The obvious question about Washington’s new private offensive cyber program is which security vendors will join it. The CSO question is what…
News
AI made software development unrecognizable. Is cybersecurity next?
The rapid emergence of AI has radically changed a host of professions, with software engineering and development perhaps the most transformed of…
Hundreds of OpenAI agents attack RubyGems platform
A swarm of hundreds of OpenAI agents uploaded “malicious packages” to RubyGems and tried to steal API keys, the Ruby community gem…
Critical Cisco Secure Email Gateway zero-day gives attackers root access
Cisco released emergency patches for a critical vulnerability in its Secure Email Gateway appliance that could allow attackers to take over the…
Exposed Vite servers are being probed for AWS and Azure credentials
Attackers have opened a new front in their war on software developers: Vite servers, which they are probing for sensitive data including…
Exaforce extends its AI security tool to monitor more than just Claude
Exaforce is offering to help enterprise security teams discover and monitor AI agents using security telemetry they already collect, rather than requiring…
AI is exposing a security structure built for yesterday’s threats
Organizations are investing more in security than ever before, yet many still struggle with a fundamental problem: they are preparing for tomorrow’s…
Threat actors are coming for your AI assets to operationalize their use of AI
Both state-affiliated cyberespionage group and cybercrime gangs are targeting AI-related documents, configuration files, and proprietary models during intrusions. In addition, the number…
A maximum severity GitLab flaw could turn your CI/CD server into an attacker’s treasure trove
Yet another security vulnerability has been discovered in GitLab infrastructure, this one a perfect 10 in severity. CVE-2026-85706, the second flaw GitLab…
What the 3M ChatGPT case reveals about AI governance
One detail in the Watson Grinding explosion litigation involving 3M changed the way I think about prompt governance. An engineering expert retained…