Despite best efforts by defenders, malicious emails continue to slip through the cybersecurity cracks, leading some enterprises to implement a layered “defense…
News
China-linked hackers target US, Canada research using legacy REDCap exploits
Google is warning of a cyber espionage campaign linked to a China-nexus threat actor, UNC6508, that kept close tabs on valuable US…
Cisco patches SD-WAN flaw amid evidence of active exploitation
Cisco has released fixes for a vulnerability in its Catalyst SD-WAN Manager software after becoming aware of limited exploitation of the flaw,…
Zero trust isn’t broken. Most companies just do it wrong.
Zero trust is 15 years old, and like many teenagers, it can feel misunderstood and underappreciated. The concept of zero trust was…
Langflow RCE under active attack months after a patch was shipped
Enterprises using the open-source AI orchestration platform Langflow are being urged to patch a high-severity path traversal flaw amid active exploitation, despite…
Attackers can turn AI agent guardrails into denial-of-service weapons
Attackers can turn AI agent guardrails into denial-of-service weapons, according to new research that found a single poisoned document can dramatically slow…
Governing the ghost workforce
Every enterprise security team is fighting a workforce problem they cannot see on any org chart. Bots, service accounts, API keys, OAuth…
Sovereign cloud won’t fix your AI risk. Identity governance will
Your board is asking. Your legal team is asking. Your auditors will be asking: Should AI workloads move to sovereign cloud, or…
5 runtime signals for catching a compromised AI agent
In June 2025, Simon Willison, the engineer who coined the term “prompt injection,” published a warning that circulated widely through the security…
GreatXML zero-day BitLocker bypass doesn’t seem to work, yet
A disgruntled researcher who has been publishing zero-day Microsoft Windows vulnerabilities for the past several months released a new exploit Thursday that…