News

Upcoming Events

CIS Red Team Services & Exploit Demo
2026-09-17 13:00 | 2026-09-17 14:00
Attendees will see a live exploit demonstration illustrating how poisoning attacks against multicast name resolution, combined with the absence of Server Message Block (SMB) signing, can create a path to privilege escalation and domain compromise.
...Read more

All times are Eastern Time (GMT/UTC -4h)

How AI is changing cybersecurity threats (and how it isn't)
AI hasn't rewritten the cybersecurity playbook — it's supercharged familiar attacks. A TransUnion director explains whic...Read more

Anthropic safety researcher resigned with a warning about AI
Jacob Coxon said that without caution and cooperation, superintelligent AI created “a risk of causing human extinction.”...Read more

FBI Probes Service Selling 153M Drivers Licenses
A new identity theft service s selling digital scans of more than 153M drivers licenses from people US and Canada...Read more

Infosecurity Europe: Prompt Injection Remains Unsolved, OWASP Researcher Warns
Prompt injection remains an unsolved architectural problem that could hamper the development of AI...Read more

CIOs, stop training the room to see you as the IT person
CIOs earn trust through technical credibility, but executive influence begins when they turn technical updates into exec...Read more

OWASP’s subtractive security project measures the attack paths you erased
Alert fatigue is one of the conditions the project names as evidence that the additive model has run its course....Read more

CIOs can measure AI spend. Proving its value is the hard part
Enterprises are pouring money into AI faster than they can prove it's working....Read more

Cloudflare OS goes open source with a record of everything its agents read
Cloudflare OS is managed version, containers for development workflows, and workspaces inside Slack are all still ahead....Read more

AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory
new class of prompt injection is spreading across commercial websites requiring no malware, no stolen credentials...Read more

Discounted Claude access bought on the gray market may expose every prompt you send
Services advertised on underground forums and messaging platforms, offering “unlimited” token access to AI models...Read more

Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Water and wastewater utilities in at least seven states have reported incidents since July 27 the FBI and EPA said...Read more

Anthropic's Fever Dream: Claude's package that stole real keys
Anthropic disclosed that one of its own agents published live malware to PyPI and compromised a real third-party company...Read more

AI amplifies dangling DNS takeover risks, research shows
A dangling DNS takeover attack, where a subdomain record points to a deleted cloud resource, has been amplified by AI...Read more

Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data
CVE-2026-20316 (CVSS 5.3), could permit log in remotely as a low-privileged user, then chain other FMC flaws...Read more