13+ hour, 15+ min ago   (426+ words) A Microsoft-signed Windows Defender remediation driver can be repurposed into a kernel-level “operation engine” capable of deleting files, modifying the registry and neutralizing security controls, according to new research from Check Point Research (CPR). The technique does not exploit a…...

16+ hour, 38+ min ago   (806+ words) AI has an almost unlimited number of applications, yet none may be more important than its ability to strengthen enterprise security. Is your organization doing everything it can to take advantage of AI’s formidable security power? Here’s a look at…...

3+ day, 15+ hour ago   (744+ words) OpenAI is adding a new safety capability that allows enterprises to detect misuse of its AI systems across multiple interactions without retaining prompts or responses, enabling risk monitoring while preserving its Zero Data Retention (ZDR) commitments. “OpenAI does not retain…...

3+ day, 15+ hour ago   (486+ words) Malicious versions of three Rust packages, including the widely used arrayref, were published to the crates.io registry on August 20, carrying a backdoor that executed automatically when affected projects were compiled. Security researchers at Wiz said the attack also shares…...

4+ day, 4+ hour ago   (289+ words) A critical sandbox escape vulnerability was discovered and patched in isolated-vm, a library for running JavaScript code inside an isolated process. If exploited, the vulnerability could allow attackers to hijack the host’s control flow, which could enable remote code execution....

4+ day, 6+ hour ago   (520+ words) Citrix is urging its NetScaler ADC and NetScaler Gateway customers to quickly patch two critical security holes, one involving a memory overflow vulnerability leading to unpredictable behavior or denial of service, and the other allowing authentication bypass. Citrix said in…...

4+ day, 13+ hour ago   (448+ words) Security researchers are warning of a criminal AI service built on Grok and Claude, among other models, that promises uncensored access to powerful AI capabilities for as little as $12.99 a month. ThreatDown researchers say “Kriminal” is largely a storefront wrapped…...

4+ day, 20+ hour ago   (453+ words) Airlock Digital, a global provider of application control and allowlisting solutions, today announced that it has completed an independent Information Security Registered Assessors Program (IRAP) assessment at the PROTECTED classification level. For Australian security teams, confidence in a technology provider…...

5+ day, 13+ hour ago   (405+ words) An autonomous AI security agent developed by cloud security firm Wiz identified and exploited a critical vulnerability in Snowflake’s GitHub Actions pipeline, while GitHub Copilot had previously reviewed the code change without flagging the flaw. The vulnerable code was part…...

5+ day, 16+ hour ago   (329+ words) Lee Rossey is a former group leader at MIT Lincoln Laboratory, where he established the Cyber System Assessments Group, which became a nationally recognized center of excellence. He led the group in cyber range development, cyber test and evaluation, cyber…...