Information security
fromSecurityWeek
40 minutes agoResearcher Drops YellowKey, GreenPlasma Windows Zero-Days
Two Windows zero-days enable BitLocker bypass and privilege escalation via a physical-access exploit chain targeting WinRE.
Information security
Information security
[ follow ]
Information security
fromSecuritymagazine
8 hours agoThe Bench You'll Need in Three Years Depends on Decisions You Make Now
AI-native security tools automate entry-level tasks, shrinking the entry talent pipeline and creating a widening skills mismatch that will reduce hiring, provider quality, and bench strength.
#ai-security
#cybersecurity
Information security
fromSecuritymagazine
1 day agoCybersecurity Is No Longer a Gatekeeper, But the Engine of Delivery Across Digital Economy
Cybersecurity is a top fast-growing skill and must be integrated into product delivery, since both protection gaps and misconfigured controls can cause outages, breaches, and lost trust.
Information security
from24/7 Wall St.
16 hours agoAI Threats Are Accelerating and These 3 Cybersecurity Stocks Under $30 Are Built to Win
Cybersecurity demand for AI workloads, identity control, and data pipeline protection is driving growth, while several stocks trade under $30 at compressed valuations.
Information security
fromSecurityWeek
19 hours agoGovernment to Scrutinize Instructure Over Canvas Disruption, Data Breach
Instructure faced repeated Canvas intrusions, exploited Free-For-Teacher issues, and is temporarily shutting accounts while the House Homeland Security Committee demands incident details.
#microsoft-security-updates
Information security
fromZero Day Initiative
1 day agoZero Day Initiative - The May 2026 Security Update Review
Most Microsoft fixes address elevation of privilege, with several code execution paths requiring varying attacker access levels and one kernel issue enabling code execution via crafted NVMe-oF handshake messages.
Information security
fromtheregister
8 hours agoWelcome to the vulnpocalypse, as vendors use AI to find bugs and patches multiply like rabbits
AI-based code scanning is rapidly increasing vulnerability discovery, driving more patches and greater administrative workload while raising risks if patches break systems.
Information security
fromLondon Business News | Londonlovesbusiness.com
22 hours agoHow we can combat the critical national infrastructure threat from the Iran war - London Business News | Londonlovesbusiness.com
UK critical infrastructure faces elevated, evolving cyber risk from Iran-related conflict, especially via indirect attacks through regional supply chains and overseas assets.
Information security
fromSecurityWeek
1 day agoICS Patch Tuesday: New Security Advisories From Siemens, Schneider, CISA
Multiple vendors released May 2026 ICS security advisories addressing critical and high-severity vulnerabilities, including remote code execution, takeover, XSS, and session hijacking.
fromSecurityWeek
14 hours agoFoxconn Confirms North American Factories Hit by Cyberattack
“The cybersecurity team immediately activated the response mechanism and implemented multiple operational measures to ensure the continuity of production and delivery. The affected factories are currently resuming normal production,” Foxconn told SecurityWeek.
Information security
fromThe Hacker News
18 hours agoAzerbaijani Energy Firm Hit by Repeated Microsoft Exchange Exploitation
A threat actor with affiliations to China has been linked to a "multi-wave intrusion" targeting an unnamed Azerbaijani oil and gas company between late December 2025 and late February 2026, marking an expansion of its targeting.
Information security
fromIndependent
1 day agoMore than 200 fake websites targeted Irish residents with scams last year
More than 200 websites were found to be targeting Irish residents with scams last year, including fake online shops and fraudulent loan websites claiming to be regulated by the Central Bank of Ireland.
Information security
#soc-operations
Information security
fromThe Hacker News
1 day agoWebinar: What the Riskiest SOC Alerts Go Unanswered - and How Radiant Security Can Help
High-risk SOC alerts go unanswered due to structural coverage ceilings, lack of specialized expertise, and automation limits that deprioritize unfamiliar or novel alert categories.
Information security
fromTNW | Data-Security
1 day agoGoogle identifies first AI-developed zero-day exploit and thwarts planned mass exploitation event
Google identified an AI-assisted zero-day exploit, disrupted a planned mass exploitation event, and documented state-sponsored AI use in vulnerability research and malware development.
#ai-cybersecurity
Information security
fromTechCrunch
1 day agoExaforce raises $125M Series B to build AI for catching and stopping cyberattacks as they happen | TechCrunch
AI-enabled security operations can detect and stop threats in real time while reducing analyst workload by automating investigation and filtering false positives.
Information security
fromwww.cbc.ca
1 day agoInstructure strikes deal with hackers after massive Canvas cyber breach hits universities | CBC News
Instructure reached an agreement with the hacking group, received verification of data destruction, and assured customers would not face extortion or further targeting.
Information security
fromEngadget
1 day agoGoogle announces upcoming security tools for Android, including enhanced protection against banking scam calls - Engadget
Android adds protections against banking scam calls, expands live threat detection for abusive apps, and introduces device-theft security settings.
#linux-kernel-security
Information security
fromTechzine Global
2 days agoLinux kernel kill switch proposal sparks fierce debate
Privileged administrators could disable vulnerable kernel functions temporarily until patches arrive, reducing exposure during zero-day gaps but raising concerns about delaying patching and adding operational risk.
fromTechzine Global
1 day agoVeeam launches DataAI Command Platform for the agentic era
“The infrastructure to deploy AI exists. The infrastructure to trust it doesn't. With the DataAI Command Platform, Veeam is building the missing layer combining resilience, security, governance, compliance and privacy, in one platform.”
Information security
Information security
fromwww.theregister.com
2 days agoJapan's PM orders cybersecurity review to defend against Anthropic Mythos
Japan ordered a cabinet-level review of cybersecurity strategy to assess government system vulnerabilities and ensure critical infrastructure operators can detect and fix them amid AI-enabled attack risks.
[ Load more ]