Information security
fromTheregister
2 hours agoOngoing supply-chain attack targets security, dev tools
Checkmarx's GitHub repository was compromised, leading to a data leak by the Lapsus$ extortion group.
#continuous-monitoring--soc
#continuous-monitoring--soc
[ follow ]
fromThe Verge
12 hours agoThat UL logo is more complicated than it looks
UL Solutions has been a cornerstone in safety testing for over a century, starting with fire and safety evaluations for electrical products as electricity became common in homes. Today, its logo signifies safety across a vast array of consumer electronics.
London startup
#artificial-intelligence
Information security
fromFortune
4 days agoFormer national cyber director: Anthropic's 'Mythos' AI can hack nearly anything and we aren't ready | Fortune
Mythos, Anthropic's advanced AI model, poses significant risks to critical infrastructure, necessitating urgent investment and collaboration to enhance cybersecurity.
fromSecurityWeek
3 days agoVulnerabilities Patched in CrowdStrike, Tenable Products
CrowdStrike published an advisory for CVE-2026-40050, a critical unauthenticated path traversal vulnerability affecting its LogScale product. The flaw can allow a remote attacker to read arbitrary files from the server filesystem.
Information security
#ai-security
Software development
fromThe Hacker News
1 month agoHow Ceros Gives Security Teams Visibility and Control in Claude Code
AI coding agents like Claude Code operate outside existing enterprise security controls, requiring new machine-level security infrastructure to provide visibility, policy enforcement, and audit trails.
fromSecuritymagazine
5 days agoOperationally Ineffective: Putting CVEs in a Chokehold with Privilege Disruption
A Common Vulnerability Exposure (CVE) that cannot reach the privilege plane is operationally ineffective - even at a CVSS Score of 10. This should be a core philosophy that is embedded into the fabric of software engineering.
Information security
fromSecuritymagazine
2 months agoThe New Battleground of Cybersecurity
I've always had what I would consider a hacker mindset, a curiosity to take things apart, understand them, and use that knowledge to solve problems. That mindset took me on a circuitous route into the cybersecurity industry; after being kicked out of high school for hacking computer systems, I worked a range of jobs, managing office supply companies by day and cracking Wi-Fi networks by night until I started a Digital Forensics degree which led me to the world of security research.
Science
Information security
fromTNW | Next-Featured
6 days agoLovable security crisis: 48 days of exposed projects, closed bug reports, & the structural failure of vibe coding security
Lovable's security incidents expose vulnerabilities in AI-generated code and highlight a market focus on growth over security.
Information security
fromThe Hacker News
1 month agoWhy Security Validation Is Becoming Agentic
Security validation tools operate in silos while attackers exploit interconnected systems, creating a structural blind spot that Agentic Exposure Validation can address through continuous, autonomous, context-aware assessment.
Information security
fromThe Hacker News
1 month agoAttackers Don't Just Send Phishing Emails. They Weaponize Your SOC's Workload
Attackers deliberately overwhelm SOC analysts with high-volume phishing campaigns to delay investigations and create windows for successful breaches, making analyst capacity a critical vulnerability.
Information security
fromThe Hacker News
1 month agoHow to Scale Phishing Detection in Your SOC: 3 Steps for CISOs
Modern phishing campaigns exploit trusted infrastructure and encrypted traffic, requiring SOCs to scale detection capabilities to prevent credential theft and operational disruption before attackers gain authenticated access.
Information security
fromSecuritymagazine
2 months agoUnderstanding Breaches Before and After They Happen: What Every Organization Should Know
Most security breaches result from neglected fundamentals—human error, unpatched systems, weak authentication, and poor network segmentation—rather than advanced, novel exploits.
Information security
fromSecuritymagazine
1 month agoThe Great Security Culture Shift: Building a Proactive Defense in an Era of Advanced Threats and Social Engineering
Hackers exploit DLL side-loading on trusted platforms like LinkedIn to deliver malware through seemingly legitimate file attachments, bypassing traditional security defenses and compromising entire corporate networks.
Information security
fromSecuritymagazine
1 month agoEnhancing Incident Response with Integrated Access Control and Video Verification
Integrated access control and video verification technology enhance incident response capabilities and operational resilience by providing situational clarity and enabling faster security action.
fromTechzine Global
2 months agoAbstract innovates in SIEM with 'composable' architecture
We had already heard of 'next-gen SIEM'. This is a system that replaces traditional rule-based logging with automatic recognition of complex threats. It was designed to reduce noise on the line for SecOps personnel by reducing the number of false positives. However, according to Abstract CEO and co-founder Colby DeRodeff, this was only the beginning. He believes that a real 'reset' is needed, in the form of an 'AI-Gen Composable SIEM'.
Information security
Information security
fromThe Hacker News
2 months agoWebinar: How Modern SOC Teams Use AI and Context to Investigate Cloud Breaches Faster
Automated, context-aware cloud forensics is essential because ephemeral infrastructure, rotating identities, and expiring logs destroy evidence before manual investigations can complete.
[ Load more ]