Security Bulletin

Software Engineer Altanai B. shares her non-linear career journey and how she finally found a place to unpack her bags and belong at Cisco.

Announcing a collaboration with Palantir to deliver Cisco's Secure AI Factory with NVIDIA as a preferred full-stack foundation for Palantir's Sovereign AI OS.

Starting Friday, businesses operating in the EU will have just 24 hours to notify the government any time they discover serious product security incidents.

Researchers at Group-IB have identified that Gigabud is now being paired with Vwork, a modified version of the Shelter app, attributed to the GoldFactory threat group.

The unpatched Plex Media Server instances are running versions 1.43.2 and earlier.

Democratic senators Ron Wyden and Sheldon Whitehouse, along with Republican congressman Pat Harrigan, sent a letter to U.S. Secretary of Commerce Howard Lutnick urging the addition of three Indian companies—BellTroX, CyberRoot, and Sunkissed Organic...

The CMMC program, particularly its Phase 2 requirements, faced criticism for being overly burdensome and costly for small and medium-sized businesses.

The new capabilities address the challenge of AI agents inheriting access through existing vulnerabilities like hard-coded credentials and dormant accounts, allowing them to escalate privileges rapidly.

The Radware H1 2026 Global Threat Analysis Report indicates a significant shift in attack methods, with direct-path volumetric floods, particularly stateless UDP floods, now comprising 73% of mitigated packets.

Researchers at Aikido Security discovered four packages containing the Shai-Hulud worm, which had the same malicious payload hash as the original attack from May.

The system measures spending agent by agent across cloud, code, and endpoints, offering a more comprehensive view than gateway-centric tools.

The BlueMoon exploit kit targeted U.S. defense contractors, NGOs, and Southeast Asian government agencies.