Intellias launches governed agentic AI for IT operations
A new managed service applies governed agentic AI across IT service and operations management to automate more end-to-end work.
Security & Privacy
Breaches, offensive and defensive AI, and surveillance.
BigDiskBuster Technique Silently Blocks Defender Updates
A new proof-of-concept attack can stop Microsoft Defender from updating its virus definitions while the service continues to run normally.
ClickFix Attack Uses Browser Cache to Bypass Windows Run Limits
A new ClickFix variant hides malicious scripts in the browser cache, letting attackers bypass the Windows Run dialog's character limit and execute malware from cached website content.
U.S. Bank CISO: Security Role Outgrows Any Single Leader
Ann Barron-DiCamillo argues the CISO job now spans fraud, resilience, and AI governance, making partnerships more important than direct control.
FBI Ousts Accenture Contractor Over Patch Failure in ShinyHunters Breach
The FBI removed an Accenture contractor after a missed security patch let ShinyHunters steal thousands of employees' personal details.
Live-Conversation Tools Aim to Catch Social Engineering in Real Time
Security teams are shifting from training employees to detecting manipulation as it happens, though evidence for the new approach is still thin.
GitHub's ReviewBench benchmark tests AI code reviewers
A new open benchmark from GitHub measures how well AI code review tools catch real issues without drowning developers in false alarms.
Credential Layer Grows Faster Than Security Teams Can Track
Enterprises face widening exposure as human, system, and AI credentials multiply beyond current visibility.
CISA Publishes Deception Guide for Low-Budget Honeypot Defenses
The new guidance aims to help resource-constrained organizations use deception tactics to catch attackers.
Nikkei discloses two breaches: phishing emails and Google account intrusion
The Japanese media group said attackers compromised employee accounts, with one used to send phishing emails to roughly 9,000 people.
Malwarebytes launches free Scam Link Check for suspicious URLs
A new free tool analyzes links and explains risks as global scam losses reach $442 billion.
tenfold CE adds content governance and real-time auditing
The free identity governance tool now helps small organizations manage Microsoft 365 sharing and investigate suspicious activity.
Milk Dragon phishing kit uses fake discounts to steal card data
A phishing kit called Milk Dragon lures social media shoppers with fake brand discounts and intercepts their payment details and one-time passwords.
NetScaler and FortiMail 0-Days, Spectre v2 Variant Top Weekly Security Recap
A busy week in security saw two exploited gateway flaws, a new CPU side-channel attack, and major ransomware arrests.
Ukraine's ATB grocery chain confirms cyberattack, hackers threaten data leak
The incident shows how financially motivated hacker groups are targeting major Ukrainian retailers with extortion amid the ongoing war.
Belarusian Hacktivists Spent Two Years in Russian Healthcare Network
A two-year intrusion into a Russian healthcare network shows hacktivists prioritizing espionage over disruption, researchers say.
South Korea Probes Bank Breaches Suspected to Use AI
The FSC's emergency meeting signals rising concern that AI is being used to attack the country's financial sector.
Realtek Jungle SDK Flaw Exploited to Deploy Cling Botnet
Attackers are exploiting a patched critical Realtek SDK vulnerability to install the Cling botnet, which uses STUN for command-and-control.