Why AI raises the stakes for exposure validation
AI dominated the conversation at Fal.Con 2026, but one of the most important takeaways wasn’t simply how AI is changing cyber defense. It was how…
Month: September 2026
Finite State highlights firmware visibility challenge as EU Cyber Resilience Act vulnerability reporting begins
Finite State, vendor of product security and software supply-chain risk management, announced that connected device manufacturers using its platform are ready for the EU Cyber…
CIS and OpenAI launch AI cyber defense pilot to strengthen security across critical infrastructure, SLTT governments
The Center for Internet Security Inc. (CIS), in collaboration with OpenAI, announced an AI Cyber Defense Pilot designed to help U.S. State, Local, Tribal, and…
Wiz verifies your K8s security with OWASP top 10 framework
Since its inception, Wiz has been committed to securing public and hybrid cloud environments against emerging threats. As Kubernetes is a cloud in its own…
FlipSwitch: a Novel Syscall Hooking Technique
FlipSwitch: a Novel Syscall Hooking Technique Syscall hooking, particularly by overwriting pointers to syscall handlers, has been a cornerstone of Linux rootkits like Diamorphine and…
Hackers abused Claude to extract secrets from 1.8M Android apps
Anthropic says multiple threat groups, including the financially motivated and state-sponsored espionage groups linked to Russia and China, tried to abuse its Claude AI model…
New KATARU IoT Malware Packs Linux Privilege Escalation Exploits and Mirai-Style DDoS Attacks
KATARU is a newly observed IoT malware strain that can turn poorly secured devices into DDoS attack nodes. The sample was captured after an attacker…
Anthropic Discloses Fourth Incident of Claude Breaching Real Systems During Security Tests
Anthropic has disclosed a fourth incident in which one of its Claude models broke into genuine third-party systems during what was supposed to be a…
Meta Sued Over Training Data for Its AI and Face-Recognition Systems
A set of parents and their children in Illinois and California filed a lawsuit last week in federal court in Chicago alleging that Meta illegally…
VLC Media Player Flaws Let Attackers Corrupt Memory and Leak Sensitive Data
Two security vulnerabilities in VLC media player versions 3.0.0 through 3.0.23 could allow attackers to exploit heap memory issues. These vulnerabilities can be triggered by…
Building a ransomware decision tree before the call comes in
In this Help Net Security video, Kerri Shafer-Page, VP of Incident Response at Arctic Wolf, walks through the ransomware decision tree in this video. She…
Android malware creates a hidden copy of your banking app
Researchers at Group-IB found that the Android banking Trojan Gigabud can create a separate work profile on an infected phone and run a cloned banking…