CISA ends weekly vulnerability roundups as part of shift to prioritization approach
The agency wants to help companies sort through the AI-fueled avalanche of bug reports. Source link
Category: CyberSecurityDive
Settra ransomware variant deployed in recent attacks
Security researchers warned that hackers are using VPN credentials for initial access and deploying RMM tools. Source link
FBI, Coast Guard probe suspected cyberattacks on ships entering US waters
The investigation comes at a time of heightened vigilance over U.S. port facilities and maritime security. Source link
CISA looks to recruit general infrastructure security experts rather than sector-focused advisers
“I need people that can pivot from day to day,” the agency’s acting chief told reporters. Source link
Hackers exploit zero-day flaw in Cisco email gateway
Researchers warn the vulnerability could be used by state-linked actors for espionage. Source link
Companies’ AI strategies don’t account for their agentic tools
Businesses are taking AI governance seriously, but their plans lag behind the technology they’re using, according to an EY survey. Source link
AI is now leading driver of new cybersecurity spending
AI investments are expected to help automate security operations and enhance identity and access management. Source link
Malicious actors already using critical GitLab flaw, CISA and others warn
The vulnerability could let unauthenticated users access sensitive files from software-development environments. Source link
Security teams increasingly outflanked by AI agents
A report warns that non-human identities are growing beyond the ability of existing systems to track. Source link
Accountability, oversight and AI: Inside Microsoft’s security transformation
Stung by years of embarrassing hacks, the tech giant overhauled how it approached cybersecurity. Company leaders now say they’re seeing results. Source link
State authorities warn they lack resources to address cyber threat to critical sectors
A report shows that state CIOs and CISOs need additional funding, personnel and training to protect water, energy and healthcare. Source link
How AI anxieties dominated the summer’s big cybersecurity conference
From the CVE Program to autonomous hacks, everyone is worried about the technology’s next evolution. Source link