Aggregated from vendor advisories, security research, and industry publications.
Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application servers through crafted image uploads. Tracked as CVE-2026-66066 (CVSS score: 9.5), the flaw can expose the Rails process environment and secrets such as secret_key_base, the Rails master key, database passwords, cloud storage credentials,
Health-ISAC, a cybersecurity information-sharing organization for the health sector, is warning healthcare and medical technology organizations of an observed increase in successfu…
Dark Reading walks through the many twists and turns in the bizarre story of how OpenAI's agent AI system broke out of its sandbox and decided to target Hugging Face, and what CISO…
Dark Reading Confidential Episode 20: Expert Rich Mogull reflects on lessons cyber teams should pull from the OpenAI agent's attack on Hugging Face.
AI-based attacks that rely on deepfake impersonation and AI-enabled malware are getting faster and cheaper to launch, which has driven the cost of finding and fixing enterprise dat…
This essay was written with Barath Raghavan, and originally appeared in The Guardian. In July, Hugging Face, a company that hosts much of the world’s AI software and open-source AI…
New research shows how security scanners embedded in the software supply chain can be attacked to serve as a foothold for downstream attacks.
Researcher says months of coordination with Microsoft have yet to produce a robust mitigation
In technology, the pendulum rarely stays at one extreme for long. When Secure Access Service Edge (SASE) entered the enterprise networking lexicon a few years ago, the industry qui…
In a new update, OpenAI says its AI models also used publicly exposed credentials to compromise accounts on four third-party services during the recent attack on Hugging Face, expa…
FSB claims Ukrainian spies use chat platform to recruit Russians for sabotage and arson
Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in…
Broadcom has released security updates to address multiple security flaws impacting VMware ESX, vCenter, Workstation, and Fusion, three of which have been designated as critical in…
IT teams responsible for data centers, colocation facilities, and test labs face a persistent challenge when it comes to providing affordable, timely maintenance and troubleshootin…
AIStor keeps context, files, and secrets under customer control so interrupted jobs can pick up where they left off
PARTNER CONTENT: With vSphere 8 support ending in 2027, IT leaders must navigate tight timelines and costs to modernize on their terms.
The Minnesota IT Services (MNIT) agency activated its cybersecurity incident response capabilities across the entire state after hackers targeted more than 30 community water syste…
The vulnerability in the AI hosting platform Ruflo allows an unauthenticated attacker to take over the system and corrupt memory, so bad behavior can persist after patching.
Two reaction wheels are out and comms sporadic as controllers work to stabilize LINK
AI agents are designed to improvise as they complete tasks, making broad permissions a growing security risk. Token Security explains why identity, intent-based access controls, an…
Microsoft has released the KB5101684 preview cumulative update for Windows 11 24H2 and 25H2, which 42 bug fixes and additional feature improvements for the operating system. [...…
More than 30 facilities disrupted in 'coordinated cyberattack,' though officials have yet to name a culprit
A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27, triggering a statewide cybersecurity response. Braha…
Today, several members of our Packet Pushers podcast team assemble to discuss whether the grass is greener on the NetOps or DevOps side of the telemetry fence. William of The Cloud…
Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves creating lookalike websites of major Russian companies with an aim to siphon funds fr…
The agency said imports of advanced robots pose cybersecurity and other national security risks. The post US Bans Foreign-Made Humanoid Robots, Targeting China Over National Securi…
Cloud operators have already claimed most of its nearline capacity through 2028
The startup will use the investment to expand its customer support, sales, and R&D teams. The post Mate Security Raises $35 Million for Agentic SOC appeared first on SecurityWeek.
Watchdog asks whether customers were clearly told how to avoid the costlier AI-equipped plans
The company was previously valued at $1.6 billion, and the latest raise has significantly increased that valuation. The post ThreatLocker Raises $190 Million in Series F Funding ap…