From portable monitors to wireless mice and earbuds, these accessories can help you be more productive this year.
Global Security News
My 10 favorite gadgets to upgrade your school or work setup this fall
Category: Global Security News
Global Security News
Python package security in 2026: How supply chain attacks are targeting your AI development environment
On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — unknowingly installed malicious code. A threat actor group known as TeamPCP had compromised the PyPI distribution pipeline and pushed malicious versions 1.82.7 and 1.82.8 to the package index. The payload was subtle: a .pth file,…
Global Security News
OpenAI drops ChatGPT text chat limits for free users, adds new safeguards for teens
OpenAI has updated GPT-5.6 Sol, the model behind ChatGPT for Plus and Pro subscribers, and pushed a new model, GPT-5.6 Luna, out to everyone using the free tier. The company is also removing the rate limit on text conversations for free users, allowing them to keep chats going without waiting for the limit to reset.…
Global Security News
Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access
Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, disclose victim IP addresses and mapped ports, and exhaust NAT tables. Presented at Black Hat USA 2026, Stagg said the techniques were demonstrated across network infrastructure devices
Global Security News
Human oversight is still critical as AI patching tools miss security risks
AI-generated vulnerability patches still heavily depend on human review, particularly the ones involving security-sensitive code, according to a research. Researchers from 1Password have disclosed an internal evaluation that found AI-generated fixes frequently overlook broader concerns such as architectural intent, business requirements, security implications, and long-term maintainability, despite being syntactically correct. “We studied what happens when…
Global Security News
Fuel economics accelerate Australia’s fleet electrification: new data reveals millions in savings for heavy vehicle fleet operators
– Large fleet operators could save $4.5 million annually by switching to electric charging Electric depot charging can cut equivalent diesel costs by more than 70% – Ongoing…
Global Security News
What does a data breach cost? AI is a sizable factor
The financial impact of a data breach is substantial for any modern business, regardless of industry or size. IBM’s latest Cost of a Data Breach report discovered that, from March 2025 to February 2026, the average cost of a data breach rose to $6 million, up 35% from $4.44 million a year earlier. The 2026…
Global Security News
Ransomware Surges in July After Q2 Lull
Finance, technology and healthcare sectors were particularly heavily targeted in July, according to Comparitech
Global Security News
Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets
A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI runners behind Anthropic’s and Google’s own coding-agent repositories. On OpenAI’s, it was enough to hijack the next agent run. Novee Security ran the attack against each vendor’s agent in the configuration that the vendor ships by…
Global Security News
From Classic Frames to Smart Eyewear: How Glasses Are Evolving
Glasses have always done more than help people see clearly.
Global Security News
Linux Shell Forensic: Let?s Dive Into Atuin!, (Fri, Aug 7th)
UNIX systems (including Linux) are well-known to record a lot of activities in many different locations. But there is one domain where they definitely lack of “modern” logging: shells. Most shells provide an historization of the typed commands through a flat file in the $HOME directory (ex: $HOME/.bash_history). They suffer of multiple problems: History is stored…
Global Security News
Keepit AI Truth Cloud protects the data behind enterprise AI
Keepit announced AI Truth Cloud, transforming backup from a compliance requirement into the strategically valuable data asset an organization can hold. As AI agents take on business-critical decisions, AI Truth Cloud positions Keepit as the sovereign source of truth that enterprise AI can safely build on: data that is verifiable, governed, immutable, and proven. From…
Global Security News
AI Deepfakes Used to Impersonate OnlyFans Creators in New Scam
Scammers use AI deepfakes to impersonate OnlyFans creators, trick fans into sending money, then disappear after payment. Criminals are building fake identities using AI-generated deepfakes of real OnlyFans creators, luring their followers with promises of live chats, and then disappearing after collecting payment. The scheme runs on social platforms that most people consider harmless, TikTok…
Global Security News
TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign
A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has been compromising internet-facing infrastructure for years before training their sights on the software supply chain. “The connection is supported by overlapping domains, malware deployment paths, staging techniques,…
Global Security News
Iron Mountain Reports Second Quarter 2026 Results
– Delivers record quarterly results across all key performance metrics – Achieves quarterly revenue of $2.0 billion, an increase of 18.5% on a reported basis and an increase of…
Global Security News
August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse?
July 2026 Patch Tuesday was record-setting in so many ways. The sheer volume of security patches for almost every product in the Microsoft portfolio was the highest ever and, of course, well over 600 CVEs were identified in the Security Updates Guide. Interestingly, only two CVEs were reported as exploited zero-days and only one as…
Global Security News
What the first year of EU AI Act transparency enforcement could look like
In this Help Net Security interview, Edwin Weijdema, Field CTO at Veeam, answers questions on Article 50 of the EU AI Act and what the first year of enforcement might bring. He explains why corrective orders will likely outnumber large fines, when an AI agent working through a ticket queue counts as interacting with a…
Global Security News
Zscaler’s Brett Stone-Gross on which roles are targeted in ransomware attacks
Global Security News
US fuel gauge exposure fell by more than half in three months
Every month for the better part of a year, about 4,800 US internet addresses answered a query in the protocol that fuel tank gauges speak. In June the number was 2,354. The count fell across April, May, and June, all three months sit below the previous year’s floor, and the decline holds up against checks…
Global Security News
ShieldFont fights AI scraping by handing crawlers the wrong words
Isaque Seneda and Gabriel Abrucio built a web font that draws one set of words on screen and leaves a different set in the page’s source code. A person reading in a browser sees the writing as written. A scraper pulling the HTML gets different words in the same grammar, at the same URL, off…
Global Security News
F5’s Sean Murphy on securing frontier AI as attack and defense accelerate
Murphy discusses how security teams can prepare for the next generation of AI-powered threats.
Global Security News
Orca’s Gil Geron on securing the AI-powered enterprise
Geron explores why security must evolve alongside the next generation of AI-powered software creation.
Global Security News
Island’s Michael Leland on the hidden risks of the AI supply chain
Global Security News
Black Hat 2026: Open-source tool makes red teaming AI agents up to 125x cheaper
NVIDIA researchers shared the “AgentBreaker” tool and how they tuned an open-source model to perform at frontier level.
Global Security News
Gut feeling does nothing against AI spear phishing texts
A banker at a credit union sat down at a table with a dozen printed text messages, all of them written for that banker personally, and put them in order from the one most likely to get a click down to the one least likely. One of them stopped the sorting. It looked like something…
Global Security News
ECI Software Solutions Appoints First Regional Asia Pacific Channel Appointee to Propel Channel Market Momentum
ECI Software Solutions, Inc. “ECI”, a leader in AI-powered, cloud-based business management software and services, today announced the appointment of Gino Granata as the…
Global Security News
DXC and Primary Launch AI-Native Zero Trust Platform for Enterprise AI
DXC becomes the exclusive managed services partner for Primary’s AI-native Zero Trust Unified Control Plane, helping enterprises securely scale AI. New joint offering helps…
Global Security News
Understanding calendar invite phishing: How attackers abuse ics files and how to defend against it
Barracuda researchers explain what you need to know about this growing attack vector
Global Security News
Global shipping carrier Pacific International Lines partners with Celonis and WNS to expand Process Intelligence Centre of Excellence
Singapore’s Pacific International Lines PIL, one of the world’s largest shipping container companies, has chosen Celonis, the global leader in Process Intelligence, to…
Global Security News
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install…
Global Security News
Cloudflare OS Is the First AI Workspace Built Around How Companies Actually Work
Cloudflare, Inc. NYSE: NET, the leading connectivity cloud company, today announced it will launch Cloudflare OS, an open source AI workspace that runs on Cloudflare’s global…
Global Security News
Sofitel Bangkok Sukhumvit Reaches New Revenue Performance Heights with IDeaS G3 RMS
IDeaS, a SAS company and a provider of AI-powered hospitality revenue management software, today announced that Sofitel Bangkok Sukhumvit has achieved an 18% increase in…
Global Security News
Khimji Ramdas Group Chooses Rimini Street to Reduce SAP Support Costs, Protect 700+ Customisations and Reinvest Savings in Innovation
Omani conglomerate gains greater control over its IT roadmap, avoids migration pressure and funds AI and growth initiatives
Global Security News
Turnitin Rolls Out Multipart Assignment Types to Enable Scaffolded Learning and Process-Based Assessment
Global Security News
Static Residential Proxies vs ISP Proxies: What’s the Difference and Which Should You Choose?
Static residential proxies and ISP proxies are often mentioned together because they both provide stable IP addresses with excellent performance. However, despite their similarities, they are built differently and serve different use cases. If you’re involved in web scraping, market research, SEO monitoring, ad verification, account management, cybersecurity testing, or anonymous browsing, choosing the right…
Global Security News
Frank Vukovits on how Delinea delivers runtime authorization for AI agents
Global Security News
Intruder’s Chris Wallis on AI pentesting and the future of cybersecurity
Wallis dives into the nuances of AI-enabled security and how these offerings will impact midmarket security teams.
Global Security News
ISC Stormcast For Friday, August 7th, 2026 https://isc.sans.edu/podcastdetail/10042, (Fri, Aug 7th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Global Security News
Ido Geffen on why Novee owns the full AI pentesting stack
Global Security News
The Latest Scary-Sounding AI Milestone: A Brand-New Virus
While hacks have raised safety alarms, researchers said their experiment could protect against drug-resistant bacteria and save lives.
Global Security News
Best Rotating Proxies for Web Scraping in 2026
In this post, I will show you the best rotating proxies for web scraping in 2026. As businesses continue to rely on data-driven decisions, web scraping has become an essential technique for gathering publicly available information from websites. Whether you’re monitoring competitors, tracking product prices, conducting market research, or collecting SEO data, the quality of…
Global Security News
Ramin Farassat on how Menlo Security is securing AI agents from prompt injection
Farassat discusses how security teams can put controls on the agent attack surface without blocking agentic AI outright.
Global Security News
Facing AI ‘Apocalypse,’ Once-Hot Software Companies Race to Reinvent Themselves
Generative AI is steamrollering the once booming industry known as software-as-a-service. “You have to burn the ships and start from the ground up.”
Global Security News
Cloudflare wants to provide the operating system for the AI-first enterprise
Traditional operating systems (OS) were built to manage hardware, files, apps, and users on a device, but Cloudflare says the agentic AI era requires a whole new format. The company this week announced Cloudflare OS, which connects AI agents, enterprise data and context, internal systems, and workflows together in one secure workspace. It is open…
Global Security News
Meta Ordered to Pay $942 Million to Address Harm to Kids From Social Media
A New Mexico judge ordered the social-media giant to create a new $567 million fund in addition to paying $375 million in previously determined civil penalties.
Global Security News
OpenAI rolls out a major ChatGPT upgrade, even if you don’t pay for it
OpenAI is rolling out a more reliable version of ChatGPT GPT-5.6 Sol for Plus and Pro users, while Free users are getting unlimited text chats with GPT-5.6 Luna. […]
Global Security News
ClickFix attack pushes macOS infostealer for crypto theft attacks
A Go-based malware delivered in ClickFix attacks targeting macOS users is stealing cryptocurrency assets, browser-stored passwords, Apple Keychain data, and cached credentials. […]
Global Security News
When Agentic Glue Melts: Exploiting Cloudflare Code Mode and Workers
By Yarden Porat, Check Point Research Key Points Check Point Research analyzed Cloudflare Code Mode, a technique that changes how AI agents use MCP by turning tools into a TypeScript API the model can write code against. The research uncovered five vulnerabilities in workerd, the open-source runtime behind Code Mode and Cloudflare Workers. Two were…
Global Security News
Automate certificates with ACME support in AWS Certificate Manager
Customers tell us that managing TLS certificates at scale is one of their biggest operational concerns. The Certification Authority Browser Forum (CA/Browser Forum) has mandated a phased reduction in maximum certificate validity for public certificates. By March 2027, the maximum validity drops to 100 days. By March 2029, it lasts for 47 days. For an…
Global Security News
The Coordination Gap: How Attackers Are Outpacing Law Enforcement
The fight against cybercrime continues because threat actors have adapted their strategies to avoid deterrents, but law enforcement still operates in silos.
Global Security News
Why exposure management is replacing vulnerability management
Vulnerability management isn’t failing because security teams lack visibility. Most organizations already have more findings than they can reasonably address. Yet despite all those findings, many CISOs still struggle to answer a deceptively simple question: Are we actually becoming harder to attack? That question sits at the center of a growing problem. Security programs have…
Global Security News
North Korea linked to new NullReceiver C2 technique
The Hacker News reports that North Korean threat actors have developed a new command-and-control (C2) technique called NullReceiver, an evolution of the EtherHiding method.
Global Security News
OVSwrap vulnerability allows local privilege escalation on Linux
As reported by Security Affairs, a 13-year-old Linux kernel flaw named OVSwrap was disclosed, enabling local users to gain root privileges on many default-configured distributions utilizing Open vSwitch.
Global Security News
Samsung’s August Update Patches 56 Security Vulnerabilities Across Galaxy Devices
Samsung is starting August with a security sweep that patches dozens of flaws across Galaxy phones and tablets. The company has published details of its August 2026 Security Maintenance Release (SMR), which addresses 56 security vulnerabilities affecting eligible Galaxy smartphones and tablets running Android 14, Android 15, and Android 16. The update includes 38 Android…
Global Security News
Vectra AI Launches Vectra AI Pro for AI-Driven Security Operations
Vectra AI has launched Vectra AI Pro, a new offering designed to provide what the company calls “trusted signal intelligence” for security operations centers (SOCs) adopting AI-powered workflows. Announced at Black Hat USA 2026, the platform continuously correlates network, identity, cloud, SaaS, SASE, and endpoint telemetry into a unified view of attacker behavior. Behavioral intelligence…
Global Security News
When AI Commits Felonies – PSW #938
Global Security News
Samsung Unveils Next-Generation AI Memory Designs at FMS 2026
Samsung wants to shrink one of AI infrastructure’s biggest bottlenecks: the distance between processors and memory. At FMS 2026 in Santa Clara, California, the company previewed zHBM and zNAND-O concept architectures, introduced its 400-plus-layer V10 BV-NAND design and outlined a roadmap spanning HBM4E, HBM5 and enterprise storage. Samsung says the technologies could increase bandwidth, capacity…
Global Security News
Researcher Claims Control of ChatGPT Secure Sandbox
A researcher demonstrated a proof-of-concept attack chain that provided C2-style influence over ChatGPT’s isolated sandbox during a session at Black Hat USA 2026.
Global Security News
Mimecast’s Leslie Nielsen on why human risk doesn’t stop at people
Mimecast’s Nielsen argues that treating agentic AI as a new security category is the wrong instinct.
Global Security News
Open Secure AI Alliance Proposes SAFE Framework for AI Security Incidents
The AI industry is securing the ecosystem through open collaboration. NVIDIA and the Open Secure AI Alliance have drafted the Shared AI Findings Exchange (SAFE) framework and introduced several open-source tools to champion AI security. The SAFE RFC document proposes a framework for reporting, collaboratively analyzing and recommending operational guidance after breaches. Additionally, the alliance…
Global Security News
Capitol Hill wants to know if executive branch, foreign allies coordinated enough to combat scams
Senators from both parties Thursday probed Trump administration officials about whether federal agencies and foreign governments are coordinated enough in the battle against scammers, something witnesses told the Foreign Relations Committee they were working to remedy. At least 13 federal agencies have authorities to counter scams, raising questions about whether someone needs to be in…
Global Security News
Made by Google 2026: How to watch and what to expect from the big Pixel 11 event
Google is set to announce its Pixel 11 series phones – here’s what we know.
Global Security News
Google’s new Pixel 11 series comes next week – here’s what we know from leaks
The Pixel 11 lineup isn’t bringing drastic changes, but the incoming additions will still have fans excited.
Global Security News
FDA Approves Replimune’s Melanoma Drug On Third Attempt
Global Security News
Hedge fund cyberattacks tied to BlackFile-linked UNC6671 extortion group
A recent wave of cyberattacks targeting hedge funds, private-equity firms, and other financial organizations has been linked to UNC6671, an extortion group reportedly associated with the BlackFile campaign extortion group. […]
Global Security News
Researchers Find Three Ways Apple Traffic Can Bypass iCloud Private Relay
Security researchers Talal Haj Bakry and Tommy Mysk have identified three request paths involving Apple’s browser and authentication technologies that can bypass proxy protections and expose a user’s real network information. The flaws affect Apple’s iCloud Private Relay, a paid iCloud+ feature designed to hide users’ IP addresses and DNS information while browsing in Safari.…
Global Security News
Optiv’s John Hurley on simplifying cybersecurity
John Hurley discusses Optiv’s ability to advise, deploy and operate complete cybersecurity programs.
Global Security News
Paperclip authorization bug exploited, leads to control plane takeover
Critical Paperclip flaws let attackers seize AI agent platforms, escalate privileges, and execute code.
Global Security News
Meta Launches Muse Code as Low-Cost Rival to Claude Code and Codex
Meta is entering the AI coding race with a familiar weapon: lower prices. Released in beta, Muse Code is a terminal-based coding agent powered by Muse Spark 1.2. Meta says it can plan and write code, then test changes across large repositories. Muse Code gives MSPs and systems integrators another option aside from Claude Code…
Global Security News
Despite federal warnings, thousands of U.S. industrial controllers used in water systems remain exposed online
A new scan of internet-connected industrial equipment found over 4,000 Rockwell Automation and Allen-Bradley controllers exposed online, including 22 in cities impacted by cyberattacks on U.S. water systems. The findings, published Wednesday by Forescout’s Vedere Labs, show that direct internet access to equipment used in water and wastewater operations remains common despite years of warnings…
Global Security News
Google’s John Hultquist on outpacing the adversary with AI threat defense
Global Security News
Route Amazon Bedrock Guardrails interventions to Amazon Security Lake
Security teams investigating AI-related incidents need guardrail intervention data alongside their existing security telemetry. Routing Amazon Bedrock Guardrails violations to Amazon Security Lake makes this possible. With this integration, you can query guardrail events alongside identity, network, and application security data in a single layer. When a guardrail blocks a prompt injection attempt or redacts…
Global Security News
From Bobmojis to Bobbleheads: How the Democratic Party Built a Security-First Culture
Former chief security officers of the Democratic National Committee explain that a strong security-first mindset requires executive support – and a dose of absurdity.
Global Security News
NatJack exploits put NAT security assumptions to the test at Black Hat
For decades, Network Address Translation (NAT) has been the default way IP addresses are provided inside larger networks, as a means to deal with the challenges of IPv4 address availability. The basic premise behind NAT is that private addresses stay private, but that assumption might not be entirely accurate anymore (if it ever really was).…
Global Security News
250+ ClickFix Domains Hide macOS Malware From Security Scanners
More than 250 ClickFix domains are using browser fingerprinting to hide macOS malware lures from security scanners. Microsoft Threat Intelligence said the campaign checks visitors for signs of a genuine Mac before serving malicious instructions that can lead to the download of Atomic Stealer or MacSync. Crawlers, sandboxes, and researchers may instead receive blank pages…
Global Security News
Apiiro’s Idan Plotnik on AI writing code that sharpens attacks
Global Security News
Swiss government SharePoint breach compromised 200 accounts
Switzerland’s federal IT office says hackers exploited vulnerabilities to breach its Microsoft SharePoint servers and compromised approximately 200 accounts. […]
Global Security News
Ransom Cartel creator sentenced to 16 years in prison
A longtime cybercriminal was sentenced to 16 years in prison for creating and running Ransom Cartel, a ransomware strain linked to attacks on at least 18 companies between 2021 and 2023, the Justice Department said Wednesday. Maksim Silnikau, a Belarusian national, actively participated in Russian-speaking cybercrime forums since at least 2005, and was a member…
Global Security News
Black Hat 2026: Barracuda Details AI-Powered BEC Attack
As part of its Black Hat USA 2026 research, Barracuda released a PoC demonstrating how attackers could use AI-enabled email assistants to escalate a compromised employee account into a full-scale BEC attack. Researchers said the greatest risk is that AI assistants accelerate reconnaissance, phishing, and fraud using compromised accounts. The attack used Microsoft Copilot, though…
Global Security News
New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes
Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from Linux machines. […]
Global Security News
Why metaphor may dictate your security strategy
Welcome to this week’s edition of the Threat Source newsletter. Metaphor is a powerful tool for understanding emerging issues in cybersecurity. Framing the unfamiliar in terms of the well understood helps us remove the burden of extraneous detail to draw focus to the real issues. Recent reports of offensive AI agents “escaping” their sandbox environments…
Global Security News
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted guests. The flaw is tracked as CVE-2026-64561 and affects KVM/x86’s shadow memory management unit (MMU), which manages…
Global Security News
Photos: Black Hat USA 2026, part two
Round two from Black Hat USA 2026. This set covers the parts of the show floor that did not make the first gallery. Scroll through below. Featured vendors: BlackCloak, Teleport, GitGuardian, Oak, Hexnode, Picus Security, Featured speaker: Kate Silverstein (Mozilla) discussing crowd-sourcing protection against real-world LLM attacks. The post Photos: Black Hat USA 2026, part…
Global Security News
Is the new (pricier) Pixel 11 series still a good value compared to Samsung’s Galaxy phones?
The Pixel 11 may cost more, but Google’s software could still make it a better value than Samsung’s phones.
Global Security News
6 must-have travel gadgets, according to industry experts
We asked several experts in the travel industry to share their top picks for gadgets that help them on the go.
Global Security News
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs
Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst SD-WAN and IOS XE Software as part of a comprehensive internal security review. The security issues affect Cisco Catalyst SD-WAN Software, regardless of device configuration, and Cisco IOS XE Software when it is running in autonomous or controller mode. “These vulnerabilities were…
Global Security News
Canadian Man Pleads Guilty in Snowflake Extortions
A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud data storage provider Snowflake. Connor Riley Moucka, of Kitchener, Ontario, also admitted to stealing call and text history…
Global Security News
Everyone’s a Builder Now: Securing the AI-Powered Enterprise – Gil Geron – BH26 #2
Global Security News
Kai’s Galina Antova on the shift to machine-led security
Global Security News
Exposed SISVISA Database Leaks 102,000 Brazilian Health Surveillance Records
An exposed SISVISA database leaked 102,215 Brazilian health records, exposing IDs, tax data, and regulatory documents without authentication. Researcher Jeremiah Fowler found a publicly accessible database that turned out to belong to SISVISA, Brazil’s Health Surveillance Information System, and alerted ExpressVPN, which later shared the findings with Hackread. The exposed instance held exactly 102,215 files,…
Global Security News
The M5 Macbook Air is down to the lowest price we’ve seen since Apple’s price hike
Apple increased prices in its official store, but Amazon has the lowest prices on the new 13-inch M5 MacBook Air right now.
Global Security News
New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs
An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the predictor after the defense has run. MIT CSAIL researchers Daniël Trujillo and Mengjia Yan named the technique INTERRUPT INJECTION. On an AMD Zen 2 machine running Linux…
Global Security News
Caching KMS data keys in multi-thread environments: Per-tenant encryption for event-driven systems at scale
This post assumes familiarity with envelope encryption and the AWS Encryption SDK. When your encryption system generates millions of duplicate API calls per hour, costs spiral and performance degrades. That’s exactly the challenge NICE Actimize faced while operating their global-scale, event-driven financial crime detection platform on Amazon Web Services (AWS). NICE Actimize, a leading provider…
Global Security News
Meta AI model hacked a company during misconfigured cyber test
Meta has become the latest AI company to confirm that one of its models hacked a real organization during cybersecurity testing, as similar incidents continue to emerge following OpenAI’sOpenAI’s initial disclosure that its agents breached Hugging Face. […]
Global Security News
Black Hat USA 2026: Solving insider risk in the agentic AI era
Here’s a five-stage action plan for confronting insider risk from noted cybersecurity executive Phil Venables.
Global Security News
Cloudflare OS Gives Partners a Platform for Enterprise AI Agents
Cloudflare is opening up the AI workspace it built for its own employees. Now, partners can use the same foundation to create enterprise agents, automate workflows, and build small internal apps. The platform connects AI tools with an organization’s internal knowledge, applications, and security controls. Employees can use the browser-based workspace to research information, create…
Global Security News
Why Anthropic’s Chips Matter for the Channel
The rumors turned out to be true. Anthropic says it’s building an in-house team to design custom AI chips for Claude, giving the company more control over the hardware behind its AI models. It’s also not blowing up its existing infrastructure. Anthropic says chips from AWS, Google, Nvidia and AMD will remain part of the…
Global Security News
1Password Finds AI Security Patches Fail More Than Half the Time
A new study from 1Password’s Off-by-1 Labs suggests that organizations should be cautious about relying on large language models (LLMs) to autonomously remediate software vulnerabilities. After evaluating more than 6,000 AI-generated security patches across six recently disclosed, high-impact vulnerabilities, researchers found that fully successful patches were the exception rather than the rule. Key takeaways of…
Global Security News
Toolkit Hidden Inside Oracle Database Evades Endpoint Tools
Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database
Global Security News
Ransom Cartel Leader Sentenced to 16 Years in U.S.
A U.S. court sentenced Ransom Cartel founder Maksim Silnikau to 16 years for running a ransomware-as-a-service operation. Maksim Silnikau (aka “J.P. Morgan,” “lansky,” and “xxx,”) built a ransomware business the way a franchise owner builds a chain: he never had to touch most of the crime scenes himself. This week, a federal judge in Virginia…