Collaborate Disseminate
In supercharged AI race, defenders need to keep up interview According to Remedio CEO Tal Kollender, the only way to beat the bad guys hacking into corporate networks is to “think like a hacker,” and because not everyone is a teenage hacker turned cyb… Continue reading From video games to cyber defense: If you don’t think like a hacker, you won’t win
AI goes off the rails … because of shoddy guardrails Researchers at Pen Test Partners found four flaws in Eurostar’s public AI chatbot that, among other security issues, could allow an attacker to inject malicious HTML content or trick the bot into lea… Continue reading Pen testers accused of ‘blackmail’ after reporting Eurostar chatbot flaws
Crooks used platform to scoop up and store banking credentials for big-money thefts The US says it has shut down a platform used by cybercriminals to break into Americans’ bank accounts.… Continue reading US shuts down phisherfolk’s $14.6M password-hoarding platform
Plans move to Rust, with help from AI Microsoft wants to develop tech that could translate its codebase to Rust, and is hiring people to make it happen.… Continue reading Microsoft wants to replace its entire C and C++ codebase, perhaps by 2030
Customers will be able to see vulnerabilities, prioritize risks, and close them with automated workflows. After over a week of speculation, ServiceNow announced on Tuesday that it has agreed to buy cybersecurity heavyweight Armis in a $7.75 billion dea… Continue reading ServiceNow opens $7.7B ticket titled ‘Buy security company, make it Armis’
Automaker’s third security snafu in three years Thousands of Nissan customers are learning that some of their personal data was leaked after unauthorized access to a Red Hat-managed server, according to the Japanese automaker.… Continue reading 21K Nissan customers’ data stolen in Red Hat raid
Redmond gets in early for the twelve whoopsies of Christmas Microsoft has hustled out an out-of-band update to address a Message Queuing issue introduced by the December 2025 update.… Continue reading Microsoft rushes an out-of-band update for Message Queuing bug
And it’s especially dangerous because the code works A malicious npm package with more than 56,000 downloads masquerades as a working WhatsApp Web API library, and then it steals messages, harvests credentials and contacts, and hijacks users’ WhatsApp … Continue reading Poisoned WhatsApp API package steals messages and accounts
SEC filings show the outfit cut projected 2027 cloud purchase commitments by $114M Security vendor Palo Alto Networks is expanding its Google Cloud partnership, saying it will move “key internal workloads” onto the Chocolate Factory’s infrastructure. T… Continue reading Palo Alto’s new Google Cloud deal boosts AI integration, could save on cloud costs
Ah, the good old days when 0-day development took a year Interview “In my past life, it would take us 360 days to develop an amazing zero day,” Zafran Security CEO Sanaz Yashar said.… Continue reading Spy turned startup CEO: ‘The WannaCry of AI will happen’