Alice Raises $140M to Expand AI Model Defenses and Enterprise Guardrails
AI trust, safety, and security company Alice announced on Tuesday that it raised $140 million in a funding round to secure AI systems against emerging…
Category: SecurityWeek
Linux Foundation to Govern TRACE, an Open Standard for AI Runtime Attestation
The Linux Foundation said Tuesday it will take on governance of TRACE (Trust, Runtime Attestation and Compliance Evidence), a new open specification for producing verifiable…
WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities
Threat actors have been attempting to hack WordPress websites by exploiting two recently patched vulnerabilities affecting a MiniOrange plugin. The two vulnerabilities are CVE-2026-61979 and…
CISA Warns of Exploited Oracle WebLogic Vulnerability
The cybersecurity agency CISA has instructed government organizations to immediately patch a critical vulnerability that has been widely exploited in attacks against Oracle WebLogic servers.…
91 Vulnerabilities Patched in Spring Application Framework
The developers of Broadcom’s Spring application development framework last week announced the release of updates that patch 91 vulnerabilities. Spring is an open source application…
Uber Fined Nearly $1 Billion by Dutch Regulators Over Automated Suspensions of Driver Accounts
Dutch data protection authorities have fined Uber nearly $1 billion, saying the ride-hailing company used automated software to suspend driver accounts, sometimes permanently, with no…
ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited
Cybersecurity firm ReliaQuest has confirmed being targeted by hackers affiliated with the notorious ShinyHunters group, but claims the impact of the attack was limited. ReliaQuest…
Hired for One Job, Judged on Another: The CISO’s Real Problem
Industry surveys have long put CISO tenure below that of other C-suite roles, and part of the reason is a double standard. During recruitment, the…
TikTok Reaches $400 Million Settlement With US Justice Department Over Children’s Privacy
TikTok has reached a $400 million settlement with the U.S. Department of Justice, ending a 2024 lawsuit alleging the company violated federal children’s privacy laws.…
CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities
The US cybersecurity agency CISA on Thursday warned federal agencies that threat actors have been exploiting two vulnerabilities in TrueConf. A secure on-premises video conferencing…
Microsoft Patches Exploited Entra ID Vulnerability
Microsoft on Thursday announced the rollout of 22 new security updates that resolve severe vulnerabilities across multiple products, including a critical Entra ID zero-day exploited…
Contractors’ CMMC Confidence Rises as Ability to Prove It Falls Behind
Two industry surveys released this week paint a consistent picture of the defense industrial base: contractors say they’re more confident in their cybersecurity compliance than…