How identity fraud became the threat that never sleeps
…Simpler, low-tech methods still persist but have become a blind spot in many companies’ security. The focus on solving the high-tech issue has drawn attention away from the low-tech…
Search
Top AI coding agents can be easy victims to sandbox escapes, showing they aren't as secure as they claim to be
…run with trusted host privileges Agentic security needs its own threat model, researchers claim AI coding agents can be tricked into turning on their operators and assisting attackers in compromising the underlying…
Who decides when a cyber AI tool is safe to deploy?
…Part of the issue is that cyber security has long been treated as a technical problem with a technical solution. Buy the right tools, run the right software and you are covered…
If everyone is rushing to board the AI ship why are so few workflows secure?
…The pace at which organizations have moved from experimenting with AI to embedding it in day-to-day operations, from security workflows to business decision-making, has been remarkable by almost any…
'You're giving ballistic missiles to individuals with Mythos': JPMorgan CEO Jamie Dimon says Anthropic's AI model poses some serious risks
…Public access to the AI has been blocked, and worldwide access has been blocked due to the potential security issues of this powerful AI. Claude Mythos is not the type of threat…
The infrastructure debt AI creates isn't in the code. It's in the operations
Enterprise DevOps teams have adopted AI faster than they have adapted the operational systems that support it. Large language models generate Infrastructure as Code, deployment pipelines, and configuration files in seconds. Development…
A potentially dangerous macOS security flaw went unreported due to Apple being deluged by AI slop bug reports
…certain macOS devices - and would have probably fixed the issue even sooner; had it not been flooded with AI slop vulnerability reports. Security researchers Bynario published an in-depth report discussing finding…
How the gaming and gambling industry can strengthen their cyber defenses
…The Gambling Commission’s remote gambling and software technical standards (RTS) specifically require operators to complete a third-party annual security audit that is mapped to specific sections of ISO 27001. In…
Cloud sprawl taught organizations a lesson. AI is testing whether they learned it
…The challenge is not necessarily that AI introduces entirely new security risks. In many cases, it amplifies existing visibility and governance issues that organizations were already struggling to address. Many security leaders…
Hackers breached DHS after alarms were twice ruled 'false positives'
…Major implications The important question, perhaps, is not how the breach happened, but why confusion and mischaracterization of the security lapse allowed it to become a much bigger issue than it would…