Security Bulletin

Brinks Home identified the attack on July 20, though the ShinyHunters extortion gang claimed the breach occurred on July 13.

The NCSC highlights that network devices like firewalls and VPN gateways are increasingly targeted by attackers.

A likely Iran-backed actor targeted more than 30 community water systems in Minnesota in a sobering reminder of rising threats to US critical infrastructure.

A myriad of software makes up the typical AI harness, and trust issues between the components can create concerning attack vectors.

Certification rubber-stamping is the most common form of governance decay.

Can the platform make the gap between what the organization claims and what the evidence supports visible before the response is sent?

CISOs urge resilience, supply chain security and simpler cyber rules.

Attackers continue to leverage AI to target our edge appliances – so why hasn’t the industry built-in AI into those devices yet?

In the cloud-based enterprise, Linux servers can't stay isolated on legacy authentication systems.

The AI Capability Verification Matrix will help test claims critical to the purchase decision

Decoys may be the best defense against fast-moving autonomous AI attacks.

In this edition of Reporters' Notebook, our journalists discuss the ins and outs of Anthropic's Claude Mythos rollout. How seriously should we take its risks? How big of a deal is it?