Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps
Detecting an AI agent attack isn’t simply finding multiple small needles scattered in a large haystack; it is recognizing whether and for what purpose the…
Latest Cybersecurity News — Page 51
View all →
Volt Typhoon Used Silent Train to Hide Zero-Day Attacks
Volt Typhoon Used Silent Train to Hide Zero-Day Attacks Pierluigi Paganini October 29, 2026 Volt Typhoon used disposable relay chains to hide zero-day attacks on…
Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
Prosecutors announced charges against six alleged scammers based out of Africa who targeted Americans with fake non-fungible token (NFT) investment scams by posing as women…
Lessons from cybersecurity Black Week
The week leading up to October 25, 2026, was every cyber defender’s nightmare: a barrage of critical vulnerabilities in PHP and the Linux kernel, a…
Anthropic and OpenAI diverge on who should pull the plug on risky AI
“We recommend using the term ‘shutdown controls’ because it will require the development of multiple controls and coordinated action by different actors to stop AI…
McCormick introduces Common-Sense Cloud Security Act to strengthen cloud defenses, protect critical infrastructure
A U.S. Republican Representative from Georgia introduced the Common-Sense Cloud Security Act to strengthen cloud cybersecurity by directing the National Institute of Standards and Technology…
CISA 2030 targets OT modernization, asset visibility, supply chain security through risk-based critical infrastructure defense
The U.S. Cybersecurity and Infrastructure Security Agency released a new strategy that shifts the nation’s cyber defense from passive measures to finding and removing adversaries…
Let it snow! Wiz and Snowflake join forces to power insights with actionable intelligence
Today, we proudly announce an expanded strategic partnership with Snowflake, the Data Cloud company. This partnership helps joint customers leverage their Snowflake security data lake…
Windows Exploitation Techniques: Dangling COM Object Registrations
This short blog post is about abusing a privilege escalation bug that Microsoft recently fixed in Windows, CVE-2026-66804, that I and 14 others reported. This…
Upwind Security raises $400 million in Series C funding.
Marketplace Anthropic’s I.P.O. Prospectus Spells Out a Future of Promise and Peril (New York Times) The A.I. company took great pains to describe the many…
New Cisco firewall zero-day exploited to crash SSL VPN devices
Cisco released security updates to patch a denial-of-service zero-day in Adaptive Security Appliance (ASA) and Threat Defense (FTD) software that attackers are exploiting to remotely…
Hackers Attack FreePBX Servers With Malware to Steal SIP Credentials for Phone Fraud
Hackers targeting FreePBX phone servers have upgraded their malware to steal credentials that can keep phone fraud running even after an infected system is rebuilt.…