News
Why AI Security Hinges on Context and Control
2+ hour, 34+ min ago (248+ words) Artificial Intelligence & Machine Learning , Events , Next-Generation Technologies & Secure Development The surge in artificial intelligence agents and applications has created a perfect storm for enterprise security teams - one where the technology is non-deterministic, the blast radius is enormous, and the pressure…...
Qodo Targets AI Code Risks, Quality With $70M Series B Raise
3+ hour, 48+ min ago (573+ words) A code review and governance startup founded by an ex-Alibaba leader raised $70 million to ensure code is correct, secure and aligned with organizational standards. See Also: AI-Based Coding Redefines Software Development The Qumra Capital-led Series B funding round will help…...
One-Time Passcodes Are Gateway for Financial Fraud Attacks
15+ hour, 49+ min ago (732+ words) Account Takeover Fraud , Anti-Phishing, DMARC , Finance & Banking Financial institutions have historically relied on one-time passcodes as a primary authentication control for their accountholders. But OTP verification is less reliable as fraudsters increasingly exploit SMS-based verification weaknesses to carry out account…...
Mercor Breach Linked to LiteLLM Supply-Chain Attack
15+ hour, 18+ min ago (384+ words) Artificial intelligence recruiting firm Mercor said it was compromised by the LiteLLM supply chain attack, making it the first confirmed downstream victim. See Also: Gen AI Stalls, Shadow AI Rises: A CISO Concern "We recently identified that we were one…...
AI's Achilles Heel is an Oil Shipping Strait
16+ hour, 30+ min ago (318+ words) 3rd Party Risk Management , Artificial Intelligence & Machine Learning , Cyberwarfare / Nation-State Attacks Oil prices are flirting with $100 a barrel, South Korean chip stocks are in freefall and the waterway that carries a fifth of the world's oil supply has no clear reopening…...
ISMG Editors: Vendor Breaches Expose Healthcare Risk
18+ hour, 24+ min ago (176+ words) 3rd Party Risk Management , Artificial Intelligence & Machine Learning , Governance & Risk Management In this week's panel, four ISMG editors discussed growing cyber risks in healthcare following recent vendor breaches, key takeaways from the RSAC Conference and whether the Pentagon's zero trust push…...
Breach Roundup: Feds Confirm 'Major' Hack of FBI System
1+ day, 9+ hour ago (1576+ words) Cybercrime , Data Breach Notification , Data Privacy See Also: The End of Plausible Deniability: Data Privacy Compliance in 2026 Federal investigators are assessing a Chinese-linked intrusion into an FBI system tied to surveillance operations. The FBI confirmed last week the attack was…...
Pentagon Commits to Reform of Cyber Talent Management System
1+ day, 15+ hour ago (1130+ words) The Pentagon's years-long cyber workforce overhaul needs a Department of Defense-wide talent management system to ensure interoperability and consistency across the entire DoD enterprise, said the CIOs of four military services at a panel last week. The Pentagon's CIO representative…...
Fixing SAST: How AI Is Reducing Noise and Improving AppSec Outcomes
2+ day, 16+ hour ago (169+ words) Application Security , Application Security & Online Fraud , Fraud Management & Cybercrime Static application security testing (SAST) has long been a foundation of AppSec programs'but persistent issues with false positives, limited accuracy, and developer friction have reduced its effectiveness. AI is starting to…...
How Agentic AI Made Visibility the New Security Imperative
2+ day, 15+ hour ago (343+ words) Agentic AI , Events , RSAC Conference Agentic artificial intelligence has created a new class of digital worker - one that acts at machine speed, operates across endpoints, browsers and SaaS environments, and remains largely invisible to enterprise security teams, said Shahar Tal,…...