Security Bulletin

The Federal Court granted CSIS the authority to access and alter infected servers, home routers, and Internet of Things (IoT) devices, including Ring doorbells and security cameras.

Senate testimony claims Anthropic's Mythos AI model breached NSA and Cyber Command systems in mere hours, leading to a US-ordered shutdown of the model.

The executive actions direct the government to support the quantum computing industry, building on previous efforts in artificial intelligence.

More victims have emerged after attackers breached application vendor Klue and used its OAuth tokens to steal customers' Salesforce data.

The CI/CD workflow weakness affects Microsoft's Azure Sentinel, Google's AI Agent Development Kit, Apache's Doris analytics database, Cloudflare's Workers SDK, and Python Software Foundation's Black.

AI agents expose identity gaps as machine accounts outpace governance.

Identity solutions like Cross App Access (XAA) manage AI agents by enforcing policies, scoping access and logging activity.

SocGholish uses traffic distribution systems (TDSs) to provide initial access into victims' networks for cybercrime groups such as the notorious Evil Corp.

NetAcad celebrates its top partners, inspiring instructors, and shared commitment to technical education excellence in the United States and Canada.

The threat actors engineered a Golang-based sniffer to target 430,000 FortiGate firewalls and identify 110 million credentials in the ongoing global campaign.

Once you ingest major telemetry sources, how can we add value for our Threat Hunters? Check out how we brought in potentially malicious sandbox submissions to the analysts’ queue for triage.