Security Bulletin

Security firms Malwarebytes and NordVPN have identified a surge of sophisticated fake websites offering "VIP Early Access" to Grand Theft Auto VI.

Scammers are impersonating well-known brands like Norton, McAfee, Apple, and PayPal by adding fake orders to the Shop app, which is popular in North America with over 50 million downloads on Google Play.

The report, based on surveys of approximately 450 cybersecurity professionals, indicates that 78% of respondents observed automated tools failing to detect critical vulnerabilities.

The vulnerability, tracked as CVE-2026-12957, allowed attackers to execute arbitrary commands by embedding malicious code in workspace configuration files.

The update includes fixes for issues discovered through AI-assisted analysis, with AISLE identifying six CVEs, including the oldest known bug, CVE-2026-8932, which dates back to curl 7.7 in March 2001.

Get exam-ready with CCNA Automation Prep, a live, interactive workshop series led by Cisco Subject Matter Experts Kareem Iskander and Quinn Snyder.

Companies are still experimenting with automated AI systems to find security weaknesses, but fewer are relying on the technology.

AI won't replace credential security, but it demands stronger identity safeguards.

Cisco joins a growing list of security platform providers that are betting that securing the agentic workforce means turning identity into the primary control plane.

The Open Source Sustainability Initiative's goal is to help enterprises manage and secure aging open source projects while maintaining regulatory compliance.

Instead of eliminating jobs for early-career cyber pros, AI is creating new opportunities for candidates with strong human decision-making skills.