Security Bulletin

Escalating threats are forcing boards to prioritize security, but communication gaps persist. Boards and security teams each say they need more support to bridge the divide.

The hacking of Hugging Face by a rogue OpenAI agent is significant, but unsurprising — and preventing the next AI model escape will be difficult, at best.

SSO failure modes create cascading authentication outages across connected services

Organizations that mistake documentation for assurance discover gaps

House Armed Services Committee member urges faster cyber investments as China, Russia threats grow.

Microservice architectures multiply the attack surface through service-to-service communication paths

Cisco just launched Antares — open-weight small language models that localize known vulnerabilities inside your own infrastructure at a fraction of frontier-model cost. Code stays put. For partners, it's a foundation for durable security services.

Recovery is only as fast as your understanding of what depends on what.

Iran-linked hackers target Siemens, Schneider, Rockwell OT.

Attribute- and policy-based controls are makes minimum-necessary tractable without strangling care

Achieve digital autonomy in critical infra with a 'logically air-gapped' model using eBPF, Cilium, and Cisco for secure, compliant cloud-native operations.

Following insights from Bleeping Computer, Australian energy provider Origin Energy has confirmed a significant data breach affecting potentially millions of its customers, exposing a range of personally identifiable information.