Amazon security boss: AI makes pentesting 40% more efficient
… However, just like humans, AIs don't always behave in the same way despite security training, and that is why identity and access become vital. …
Search
Ransomware crims abused Cisco 0-day weeks before disclosure
Security Ransomware crims abused Cisco 0-day weeks before disclosure, says Amazon security boss Interlock's post-exploit toolkit exposed Ransomware criminals exploited CVE-2026-20131, a maximum-severity bug in Cisco Secure Firewall Management Center software, as a zero-day vulnerability more than a… …
Security boffins harvest bumper crop of API keys from web
… "These act as access tokens that authorize applications to interact with third-party services, granting direct access to critical infrastructure like cloud platforms and payment providers." Demir contends that API credentials are even more dangerous than exposed login details because they provide p… …
AI agent hacked McKinsey chatbot for read-write access
Security AI vs AI: Agent hacked McKinsey's chatbot and gained full read-write access in just two hours David and Goliath…but with AI agents Researchers at red-team security startup CodeWall say their AI agent hacked McKinsey's internal AI platform and gained full read and write access to the chatbo… …
Outsourcer Telus admits to attack, possibly by ShinyHunters
… Loblaw did not enumerate how many customers were affected by the attack, nor did it explain which system was breached to access the data. "As part of its security response protocol, the company secured its network and customer information," Loblaw stated. …
Lightning-fast exploits mean patch fast, says Cisco Talos
… Good luck, cyber defenders Cisco's report didn't include one single list of recommendations for cybersecurity professionals worried that the speed and craftiness of modern cybercrime will quickly overwhelm them, but there are some pretty important recommendations buried in the report, For example, … …
Gartner suggests Friday afternoon Copilot ban
… Xu, a Gartner research vice-president, offered the advice at the end of a talk titled “Mitigating the Top 5 Microsoft 365 Copilot Security Risks” at the firm’s Security & Risk Management Summit in Sydney on Tuesday. …
Next.js developer Vercel warns customer creds compromised
… The attacker used that access to take over the employee's Vercel Google Workspace account, which enabled them to gain access to some Vercel environments and environment variables that were not marked as “sensitive.” Context.ai has also published a security bulletin that reveals a March incident tha… …
Nvidia wraps its NemoClaw around OpenClaw for security
… Briski describes OpenShell as an open-source safety and security runtime for agents. It sandboxes OpenClaw agents to limit their access to sensitive data and reduce the opportunity for unwanted behavior. …
Perplexity Comet hurtling toward Amazon ban
… In her order, she wrote, "Amazon has provided strong evidence that Perplexity, through its Comet browser, accesses with the Amazon user's permission but without authorization by Amazon, the user's password-protected account … thereby obtaining information as to the user's private Amazon account inf…