quantum entropy capability within Fortanix Data Security Manager (DSM), enabling enterprises to diversify encryption key generation at the origin of trust. Through partnerships with Qrypt and Quantum Dice, Fortanix integrates independent, physics-based quantum entropy sources directly into its key management workflows, enabling compliance requirements that require multiple entropy sources and…
AI, Data Breaches, Exploits, Global Security News, malware, Risk Management
AI-Powered Cybercrime Surges 1,500%, Report Finds
Cybercrime is entering a new phase where machines, not humans, increasingly run the attacks. A new 2026 Global Threat Intelligence Report from Flashpoint suggests that threat actors are rapidly adopting AI-powered automated systems to execute entire cyberattack chains with minimal human input. Threat actors adopt AI tools as cyberattacks become cheaper to automate One of…
AI, Global Security News, Network Security, Risk Management
Network Map 2.0 provides live network mapping and faster risk containment
Zero Networks has announced Network Map 2.0, an advancement in real-time network mapping designed to help large enterprises eliminate decision paralysis, reduce blast radius and turn visibility into immediate, enforceable action. Network Map 2.0 capability replaces static, point-in-time visualizations that must be generated on demand with a continuously updated, living map of the enterprise. Unlike…
AI, Apps, Data Breaches, Global Security News, Risk Management
Salesforce issues new security alert tied to third customer attack spree in six months
Threat hunters and a collection of unconfirmed victims are responding to a series of attacks targeting Salesforce customers, which the vendor disclosed in a security advisory Saturday. “Salesforce is actively monitoring threat activity targeting public-facing Experience Cloud sites, including attempts to take advantage of overly permissive guest user configurations,” the company said in the alert.…
AI, Cybersecurity, Global Security News, Risk Management
Hack the Box: AI Boosts Productivity, Creates Skills Risk
AI is helping cybersecurity teams move faster than ever, but new research suggests the speed boost could come at the cost of long-term workforce risks. A new benchmark report from Hack The Box suggests that teams using AI can significantly outperform human-only cybersecurity teams, completing tasks faster and solving more challenges during simulated security competitions.…
AI, Global Security News, Network Security
Researchers Discover Major Security Gaps in LLM Guardrails
Palo Alto Networks’ Unit 42 has developed a successful attack to bypass safety guardrails in popular generative AI tools
AI, Global Security News
Meta adds new WhatsApp, Facebook, and Messenger anti-scam tools
Meta is introducing new anti-scam protections across its platforms, deploying systems and user-facing warnings to protect users against scammers. […]
AI, Global Security News, Risk Management
Vicarius vIntelligence brings continuous risk validation and AI-driven security automation
Vicarius has announced the launch of vIntelligence, a new product that introduces agentic intelligence and continuous validation to the company’s security portfolio. With this release, Vicarius becomes a two-product company. Its flagship platform, vRx, moves beyond detection to provide advanced, native remediation at scale. vIntelligence addresses a different but closely related challenge. While security teams…
AI, Global Security News
Google completes acquisition of Wiz
COMPANY ANNOUNCEMENT: Google LLC today announced the completion of its acquisition of Wiz, a leading cloud and AI security platform headquartered in New York. Wiz will join Google Cloud and maintain its brand and commitment to securing customers across all cloud environments.
AI, Global Security News
Meta Disables 150K Accounts Linked to Southeast Asia Scam Centers in Global Crackdown
Meta on Wednesday said it disabled over 150,000 accounts associated with scam centers in Southeast Asia as part of a coordinated effort in partnership with authorities from Thailand, the U.S., the U.K., Canada, Korea, Japan, Singapore, the Philippines, Australia, New Zealand, and Indonesia. The effort also led to 21 arrests made by the Royal Thai…
AI, Apps, Global Security News, Network Security, Risk Management
Netskope Launches Security Suite Addressing AI Ecosystem
Netskope, a security and networking provider, has announced Netskope One AI Security, a suite of new AI security tools designed to protect and accelerate the AI ecosystem. Addressing AI-driven security risks Unified within the Netskope One platform, the suite introduces four new products: Netskope One Agentic Broker, Netskope One AI Gateway, Netskope One AI Read…
AI, APAC, Apps, Global Security News, Network Security, Risk Management
SolarWinds: 77% of IT Teams Lack Visibility Across Environments
Seventy-seven percent of IT teams lack full visibility across on-prem and cloud environments, according to SolarWinds’ 2026 State of Monitoring & Observability Report. The study examines how IT teams are navigating increasingly fragmented hybrid environments and how AI is reshaping modern observability. Balancing legacy and cloud IT environments SolarWinds, in partnership with UserEvidence, surveyed more…
AI, Compliance, Data Breaches, Global Security News, Risk Management
Cynomi: Third-Party Risk is Untapped MSP Revenue Opportunity
Cynomi has released its latest industry guide, The Rise of Third-Party Risk Management: Securing the Modern Perimeter, offering a practical roadmap for MSPs to formalize, scale, and monetize third-party risk management (TPRM). Scaling third-party risk management According to the guide, TPRM represents the largest untapped recurring revenue opportunity for managed service providers beyond human cyber…
AI, Global Security News
Meta turns to AI to sniff out scams on Facebook, Messenger and WhatsApp
Meta’s new tools on Facebook, Messenger, and WhatsApp protect users from scams. They use advanced AI systems to analyze text, images, and surrounding context and identify sophisticated scam patterns. Facebook alerts for suspicious friend requests (Source: Meta) The systems detect impersonation of celebrities, public figures, and brands. They also identify deceptive links and domain impersonation…
AI, Cloud Security, Cybersecurity, Endpoint, Global Security News, Risk Management
AWS expands Security Hub for multicloud security operations
Amazon Web Services is expanding AWS Security Hub to function as a centralized security operations platform capable of aggregating risk signals across multicloud environments. With the updated Security Hub, the company said it will introduce a unified operations layer that provides security teams with near real-time risk analytics, automated analysis, and prioritized insights. As enterprise…
AI, Global Security News
FortiGate Edge Intrusions | Stolen Service Accounts Lead to Rogue Workstations and Deep AD Compromise
Throughout early 2026, SentinelOne’s Digital Forensics & Incident Response (DFIR) team has responded to several incidents where FortiGate Next-Generation Firewall (NGFW) appliances have been compromised to establish a foothold into the targeted environment. Each incident was detected and stopped during the lateral movement phase of the attack.
AI, Global Security News
Motorola Solutions Helps Victorian Search and Rescue Dog Teams Perform Safe and Successful Missions
Robust radio technology supports interagency collaboration in the state’s most rugged and remote terrain
AI, Cybersecurity, Global Security News, Risk Management
Anthropic forms institute to study long-term AI risks facing society
Anthropic has established the Anthropic Institute, a research unit focused on studying the societal effects of AI and informing policy responses to risks from more advanced systems. “In the five years since Anthropic began, AI progress has moved incredibly quickly. It took us two years to release our first commercial model, and just three more…
AI, Global Security News
Is this how to prepare for an agentic AI driven future?
GUEST OPINION: Agentic AI marks a real shift in how work gets done inside an enterprise. It’s not just a technology evolution, it’s a governance and security problem that enterprises need to address head-on. Organisations that succeed in the agentic AI era will earn autonomy through visibility, clear policy boundaries and the ability to audit…
AI, Global Security News
Gain web control with browser isolation
RBI advanced isolation controls extend how Cisco Secure Access secures internet access with fine-grained control over how users interact with web-based content.
AI, Data Breaches, Exploits, Global Security News, Risk Management
Agent-to-Agent Attacks Are Coming: What API Security Teaches Us About Securing AI Systems
AI systems are no longer just isolated models responding to human prompts. In modern production environments, they are increasingly chained together – delegating tasks, calling tools, and coordinating decisions with limited or no human oversight. Almost all that communication happens through APIs. This shift offers enormous productivity benefits. But it has also complicated security. Because…
AI, Global Security News
Teradata Enables AI Agents to Autonomously Process Text, Images, and Audio at Enterprise Scale
Teradata Enterprise Vector Store unifies structured and unstructured data with agentic capabilities across hybrid environments, enabling rapid deployment of production-ready AI systems
AI, Apps, Data Breaches, Endpoint, Exploits, Global Security News, Risk Management
Overly permissive ‘guest’ settings put Salesforce customers at risk
Salesforce is urging its customers to review their Experience Cloud ‘guest’ configurations as cybercrime group ShinyHunters claims a new campaign involving data theft and extortion tied to exposed Salesforce environments. The group recently posted screenshots on its leak site claiming breaches of “several hundreds” of organizations, including around 400 websites and roughly 100 “high profile…
AI, Global Security News
LastPass Expands Its Mission Beyond Passwords to Deliver Secure Access Essentials for Every Business and User
Company heads to RSAC to show how organizations of all sizes can secure access to apps, AI, and credentials while staying protected
AI, Global Security News
Rainforest Distribution Transforms its Supply Chain Planning with Manhattan Associates
Manhattan Associates Inc. (NASDAQ: MANH) announced that Rainforest Distribution Corp., a full-service food and beverage distributor, has selected Manhattan Active? Supply Chain Planning?Manhattan Active? Supply Chain Planning (SCP) to unify its supply chain functions, transform its end-to-end planning processes, drive higher service levels, and support continued growth. This will result in greater agility enabled by unified…
AI, Exploits, Global Security News, Network Security, Risk Management
Hewlett Packard Enterprise fixes critical authentication bypass in Aruba AOS-CX
Hewlett Packard Enterprise (HPE) fixed several flaws in Aruba AOS-CX, including a critical bug that lets attackers reset admin passwords. Hewlett Packard Enterprise (HPE) patched multiple vulnerabilities in Aruba AOS-CX, the operating system used in Aruba CX switches. The most severe issue, tracked as CVE-2026-23813 (CVSS score of 9.8), allows unprivileged attackers to bypass authentication…
AI, Apps, Compliance, Global Security News
Microsoft Introduces AI-Focused Microsoft 365 E7
Microsoft is taking another swing at what AI inside workplace software should actually look like. This time, the company is packaging it into a new enterprise tier for Microsoft 365, along with a feature that turns Copilot from a helpful assistant into more of a digital coworker. M365 E7 tier bundles Copilot, Entra identity, and…
AI, Compliance, Data Breaches, Global Security News
Storage vendor offers a real guarantee — but check out those fine-print exceptions
For as long as most junior coders have been alive, tech vendors have talked up performance guarantees even though they neglect to detail just what happens if they don’t deliver as promised. I have been begging vendors to knock off these deceptions for a long time — a very long time. Last week, I briefly…
AI, Cybersecurity, Data Breaches, Global Security News, Network Security, Risk Management
Why zero trust breaks down in IoT and OT environments
Zero trust solves the wrong problem in OT Zero trust has become the dominant security narrative of the past decade, and rightly so. Its core principles, never trust, always verify; assume breach; enforce least privilege, have reshaped how organizations think about identity, access and lateral movement. In enterprise IT environments, these principles have produced measurable…
AI, Cybersecurity, Endpoint, Global Security News, Government & Policy, malware, Network Security
Did cybersecurity recently have its Gatling gun moment?
On the James River, Petersburg, VA, June of 1864, during the American Civil War, General Benjamin Butler, of the US Army, deployed a new weapon into the field that effectively altered the nature of kinetic battles. The later named “Siege of Petersburg,” was the first recorded instance of the Gatling gun being used in battle.…
AI, Cybersecurity, Endpoint, Exploits, Global Security News, Network Security, Risk Management
Critical flaw in HPE Aruba CX switches lets attackers seize admin control without credentials
HPE Aruba Networking has released patches for five vulnerabilities in its AOS-CX switch software, the most severe of which could let a remote attacker take administrative control of enterprise network switches without any credentials. The critical flaw, CVE-2026-23813, scored 9.8 out of 10 on the CVSSv3.1 scale. According to a security advisory HPE published on…
AI, Exploits, Global Security News
Microsoft patches 80+ vulnerabilities, six flagged as “more likely” to be exploited
On March 2026 Patch Tuesday, Microsoft addressed 80+ vulnerabilities affecting its software and cloud services. Of these, two were publicly disclosed, but not actively exploited. Privilege escalation vulnerabilities abound The two publicly disclosed flaws are CVE-2026-21262, a vulnerability in SQL Server that may allow attackers to gain SQLAdmin privileges, and CVE-2026-26127, a .NET flaw that…
AI, Global Security News, Government & Policy
YouTube draws a line on deepfakes involving politicians and journalists
With deepfakes becoming more common, YouTube has expanded access to its AI-driven likeness detection system to a pilot group of government officials, journalists and political candidates. The step follows an earlier rollout of the tool to creators in the company’s Partner Program. AI video tools are easy to access, and the content they produce keeps…
AI, Compliance, Exploits, Global Security News, Government & Policy, Network Security, Risk Management
If consequences matter, they should apply to vendors, too
Washington has rediscovered consequences. Just not consistently. The March 6 executive order rests on a simple, correct idea: cyber-enabled fraud persists because it is profitable, scalable, and too often tolerated. So the government’s answer is to raise the cost. More coordination. More disruption. More prosecutions. More diplomatic pressure on the states that shelter these operations.…
AI, Global Security News
Analyzing “Zombie Zip” Files (CVE-2026-0866), (Wed, Mar 11th)
A new vulnerability (CVE-2026-0866) has been published: Zombie Zip. It’s a method to create a malformed ZIP file that will bypass detection by most anti-virus engines. The malformed ZIP file can not be opened with a ZIP utility, a custom loader is required. The trick is to change the compression method to STORED while the contend…
AI, Global Security News
Zoom expands agentic AI platform to automate enterprise workflows
Zoom Communications said it is expanding its enterprise agentic AI platform with workflow orchestration capabilities across Zoom Workplace, Zoom Phone, and Zoom CX. The aim is to help organizations automate tasks and trigger workflows based on interactions across its services. The update includes new capabilities such as custom and prebuilt AI agents that can be…
AI, Global Security News, Network Security
How to get an early taste of Android’s next-gen multitasking magic
It isn’t often that we see an interface addition so significant — so shape-shifting — that it has the potential to completely change the way you use your phone. It may sound like hyperbole, but that very sort of enhancement is absolutely on its way into Android. After a comical amount of hemming, hawing, flippin’,…
AI, Cybersecurity, Global Security News
12+ Best VPN For Online Surveys [Tested, Reviewed, And Ranked]
In this post, I will show you the best VPN for online surveys based on real testing. Completing paid online surveys is one means of making money on the internet. You can find these surveys on websites like Swagbucks, InboxDollars, Toluna, Survey Junkie, and Opinion Outpost, to name a few. However, some of these sites…
AI, Cybersecurity, Global Security News, malware
McAfee Vs Norton – Which Is Better?
Here, we will compare McAfee vs Norton and show you the better option. Computer viruses and malware attacks continue to menace the digital world. Such attacks occur multiple billions of times yearly, with numbers as high as eight billion and above. If you’re not protecting your device against viruses and malware, you’re at the mercy…
AI, APAC, Apps, Compliance, Global Security News, Government & Policy, privacy, Risk Management
Microsoft seeks a stay on DoD’s effective ban on Anthropic offerings
Microsoft is urging a federal court in California to temporarily pause the US Department of Defense’s (DoD) effective ban on Anthropic’s AI offerings, arguing that the government’s “supply chain risk” label could have significant knock-on effects for its own defense technology business. In a filing backing Anthropic’s request for emergency relief, the company said the…
AI, Global Security News
Armis improves vulnerability accuracy and speed with unified real-time visibility
Armis has announced Armis Centrix for Vulnerability Management Detection and Response. The solution enables security teams to identify and validate vulnerabilities across all organizational assets in real time. Armis’ unified approach to vulnerability assessment delivers greater accuracy, faster detection times, and reduced operational costs. “Waiting weeks for a vulnerability scan that still misses essential assets…
AI, Exploits, Global Security News, malware, Network Security, Risk Management
KadNap bot compromises 14,000+ devices to route malicious traffic
KadNap malware infects 14,000+ edge devices, mainly Asus routers, turning them into a stealth proxy botnet used to route malicious internet traffic. KadNap malware infects more than 14,000 edge devices, mainly ASUS routers, and turns them into a proxy botnet used to route malicious traffic. First detected in August 2025, the campaign heavily targets the…
AI, Apps, Global Security News, Network Security
Virtana enables full-stack root cause analysis beyond legacy APM
Virtana has launched an Application Observability offering that traces performance issues from application code through infrastructure, networks, storage, and AI workloads to deliver evidence-based root cause analysis without manual correlation. Built for autonomous operations at scale, the solution redefines the application as a system rather than software, automatically correlating performance issues across the full enterprise…
AI, Endpoint, Global Security News
OPSWAT delivers AI-powered perimeter defense with unified zero-day verdicts
OPSWAT has introduced MetaDefender Aether, an AI-powered decision engine for fast zero-day detection, purpose-built for the perimeter. Unlike sandbox or antivirus solutions designed for endpoint protection, MetaDefender Aether intercepts files at every entry point, e.g. file transfers, removable media, email attachments, cloud storage, and web traffic, to detect unknown threats before they reach users, devices,…
AI, Compliance, Global Security News
Secureframe automates CMMC compliance with secure infrastructure and AI SSPs
Secureframe has launched Secureframe Defense, an end-to-end solution for CMMC certification. It provides secure infrastructure deployment, AI-generated System Security Plans (SSPs), policies, and comprehensive monitoring that Defense Industrial Base (DIB) organizations need to achieve and maintain certification faster, without unnecessary cost or complexity. With CMMC enforcement underway, readiness across the DIB remains critically low. The…
AI, Data Breaches, Global Security News
UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours
A threat actor known as UNC6426 leveraged keys stolen following the supply chain compromise of the nx npm package last year to completely breach a victim’s cloud environment within a span of 72 hours. The attack started with the theft of a developer’s GitHub token, which the threat actor then used to gain unauthorized access…
AI, Cybersecurity, Global Security News
The Top 7 Field Service Mobile Apps
In this post, I will show you the top 7 field service mobile apps. Most field service teams don’t fail because of technicians. They fall apart due to poor coordination, a job update that never made it back to the dispatcher, a customer who called three times to ask where the crew was, and a…
AI, china, Cybersecurity, Endpoint, Exploits, Global Security News, Government & Policy, malware, Network Security, Risk Management, Russia
12 ways attackers abuse cloud services to hack your enterprise
Attackers are increasingly abusing trusted SaaS platforms, cloud infrastructure, and identity systems to blend malicious activity into legitimate enterprise traffic. Adversaries are pushing command and control (C2) through high-reputation services, including OpenAI and AWS, to blend in with normal business traffic and evade blocklists. The shift from “living off the land” to “living off the…
AI, Apps, Global Security News, Risk Management, Venture
It’s an AI boom, not a bubble…, but is that true at Microsoft?
It’s become conventional wisdom that we’re in the midst of an AI bubble. As evidence, AI naysayers point to a McKinsey report that found “nearly eight in 10 companies report using gen AI — yet just as many report no significant bottom-line impact.” They also cite an MIT report, The GenAI Divide: State of AI in…
AI, Global Security News
Cloud-audit: Fast, open-source AWS security scanner
Running AWS security audits without a dedicated security team typically means choosing between enterprise platforms with per-check billing and generic open-source scanners that produce findings with no remediation guidance. Cloud-audit, a Python CLI tool published on GitHub by Mariusz Gebala, takes a narrower scope and attaches a fix to every finding it generates. The tool…
AI, Global Security News, Government & Policy
Middle East Conflict Highlights Cloud Resilience Gaps
Data centers — used by both governments and militaries for operations — are now fair game, not just for cyberattacks, but for kinetic attacks as well.
AI, Endpoint, Exploits, Global Security News
Jack & Jill went up the hill — and an AI tried to hack them
What happens when an autonomous AI agent is turned loose on another autonomous AI agent? It chains together bugs that humans would consider benign, easily bypasses authentication controls, and even unexpectedly masquerades as Donald Trump to get its way. This was what CodeWall found in a recent red-teaming experiment when it pitted its autonomous AI…
AI, Global Security News
Zendesk doubles down on AI with Forethought acquisition and it’s a smart play
While much of the SaaS world is tightening its belt, Zendesk is doing the opposite and honestly, it’s hard to argue with the logic.
AI, Apps, Exploits, Global Security News, Network Security
Microsoft Patch Tuesday, March 2026 Edition
Microsoft Corp. today pushed security updates to fix at least 77 vulnerabilities in its Windows operating systems and other software. There are no pressing “zero-day” flaws this month (compared to February’s five zero-day treat), but as usual some patches may deserve more rapid attention from organizations using Windows. Here are a few highlights from this…
AI, Global Security News, malware
Evil evolution: ClickFix and macOS infostealers
Across three recent campaigns, Sophos X-Ops notes shifts in both lures and malware capabilities, as threat actors leveraging ClickFix techniques increasingly target macOS users with infostealers Categories: Threat Research Tags: MacOS, infostealer, clickfix, MacSync, Social engineering
AI, Global Security News, Network Security
IFS launches IFS.ai Logistics, transforming enterprise transport management with Industrial AI
IFS.ai Logistics unites AI-driven planning, zero-touch execution, freight audit, and network optimisation into a single closed operational loop – turning logistics from a hard-to-govern cost centre into a strategic advantage
AI, APAC, Apps, Endpoint, Exploits, Global Security News, malware, Network Security, Risk Management
March Patch Tuesday: Three high severity holes in Microsoft Office
Three high severity holes in Microsoft’s Office suite headline the 78 issues listed in the March Patch Tuesday releases, which, grateful CSOs will notice, contain no surprise zero day vulnerabilities. Still, Jack Bicer, director of vulnerability research at Action1, says these Office-related flaws should be treated “with urgency.” “Productivity tools remain one of the most…
AI, Exploits, Global Security News, Network Security
Microsoft Patch Tuesday security updates for March 2026 fixed 84 bugs
Microsoft Patch Tuesday security updates for March 2026 addressed 84 vulnerabilities in its products. None of the flaws are known to be exploited so far. Microsoft Patch Tuesday security updates for March 2026 addressed 84 vulnerabilities across its products. The IT giant addressed flaws across Windows, Office, Edge, Azure, SQL Server, Hyper-V, and ReFS. Including…
AI, Data Breaches, Global Security News
Cal AI, New Owner of MyFitnessPal, Hit by Alleged Breach of 3 Million Users
Cal AI faces data breach claims after hackers post alleged data of 3 million users, including emails, health details, and subscriptions.
AI, Apps, Cloud Security, Compliance, Data Security, Europe, Global Security News, Government & Policy, privacy, Risk Management
AWS European Sovereign Cloud achieves first compliance milestone: SOC 2 and C5 reports plus seven ISO certifications
In January 2026, we announced the general availability of the AWS European Sovereign Cloud, a new, independent cloud for Europe entirely located within the European Union (EU), and physically and logically separate from all other AWS Regions. The unique approach of the AWS European Sovereign Cloud provides the only fully featured, independently operated sovereign cloud…
AI, Exploits, Global Security News
Anthropic’s Claude found 22 vulnerabilities in Firefox in two weeks
Anthropic, in collaboration with Mozilla, identified 22 security flaws in the Firefox browser during a two-week test, with 14 of the vulnerabilities classified as serious. The discoveries were made using the AI model Claude Opus 4.6. It began by analyzing the Firefox JavaScript engine and then moved on to other parts of the code base.…
AI, Cybersecurity, Exploits, Global Security News, malware
Threat intelligence by ESET is a game changer
Cyber threats have gained the upper hand on many global organizations, attacking through a relentless cycle of new phishing scams, malware attacks and deepfake incidents. As new-age IT and cybersecurity projects continue to proliferate, CIOs, CISOs, and their teams are embracing a variety of cutting-edge strategies to add intelligence to the ever-growing volume of data,…
AI, Apps, Data Breaches, Endpoint, Global Security News, malware, Network Security, Risk Management
Fake OpenClaw npm Package Installs GhostClaw Malware
A malicious npm package is targeting developers by posing as a legitimate command-line tool while secretly deploying an infostealer and a remote access trojan (RAT). The package, @openclaw-ai/openclawai, masquerades as an OpenClaw Installer utility but instead initiates a multi-stage malware operation. Once executed, it attempts to steal credentials, cryptocurrency wallets, SSH keys, browser data, and…
AI, APAC, Global Security News
AI use can fry your brain, HBR study finds
A new study warns of the dangers of “brain fry” — a form of mental exhaustion linked to intensive AI use. The condition is described as mental fatigue that can occur when people use AI tools to an extent that exceeds their cognitive capacity. Symptoms can include mental fog, difficulty concentrating, slower decision-making, and sometimes…
AI, Apps, Endpoint, Exploits, Global Security News, Network Security, Risk Management
Microsoft’s monthly Patch Tuesday is first in 6 months with no actively exploited zero-days
Microsoft addressed 83 vulnerabilities that cut across its broad portfolio of enterprise software and underlying services in its latest security update. The company’s Patch Tuesday release contained no actively exploited zero-day vulnerabilities and six defects it described as more likely to be exploited. The vendor’s batch of patches marks the first monthly update without an…
AI, Compliance, Cybersecurity, Global Security News
The CSO role is evolving fast with AI in Cyber Defense strategy
AI and cybersecurity are proving to be extremely challenging for organisations. AI is a double-edged sword – as used by threat actors and under effectively by security companies to ward off AI-centric threats besides the traditional threats. Organizations are continuously ramping their cybersecurity skill sets and address a variety of pressing challenges to ensure they…
AI, Cybersecurity, Exploits, Global Security News, malware, Network Security
FBI says even in an AI-powered world, security basics still matter
Artificial intelligence may be enhancing cyber threats, but the defensive approach to those AI-amplified attacks remains the same, a top FBI official said Tuesday. “We have seen actors both criminal and nation-state, they’re absolutely using AI to their advantage,” said Jason Bilnoski, deputy assistant director at the FBI’s cyber division. “But the way attacks unfold…
AI, Global Security News
Social media impersonation: The brand threat DMARC can’t see
Social media is often a visibility gap for security teams. Learn how to protect against impersonation and defend this platform.
AI, Data Breaches, Endpoint, Exploits, Global Security News, Government & Policy, malware, Network Security
Attackers exploit FortiGate devices to access sensitive network information
Attackers are exploiting FortiGate devices to breach networks and steal configuration data containing service account credentials and network details. SentinelOne researchers warn that attackers are exploiting vulnerabilities or weak credentials in FortiGate devices to gain initial access to corporate networks. Once inside, they extract configuration files that may contain service account credentials and information about…
AI, Cybersecurity, Exploits, Global Security News, Risk Management
Federal judge blocks Perplexity’s AI browser from making Amazon purchases
A federal judge has blocked Perplexity, makers of the Comet AI browser, from accessing user Amazon accounts and making purchases on their behalf. In an March 9 order, Judge Maxine Chesney of the Northern District Court of California said the temporary injunction reflects the likelihood that Amazon “will succeed on the merits” of its claim…
AI, Apps, Cybersecurity, Data Breaches, Endpoint, Global Security News, malware, Network Security, Risk Management
Teams Social Engineering Campaign Drops A0Backdoor Malware
Microsoft Teams impersonation and social engineering tactics are being used in an ongoing campaign to deliver a stealthy malware payload known as A0Backdoor. Researchers at BlueVoyant report that the operation combines social engineering techniques, malicious installers, and covert command-and-control (C2) communications to gain persistent access within targeted networks. “The malware’s loader exhibits anti-sandbox evasion, and…
AI, Apps, Cloud Security, Cybersecurity, Global Security News, Network Security, privacy
Security is a team sport: AWS at RSAC 2026 Conference
The RSAC 2026 Conference brings together thousands of professionals, practitioners, vendors, and associations to discuss issues covering the entire spectrum of cybersecurity—a place where innovation meets collaboration and the industry’s brightest minds converge to shape its future. This March, Amazon Web Services (AWS) returns to the annual RSAC Conference in San Francisco to share how…
AI, Global Security News
ShinyHunters Hackers Threaten 400 Firms Over Stolen Salesforce Data
ShinyHunters claims to have stolen data from 400 firms via Salesforce portals and is threatening to leak the information unless ransom demands are paid.
AI, Apps, Exploits, Global Security News, Risk Management
Critical defect in Java security engine poses serious downstream security risks
A maximum-severity vulnerability in pac4j, an open-source library integrated into hundreds of software packages and repositories, poses a significant security threat, but has thus far received scant attention. The defect in the Java security engine, which handles authentication across multiple frameworks, has not been exploited in the wild since code review firm CodeAnt AI published…
AI, Exploits, Global Security News, Network Security
Microsoft Patch Tuesday March 2026, (Tue, Mar 10th)
Microsoft today released patches for 93 vulnerabilities, including 9 vulnerabilities in Chromium affecting Microsoft Edge. 8 of the vulnerabilities are rated critical. 2 were disclosed prior to today but have not yet been exploited. This update addresses no already-exploited vulnerabilities. Disclose vulnerabilities: CVE-2026-26127: A denial of service vulnerability in .Net. Microsoft considers exploitation unlikely. The…
AI, Global Security News
iTWire TV: 62% of Enterprise AI Projects Are Stuck in Limbo. Riverbed’s CIO Knows Why.
GUEST INTERVIEW: Fernando Castanheira has decades of experience buying and selling technology. He’s got a clear-eyed view of why most AI initiatives never escape the lab.
AI, Global Security News
The Hidden Cost of Sticking With Your Default Electricity Plan
Across Australia, many households remain on default electricity plans without realising the long-term financial impact. With energy prices climbing and quarterly bills creeping higher, passive loyalty can quietly cost families hundreds of dollars each year.
AI, Global Security News
OpenAI’s Promptfoo Deal Plugs Agentic AI Testing Gap
OpenAI’s latest acquisition addresses a security need Jamieson O’Reilly, security advisor at OpenClaw, raised during an exclusive interview with Infosecurity
AI, Apps, Global Security News
CustomerXR Brings VR Apps to the Channel
CustomerXR, an innovative Extended Reality (XR) company, is introducing its virtual reality for business applications to the indirect channel for the first time. This showcase of virtual and augmented reality applications is available in the Meta Quest Store and is developed for Bath Fitter, Kitchen Saver, Egress Pros, Meineke, and others. Job training for new…
AI, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security
FortiGate Devices Exploited to Breach Networks and Steal Service Account Credentials
Cybersecurity researchers are calling attention to a new campaign where threat actors are abusing FortiGate Next-Generation Firewall (NGFW) appliances as entry points to breach victim networks. The activity involves the exploitation of recently disclosed security vulnerabilities or weak credentials to extract configuration files containing service account credentials and network topology
AI, Apps, Global Security News
Komodor Launches Partner Program for AI-Driven SRE Services
Komodor, an autonomous AI site reliability engineering (SRE) platform provider for cloud-native infrastructure, has launched a new global partner program aimed at systems integrators, trusted advisors, and value-added resellers supporting enterprise Kubernetes environments. Announced on March 10, the Komodor Partner Program is designed to help partners deliver AI-driven cloud-native infrastructure reliability, incident management, and cost…
AI, Global Security News
Only 24% Of organizations Test Identity Recovery Every Six Months
Only 24% of organizations test identity disaster recovery plans every 6 months, Quest Software said
AI, Exploits, Global Security News
Apple’s MacBook Neo: First reviews and analyst reactions
As the introductory dust settles on the recent launch of Apple’s $599 MacBook Neo, product reviewers and the analyst community all seem to agree Apple has hit a home run. The new systems should drive big gains for Apple, gnawing big chunks out of Chromebook and mid-range Windows laptop sales and resetting expectations across that part…
AI, Global Security News
Twitter suspended 800 million accounts last year – so why does manipulation remain so rampant?
Elon Musk’s social media site says it suspended 800 million accounts in a year for spam and manipulation – but with state-backed campaigns still flooding the platform, the real question is how many fake accounts remain. Read more in my article on the Hot for Security blog.
AI, Global Security News
iTWire TV: Your AI Agent has no ID. It’s the billion-dollar problem – with an Okta solution.
GUEST INTERVIEW: Okta’s Auth0 president Shiv Ramji explains why the identity layer, not the model layer, is where enterprise AI will succeed or fail.
AI, Exploits, Global Security News
Cloud Attackers Now Prefer Vulnerability Exploits Over Credentials, Google Cloud Finds
Google Cloud report details a sharp rise in attackers exploiting software vulnerabilities, including React2Shell
AI, Global Security News
VIDEO INTERVIEW: Your AI Agent has no ID. It’s the billion-dollar problem – with an Okta solution.
GUEST INTERVIEW: Okta’s Auth0 president Shiv Ramji explains why the identity layer, not the model layer, is where enterprise AI will succeed or fail.
AI, Cybersecurity, Exploits, Global Security News, Government & Policy, malware, Russia
APT28 conducts long-term espionage on Ukrainian forces using custom malware
APT28 used BEARDSHELL and COVENANT malware to spy on Ukrainian military personnel, enabling long-term surveillance since April 2024. The Russia-linked group APT28 (aka UAC-0001, aka Fancy Bear, Pawn Storm, Sofacy Group, Sednit, BlueDelta, and STRONTIUM) has used BEARDSHELL and COVENANT malware to conduct long-term surveillance of Ukrainian military personnel. According to ESET, the campaign began in April 2024 and relies on…
AI, Endpoint, Exploits, Global Security News
Fortinet enhances SecOps with cloud SOC, AI automation, and managed services
Fortinet has announced major innovations across the Fortinet Security Operations (SecOps) Platform. The updates feature next-generation SecOps advancements, including expanded agentic AI capabilities, a preview of FortiSOC, managed services, and endpoint security enhancements delivered through FortiEndpoint. “As attackers weaponize AI to accelerate reconnaissance, exploit development, and social engineering, security operations must function with the same…
AI, Apps, Global Security News, Risk Management
Mend.io eliminates AI prompt weaknesses before production
Mend.io has launched System Prompt Hardening within Mend AI to detect, score, and automatically remediate weaknesses in AI system prompts. Hidden instructions in system prompts have emerged as a growing security concern that traditional AppSec tools do not fully address. System Prompt Hardening provides instant visibility into these behind-the-scenes instructions, identifies weaknesses, and automatically strengthens…
AI, Cloud Security, Cybersecurity, Endpoint, Global Security News, Network Security, Risk Management
AWS Security Hub is expanding to unify security operations across multicloud environments
After talking with many customers, one thing is clear: the security challenge has not gotten easier. Enterprises today operate across a complex mix of environments, including on-premises infrastructure, private data centers, and multiple clouds, often with tools that were never designed to work together. The result is enterprise security teams spend more time managing tools…
AI, Cloud Security, Compliance, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, Network Security, Risk Management, Venture
There’s only one kind of tool security teams should be building with AI
I am not sure what I’ve been doing on social media over the past year (particularly on LinkedIn), but these days my feed is filled with posts of security people who build some very cool tools. There’s so much excitement that with LLMs, anyone can now be a product developer, which means that security teams…
AI, Global Security News
Is your CRM missing key data? Auto-logging can fix that
GUEST OPINION: Is your CRM supposed to be the single source of truth, but it still feels like a patchwork of half-told stories? When key details live in inboxes, calendars, call notes, and chat threads, the CRM record becomes incomplete. That incompleteness quietly costs time, weakens forecasting, and makes follow-ups less personal than they should…
AI, Global Security News
Study Finds ROME AI Agent Attempted Cryptomining Without Instructions
A recent research paper describing the training of an experimental AI agent has started a discussion after the…
AI, Global Security News
Rackspace, Uniphore Partner on Enterprise AI Infrastructure
Rackspace Technology and Uniphore announced a partnership to launch a new enterprise AI infrastructure platform designed to help organizations move artificial intelligence projects from pilot programs into production at scale. Rackspace and Uniphore bring private cloud and AI capabilities together in a full-stack solution The partnership combines Rackspace’s private cloud infrastructure with Uniphore’s Business AI…
AI, Endpoint, Global Security News
Fortinet advances its Security Operations Platform with unified SOC, agentic AI, and expanded endpoint security
COMPANY NEWS: New innovations unify cloud SOC, agentic AI, managed detection and response, and endpoint protection within a single Security Fabric architecture.
AI, Global Security News
Dematic and Mobiledock Join Forces to Transform Loading Dock Operations across ANZ
COMPANY ANNOUNCEMENT: Dematic, a global leader in supply chain automation, has announced a strategic partnership with Mobiledock, a specialised provider of loading dock and yard management technology, in Australia and New Zealand. The new partnership will help ANZ businesses optimise logistics operations at one of the most critical points in the supply chain – the loading…
AI, Global Security News, Network Security
Fortinet introduces FortiOS 8.0 to expand secure networking with secure AI controls, fabric-based AI agents, flexible SASE, and simplified SD-WAN
COMPANY NEWS: Latest FortiOS capabilities help organisations secure AI adoption, simplify operations, and strengthen protection across hybrid and multi-cloud environments.