Stories tagged security.
Help Net Security
Docker has announced Docker Cloud Sandboxes, a new solution for secure, isolated AI agent execution that enables complex agentic workflows to continue running in the cloud long after a developer’s laptop shuts down. Launched at WeAreDevelopers North America, Docker Cloud Sandboxes let organizations…
PyPI / crates.io / RubyGems / Go index / NuGet
Subdomain takeover vulnerability scanner — automatic CNAME fingerprint verification and --no-verify mode
ANZ: iTnews / SmartCompany / Startup Daily
'QR Jacking' easy and fast way to exploit a vulnerability in a trusted ecosystem.
Help Net Security
An attacker has been offering “desktop apps” for three large US payroll and HR platforms that have never released one, Allure Security have found. Anyone who runs the installer gets a copy of ScreenConnect, a legitimate remote access tool, configured to let the attacker control the computer without…
Help Net Security
Abnormal AI has unveiled the newest additions to its AI Security suite, designed to help enterprises adopt AI securely while protecting against new threats created or accelerated by AI. The suite brings together Abnormal AI Governance, which is generally available, and AI Cloud Security, previously…
Economic Times — Tech / Technology / Startups / ETTelecom
The incursion on one of the country's most used government agencies may prompt a tougher stance as Australia readies AI-specific laws starting in 2027, adding pressure to Australia-US relations already tested by Canberra's teen social media ban, tech policy experts said.
Help Net Security
SentinelOne has announced the expansion of Wayfinder Threat Hunting to the major public cloud services: AWS, Azure, and Google Cloud. It’s the latest offering from SentinelOne’s Wayfinder team and combines the power of SentinelOne’s AI-powered Singularity Platform telemetry with expert human-led…
Help Net Security
Dataiku has announced the launch of Agent Management, a standalone product that finds every AI agent an enterprise is running, regardless of which platform built it, measures the business and technical performance, and flags agents that pose the greatest risk. The launch addresses a disconnect…
The Defiant / DL News / Protos / CryptoSlate
Payy says the bridge was drained, while the extent of any customer losses remains undisclosed. The post Payy bridge exploit freezes crypto cards, and no balances remain safe appeared first on CryptoSlate.
JP/KR/TW: Korea Herald / Taipei Times / DigiTimes
South Korean President Lee Jae Myung on Thursday expressed regret that Ukraine has disclosed the transfer of two North Korean prisoners of war to South Korea, calling it a breach of a non-disclosure agreement that he said may lead to many problems. "It was appropriate in every aspect not to…
Dark Reading
A storm is raging in the form of cyber sabotage, disinformation, and drone attacks on European nations, particularly those that provide material support to Ukraine.
SecurityWeek
Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication. The post Roundcube Webmail Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek.
Mint — Technology / AI
OPENAI-CYBERSECURITY/ (PIX):Australia steps up response to AI after OpenAI bot breaches health system database
Africa: TechCabal / Techpoint Africa / TechCentral / WeeTracker / Ventureburn
Three months on, the Information Regulator is still establishing how many insurers the MIP breach affected.
Help Net Security
In this interview with Help Net Security, Ariel Assaraf, CEO of Coralogix, explains why a system prompt can describe a boundary for an AI agent but cannot enforce one. Assaraf covers how his team builds AI agent guardrails at the execution layer, limits context without expanding authority, and…
The Hindu — Technology / BusinessLine — Info-tech
The report, building onto its earlier reports documenting public trust and experience with police, examines the modus operandi of cybercriminals, the lived experience of victims, the digital habits and vulnerabilities of ordinary citizens, and the preparedness of the police and banks to handle…
Cointelegraph
Anthony Albanese said governments must help shape AI’s development, after revealing earlier that an OpenAI agent accessed non-public files on an Australian Medicare data portal.
Help Net Security
Half of security professionals name data quality or quantity as their biggest barrier to effective threat hunting, according to the SANS 2026 Threat Hunting Survey. Teams with working playbooks describe the logs as their ceiling, and gaps in cloud logging and identity telemetry come up most often…
The Hacker News
A flaw in Cloudflare Containers let a paying customer read data that other customers' containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday. The data came from disk space that earlier containers had used and given up, not from any live workload…
The Hacker News
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities are listed below…
Help Net Security
If you run security for a brand with hundreds or thousands of locations, the tools you’ve bought may have little to do with whether an attack stays at one store. A new VikingCloud survey asked 200 security and IT leaders at U.S. and European chains about the past year. None of the 13 security…
tl;dr sec / Risky Biz News / Unsupervised Learning
In other news: OpenAI agent hacked Australian Medicare website; OpenAI gives Ukraine access to Daybreak; UK to establish anti-disinformation center.
Help Net Security
Here’s a look at the most interesting products from the past week, featuring releases from Akeyless, Akuity, Bitsight, BugBase, Cloud Range, Cohesity, Dataminr, Gurucul, Nozomi Networks, Orchid Security, Ping Identity, Scytale, Securin, Superna, and Tuskira. Ping Identity introduces enterprise…
ransomware.live
Marketing analytics / SaaS · United States | The complete platform source code (97,000+ commits with full history); The multi-tenant instance management system with production architecture; A customer's full marketing database: 354 advertising platform datasets, client lists, user accounts with…
ANZ: iTnews / SmartCompany / Startup Daily
The revelation that an AI agent turned rogue and breached a firewall to get at Medicare statistics has strongly reinforced Anthony Albanese’s case for tough guardrails on this transformative technology....
PyPI / crates.io / RubyGems / Go index / NuGet
Portable source-bound advisory Writing Check with bundled Vale policy.
Google Chrome Releases
The Stable channel is being updated to OS version 16765.51.0 (Browser version 152.0.7977.132) for most ChromeOS devices. If you find new issues, please let us know one of the following ways: File a bug Visit our ChromeOS communities General: Chromebook Help Community Beta Specific: ChromeOS Beta…
ransomware.live
Armada Credit Bureau Limited is a duly licensed credit reporting and analytics company
Cointelegraph
Bitget said unauthorized transfers affected a limited number of hot wallets, while cold wallets and most platform assets remained unaffected.
ransomware.live
Premier gallery of fine art in America
SiliconANGLE
At this week’s Proofpoint Protect event, the security debate moved beyond whether enterprises will deploy AI agents to how they will govern them. Attackers now use AI to write flawless phishing lures and chain exploits at machine speed. Meanwhile, the agents companies run internally act as…
ransomware.live
The Web's Free NPI Registry Search & Provider Reference Site
CyberScoop
Biotechnology doesn’t have its own critical infrastructure designation, so the bipartisan group of lawmakers wants to make sure it’s protected like it. The post House and Senate members propose legislation for CISA to step up cyber defenses for biotech appeared first on CyberScoop.
PyPI / crates.io / RubyGems / Go index / NuGet
Tells you which Python dependencies to fix first: the ones being exploited, and the ones nobody is left to patch.
Dark Reading
Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels.