Security Bulletin

China-linked espionage groups have attacked at least a dozen nations in the region, gathering information on maritime shipping, oil production, and other geopolitical interests.

Cyber insurance coverage is slowly changing, and some policies may not provide coverage for social engineering attacks like ClickFix.

A disabled security setting meant to protect authentication across Android versions of key apps like Word, PowerPoint, and Excel paved the way for attackers to steal logins and data.

Enterprise AI agents are no longer experimental. Organizations are deploying agents inside ServiceNow, Microsoft 365, and other SaaS platforms to handle everything from IT support tickets to financial workflows. These agents access sensitive.......

In February 2026, security researchers discovered that the SmartLoader malware operation had cloned a legitimate Model Context Protocol (MCP) server, one that connects artificial intelligence (AI) assistants to Oura Ring health data and submitted...

Buying GPUs is the easy part; operationalizing them is the real challenge. Discover how secure, automated infrastructure helps bridge the gap between deployment and business value—taking you from rack to production in hours, not weeks.

As Agentic AI reshapes enterprise traffic, Cisco Silicon One provides the purpose-built silicon foundation to power the AI-ready campus network.

Accelerate your AI innovation with the new Cisco Compatible Solutions for AI differentiator. This program ensures third-party software works seamlessly with Cisco infrastructure to provide customers with trusted, validated technology solutions.

Enterprise applications often still use complex standards like SOAP for web services. The big advantage of SOAP is its tight and extensive standards, which enable interoperability across an enterprise governed by web services. The disadvantage of...

A prompt injection flaw in Google Gemini's voice assistant let attackers hide malicious commands in notifications, enabling social engineering and more.

A threat actor got a near-continuous view into an influential finance executive's email inbox, thanks to clever use of legitimate, native Windows tools.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.