Aggregated from vendor advisories, security research, and industry publications.
IBM is pulling together a package of tools to help enterprises discover, identify, manage, and control the growing number of AI agents in use. The package makes use of IBM’s newly available Agent Identity software and its HashiCorp Vault and watsonx Orchestrate packages, which together can identify and manage AI agents built across multiple platforms, according to the company. The agentic ch…
HPE continues to integrate its networking products with its AI-driven Mist platform and Marvis AI engine, this week bringing the HPE Networking EdgeConnect suite—which combines its…
Cisco’s annual Partner Summit is underway in Vancouver, where the vendor unveiled features and capabilities directed at partners and end-user organizations. “IT teams must moder…
The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the…
Interesting research: “AI Models Can Provably Hide Arbitrary Capabilities” Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their re…
Network engineers tell me that their security colleagues now routinely provide a list of requests and questions to help them better assess and manage risk. Threat trends and SOC pr…
OpenAI's compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model's hidden reasoning out in plain text, security firm Xint ha…
They want a little less chatbot conversation, and a whole lot more royalty action
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploit…
A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.
As legacy VPN vulnerabilities and AI-driven exploits expose corporate networks, zero-trust architecture is emerging as the imperative replacement, making systems invisible and prev…
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to Dutch e-commerce secu…
Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making it cheaper to distill a rival AI. The post Stolen AI Reason…
This Cybersecurity Awareness Month's theme, "Securing the Next 250," asks us to look beyond vulnerabilities and consider what will make our digital systems resilient for generation…
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then rep…
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before dele…
In an update, Palo Alto Networks Unit 42 said it's retracting its earlier assessment that the post-compromise activity targeting the European government agency involved the exploit…
Intergalactic Space Warrior, or a bin in orbit?
Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the company to serve targeted ads t…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrat…
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled …
Hyperscalers are getting decidedly twitchy about citizens’ reactions to their secretive data center construction plans, and are looking for ways to de-escalate some of the conflict…
The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s challenging the imagination…
Whitehall wants tougher penalties and new powers over telecoms operators as Russian activity raises alarm
Thanks to a listener request, today’s episode talks about how to optimize your home network for gaming. Ethan and Holly discuss key factors such as latency, connection type, and ba…
AI infrastructure and AI software will shape the next $1 trillion dollars in IT spending growth, according to Gartner. The research firm is anticipating a significant rise in AI-dr…
INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, …
Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon further investigation,…
'Coordinated vulnerability disclosure, unless there's evidence of active exploits in the wild,' Chainguard CEO tells The Reg
Ned Bellavance gets to be the guest on today’s show to discuss foundational AI knowledge, inference training, and running local models with Kyler Middleton. Together, they break do…