Security Bulletin

Risk tolerance, exposure visibility, board oversight — handling third-party risk is complicated but achievable with disciplined, precise governance.

Effective data protection determines whether stolen information is actually usable and how much business and regulatory damage an organization suffers after a breach

Focus on defensible priority decisions over adjusted priority scores

Cutting-edge artificial intelligence models are deploying with more independence and less human oversight. Several state governments are trying to legislate transparency in their use.

The attack vector is available for rent at scale, and evades AV and EDR, leaving YARA analysis as the best detection option.

Here’s how to make security the enabler as the company rolls out AI.

The suspension of CMMC Phase 2 was announced by Defense Department Chief Information Officer Kirsten Davies and Under Secretary of Defense for Acquisition and Sustainment Michael Duffey.

Nihon Kotsu, a major player in Japan's transportation sector with annual revenues of approximately $1 billion, confirmed that its internal systems experienced unauthorized external access, identified as a malware infection.

The platform, active since 2020, allowed criminals to make over 1.8 million scam calls globally, targeting approximately 170,000 victims and causing tens of millions in financial losses.

Researchers reported the vulnerability to Cursor in December, but it still remains in the popular AI coding platform and can be exploited in poisoned repository attacks.

An additional flaw would allow an authenticated attacker with zero permissions to view cross-tenant metadata.

AI phishing kits outpace manual takedowns, forcing defenders to rethink strategy.