Security Bulletin

New research shows how attacks against some unprotected TSN protocols could allow attackers to disrupt or manipulate physical processes

Microsoft fixed an exploited Entra ID flaw, but experts urge customers to check for compromise.

Here's how security-focused AI agents can help, not replace, human SOC analysts.

The Open Worldwide Application Security Project has a brand-new top 10 security list tailored for the modern era, and it debuts a Universal Skill Format to add consistency and security to the AI add-ons.

Teams now have to ask which AI agent frameworks are running in their stack? Who built them? And, and who has ever rated them?

U.S. policymakers race to keep drone and autonomous systems rules aligned with rapidly advancing technology.

Government agencies with smaller budgets need support — and here's how you can help.

Government agencies with smaller budgets need support — and here's how you can help.

The agent used social engineering against real people during testing by the UK AI Security Institute.

The new AI security controls follow the Hugging Face incident last month, though many of these additions perhaps should have been in place prior to the frontier models escaping.

US Bank confirmed it is aware of the claims and is investigating, but declined to provide specifics on communication with the extortionists or the ransom amount.

A browser-based variant of NASA's AMMOS Instrument Toolkit (AIT), specifically versions up to 2.5.1, has a critical vulnerability that could allow an unauthenticated attacker to issue commands to spacecraft and instruments, and potentially execute...