Polish Medyc medical software breach exposes patient data
The attack on a widely used medical records platform has heightened concerns about cybersecurity in Poland's healthcare sector.
Security & Privacy
Breaches, offensive and defensive AI, and surveillance.
Nvidia Open Agent Safety Platform Adds Hardware Watchdog for AI Agents
Nvidia's new open-source platform combines software sandboxing with a hardware-based watchdog to keep autonomous agents inside their boundaries.
Bitget Theft Traced to Zero-Day in Third-Party Security Tool
The $388M exchange heist began with an unpatched flaw in a security product, not a private-key breach, according to Bitget's account.
IAM for AI Agents: Closing the Intent-to-Execution Gap
A practical framework for governing AI agents as non-human identities, addressing the gap between configured access and actual agent behavior.
OS file notifications allow cross-account spying on browsing and keystrokes
Researchers show how a standard user can exploit OS file-notification events to infer another user's browsing history and even time keystrokes on Windows, Linux, and macOS.
Two Unpatched Citrix NetScaler RCE Zero-Days Actively Exploited
Security firm watchTowr reports two unpatched remote-code-execution flaws in Citrix NetScaler ADC and Gateway are being exploited in the wild, with no fix yet.
Gyazo breach, TASK#STOMP backdoor lead week's security news
Help Net Security's weekly roundup highlights a 23.6-million-user data breach, a document-stealing Windows backdoor, and multiple exploited vulnerabilities.
Wireshark 4.6.9 Patches 19 Vulnerabilities
The latest Wireshark release fixes 19 security flaws and 16 bugs, making an upgrade advisable for all users.
Ghost Service Accounts Open Door to M365 Data Theft
A Chilean incident shows how forgotten service accounts can bypass locked-down employee accounts to compromise Microsoft 365 environments.
Cloud Range launches AI validation range for SOC teams
New offering lets security operations centers benchmark AI agents against human defenders in realistic environments.
SolarWinds Patches Unauthenticated RCE Flaws in Observability Tool
Two critical vulnerabilities in SolarWinds' self-hosted observability platform could let remote attackers execute code without authentication.
Agentic Remediation: Fixing Known Flaws, Not Judging New Risk
SecurityWeek argues that agentic remediation should be scoped to known problems, not open-ended risk judgment.
NIST Updates OT Security Guide; CISA and FBI Warn on ICS Integrators
NIST's draft Revision 4 of its operational technology security guide is open for comment, while CISA and FBI warn about risks from ICS integrators.
SymphonyAI launches AI agent platform for continuous financial crime compliance
The new platform shifts financial crime compliance from periodic reviews to continuous, AI-driven monitoring.
OpenAI Tests 'o,' an Always-On ChatGPT Assistant for Email
OpenAI is testing a new always-on assistant called 'o' that could handle email, according to a report.
CISO-CMO Alliance Prepares Trust Before Crisis Hits
Regular collaboration between security and marketing leaders turns cyber risk into brand protection, not just technical defense.
FedRAMP's New VDR and VER Rules Push Continuous Vulnerability Management
The new FedRAMP requirements make vulnerability management an ongoing process, not just a December 7 compliance checkpoint.
AI Agents, Ransomware, and Water System Hacks Defined Summer 2026
Three distinct threat waves—targeting AI infrastructure, a major dairy brand, and critical water utilities—marked a turbulent summer for security teams.