Reachability makes AI threat modeling worth the trust
In this interview with Help Net Security, Oscar Andersson, CTO at Oplane, explains why most scanning tools fail. They cry wolf, flagging threats that cannot…
Month: June 2026
LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers
A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at…
Ineffable Intelligence strikes Google Cloud deal for Vera Rubin GPU power
Frontier artificial intelligence (AI) startup Ineffable Intelligence has selected Google Cloud as its exclusive infrastructure partner to develop the world’s first “superlearner”. The partnership comes…
Amex ordered to implement access controls after insider privacy breaches
Australian privacy commissioner Carly Kind has ordered card issuer American Express (Amex) to implement uniform account-level access and action logging within six months, The Office…
Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges
A Ukrainian national pleaded guilty in a US court to his role in the notorious Conti ransomware group, the Department of Justice announced. The man,…
Infostealers, AI, and a 90% Affiliate Cut Fuel The Gentlemen group’s Rise
Infostealers, AI, and a 90% Affiliate Cut Fuel The Gentlemen group’s Rise Pierluigi Paganini June 15, 2026 The Gentlemen ransomware used infostealer credentials, AI tools,…
NEC Australia and Exabeam expand partnership focused on behaviour analytics for security operations
NEC Australia and Exabeam have expanded their strategic partnership, aiming to help Australian organisations strengthen security operations and address insider risk as automation and AI…
5 runtime signals for catching a compromised AI agent
The trifecta worked as a signal because, at the time, agents were mostly narrowly scoped. An agent capable of performing only one or two of…
Take the Wiz Zero Code Criticals Challenge
It’s been a big few weeks for how we ship code securely. At Wiz we expanded AI-BOM visibility, secure guardrails baked into agentic coding flows,…
Inside the Modern SOC: The 72-Minute Race
The Speed Gap: Where Strategy Meets Reality This marks the beginning of our series, Inside the Modern SOC: Trends and Insights from Unit 42 Managed…
SimpleHelp bug lets hackers create rogue remote support accounts
A vulnerability in the SimpleHelp remote management software allows unauthenticated attackers to create privileged technician accounts on servers using the OpenID Connect (OIDC) authentication protocol.…
Nearly 14,000 SimpleHelp Servers Exposed Amid Critical Authentication Bypass Disclosure
Nearly 14,000 internet-facing SimpleHelp servers are exposed following the disclosure of a critical authentication bypass vulnerability tracked as CVE-2026-48558. The flaw raises serious concerns for…