Google Targets SOC Overload With Automated AI Alert and Malware Analysis Tools

Google plans to unleash automated AI agents into overtaxed SOCs to reduce the manual workload for cybersecurity investigators.
The post Google Targets SOC Overload With Automated AI Alert and Malware Analysis Tools appeared first on SecurityWeek.
Continue reading Google Targets SOC Overload With Automated AI Alert and Malware Analysis Tools

Microsoft Patches 125 Windows Vulns, Including Exploited CLFS Zero-Day

Patch Tuesday: Microsoft ships urgent cover for another WIndows CLFS vulnerability already exploited in the wild.
The post Microsoft Patches 125 Windows Vulns, Including Exploited CLFS Zero-Day appeared first on SecurityWeek.
Continue reading Microsoft Patches 125 Windows Vulns, Including Exploited CLFS Zero-Day

Adobe Calls Urgent Attention to Critical ColdFusion Flaws

The Adobe Patch Tuesday rollout covers 54 vulnerabilities, including code execution issues in the oft-targeted Adobe ColdFusion software.
The post Adobe Calls Urgent Attention to Critical ColdFusion Flaws appeared first on SecurityWeek.
Continue reading Adobe Calls Urgent Attention to Critical ColdFusion Flaws

Aurascape Banks Hefty $50 Million to Mitigate ‘Shadow AI’ Risks

Silicon Valley startup secures big investment from Menlo Ventures and Mayfield Fund to solve the “shadow AI” security problem.
The post Aurascape Banks Hefty $50 Million to Mitigate ‘Shadow AI’ Risks appeared first on SecurityWeek.
Continue reading Aurascape Banks Hefty $50 Million to Mitigate ‘Shadow AI’ Risks

Google Pushing ‘Sec-Gemini’ AI Model for Threat-Intel Workflows

Experimental Sec-Gemini v1 touts a combination of Google’s Gemini LLM capabilities with real-time security data and tooling from Mandiant.
The post Google Pushing ‘Sec-Gemini’ AI Model for Threat-Intel Workflows appeared first on SecurityWe… Continue reading Google Pushing ‘Sec-Gemini’ AI Model for Threat-Intel Workflows

Chinese APT Pounces on Misdiagnosed RCE in Ivanti VPN Appliances 

Ivanti misdiagnoses a remote code execution vulnerability and Mandiant reports that Chinese hackers are launching in-the-wild exploits.
The post Chinese APT Pounces on Misdiagnosed RCE in Ivanti VPN Appliances  appeared first on SecurityWeek.
Continue reading Chinese APT Pounces on Misdiagnosed RCE in Ivanti VPN Appliances 

Serial Entrepreneurs Raise $43M to Counter AI Deepfakes, Social Engineering

Adaptive is pitching a security platform designed to replicate real-world attack scenarios through AI-generated deepfake simulations. 
The post Serial Entrepreneurs Raise $43M to Counter AI Deepfakes, Social Engineering appeared first on SecurityWeek.
Continue reading Serial Entrepreneurs Raise $43M to Counter AI Deepfakes, Social Engineering

Cyberhaven Banks $100 Million in Series D, Valuation Hits $1 Billion

Cyberhaven bags $100 million in funding at a billion-dollar valuation, a sign that investors remain bullish on data security startups.
The post Cyberhaven Banks $100 Million in Series D, Valuation Hits $1 Billion appeared first on SecurityWeek.
Continue reading Cyberhaven Banks $100 Million in Series D, Valuation Hits $1 Billion

Microsoft Using AI to Uncover Critical Bootloader Vulnerabilities

Using the Security Copilot tool, Microsoft discovered 20 critical vulnerabilities in widely deployed open-source bootloaders.
The post Microsoft Using AI to Uncover Critical Bootloader Vulnerabilities appeared first on SecurityWeek.
Continue reading Microsoft Using AI to Uncover Critical Bootloader Vulnerabilities

Hackers Could Unleash Chaos Through Backdoor in China-Made Robot Dogs

An undocumented remote access backdoor in the Unitree Go1 Robot Dog allows remote control over the tunnel network and use of the vision cameras to see through their eyes.
The post Hackers Could Unleash Chaos Through Backdoor in China-Made Robot Dogs ap… Continue reading Hackers Could Unleash Chaos Through Backdoor in China-Made Robot Dogs