Shadow AI, leadership resistance make AI governance tough for worried CISOs
Fewer than half of CISOs think their bosses see AI security as a business enabler, according to an Okta survey. Source link
Latest Cybersecurity News — Page 89
View all →
Okta acquires Permiso for AI identity threat detection
Okta announced Thursday it has signed a deal to buy Permiso Security, a cloud-based firm that tracks threats tied to human, machine, and AI-driven digital…
Trump nominee vows to sharpen US media challenge to China
US President Donald Trump’s nominee to lead the United States’ international broadcasting agency pledged on Thursday to sharpen its media challenge to China, including by…
Coordinated Minnesota water systems cyberattack leaves feds chasing two open questions
“Depending on configuration,” Caveza explains, “an attacker could gain monitoring capability, manipulate what operators see, or in some circumstances modify operational settings.” Fortunately, manual safety…
Max-severity Exchange server flaw under active exploitation by Kremlin hackers
Russian state hackers are using a maximum-severity vulnerability in Microsoft’s Outlook’s Exchange Server to backdoor unpatched machines and steal credentials and other confidential information from…
Extend Amazon Inspector SBOM Generator with Plugins
Amazon Inspector is an automated vulnerability management service that continually scans Amazon Web Services (AWS) workloads for software vulnerabilities. The vulnerability management capabilities of Amazon…
You were onto something with “It’s the Climb,” Miley
Welcome to this week’s edition of the Threat Source newsletter. For my fianceé’s 30th birthday, I took her on a weekend trip to Shenandoah National…
Critical Ruflo flaw lets attackers hijack AI agents through exposed MCP bridge
The researchers said the bridge’s /mcp endpoint accepts tool invocations without authentication. In a proof-of-concept demonstration, they used Ruflo’s terminal_execute tool to obtain command execution…
Google says it fixed more Chrome bugs in June than over the past two years, thanks to AI
With help from its internal AI tools, Google says it has patched more security flaws in its Chrome browser in the last month than in…
Dogfooding at scale: migrating cdnjs to Cloudflare’s Developer Platform
As of June 23, 2026, cdnjs, one of the Internet’s busiest open-source CDNs, is running exclusively on Cloudflare’s Developer Platform. Along the way, cdnjs surfaced…
What’s new in Microsoft Security: July 2026
Every organization needs security that protects end to end with the speed and scale of AI. Microsoft’s vision is simple: security should be ambient and…
Canada’s Bill C-8 redefines critical infrastructure security
Canada’s new Critical Cyber Systems Protection Act (Bill C-8) introduces a strict 72-hour cyber incident reporting mandate. Find out how Tenable is helping critical national…