AI agents keep access to company data after their work is done
IT teams responsible for identity security are concerned about AI agents’ ongoing access to company systems and the actions they take on users’ behalf, according…
Month: October 2026
Why CISOs Struggle to Answer the Board’s Three Hardest Questions, and How to Fix the Report
The quarterly board meeting is two weeks out. The security team is pulling exports from the identity provider, the cloud posture tool, the vulnerability scanner,…
Has the time arrived for the retail chief AI officer?
Back in February 2018, Computer Weekly asked the question, “What are the retail jobs that don’t exist yet?”. In the midst of rapid technological change…
AI Agents Aimed SQL Injection at US and Canadian Government Sites
AI agents appear to have attempted to hack a US Department of Education website and a Library and Archives Canada service while trying to access…
Antino backdoor uses your inbox as its control panel
Antino backdoor uses your inbox as its control panel Pierluigi Paganini October 03, 2026 Cisco Talos details UAT-11587, a China-linked group using the Antino backdoor…
2026 Birthday week: network performance update
Cloudflare is now the fastest provider in 74% of the 1,000 largest networks around the world, up from 60% in April 2026. This huge improvement matters because…
Companies Push AI Use But Skip Training and Official Policy
Many employees are using AI at work without formal training. 43% of knowledge workers—office employees whose jobs center on information rather than manual work—say their…
Critical GitLab AI Gateway Vulnerability Enables Remote Code Execution Attacks
GitLab has released urgent security updates for a critical AI Gateway vulnerability that could allow authenticated attackers to execute commands remotely. Tracked as CVE-2026-90970, the…
Exabeam Pushes The “Agentic SOC” Into The Cloud And On-Premises, With Analysts Kept In The Loop
Security operations centres are facing a two-sided problem. Attackers are increasingly automating their campaigns, while inside the business, AI agents and autonomous workflows are multiplying…
Microsoft Warns ClickFix Attacks Use Fake CAPTCHA Lures to Execute Malicious Commands
Microsoft Threat Intelligence has identified a ClickFix campaign in which compromised websites use fake CAPTCHA-style verification prompts to trick Windows users into executing malicious commands.…
Botnets, adversarial attacks and data poisoning top leaders’ AI threat list
Companies are putting more money into AI while naming attacks on AI systems as the threat they are least ready to face. PwC surveyed 3,934…
Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
Ravie LakshmananOct 02, 2026Vulnerability / Cloud Security Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that…