Collaborate Disseminate
If your developers are using AI coding tools, you are probably already seeing the upside: faster development, more code, and less time spent on routine work.
The harder part is what comes after. AI can also introduce open-source packages at a pace you… Continue reading Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt
Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could allow an unauthenticated remote attacker to take over any user account by forcing a password … Continue reading Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account
Cybersecurity researchers have flagged a cyber espionage campaign targeting Myanmar that uses graduation ceremony invitation lures to deliver a Go backdoor called QUICAgent.
The campaign, codenamed Operation QUICSILVER, has been found to target govern… Continue reading Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor
Big security risks come in small packages. While enterprise security teams focus on policing the proliferation of employees using ChatGPT and Claude for quick drafting tasks, a more urgent threat is posed by a handful of AI super-adopters who are quiet… Continue reading The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk
Cybersecurity researchers have disclosed details of a Chinese-speaking cybercrime group dubbed UAT-10147 that’s targeting Windows and Linux web servers globally across the education, media, technology, and gaming sectors.
The vast majority of the targ… Continue reading UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit
The U.S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400 million to settle a 2024 lawsuit accusing the company of violating child privacy laws in the country.
As part of the settlement, the social media platfo… Continue reading TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit
Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthily deliver an artificial intelligence (AI)-powered Linux implant dubbed RedC2 4.0.
“When … Continue reading 14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
Check Point Research has disclosed a technique that uses Microsoft Defender’s own legitimately signed boot-time remediation driver to perform arbitrary kernel-level file and registry operations on Windows systems ranging from Windows 7 through Windows … Continue reading Microsoft Defender’s Own Driver Can Be Weaponized to Delete Security Software at Boot
Cybersecurity researchers have flagged a new malware family that’s specifically designed to infect Android-based vehicle head unit firmware developed by DoFun.
Kaspersky, which discovered the threat in June 2026, said the end goal of the malware is to… Continue reading Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
Artificial Intelligence (AI) has become one of this decade’s defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large dat… Continue reading Wazuh and AI For Enhanced SOC Workflows