Aggregated from vendor advisories, security research, and industry publications.
Cisco announced plans to acquire Astrix Security for an undisclosed amount to bolster its AI agent security portfolio. Astrix is known for its security platform that specializes in identifying, managing and securing AI agents and non-human identities, such as machine-to-machine connections. “Since its founding five years ago, Astrix Security has focused on securing the identities and credentia…
46% say age checks are easy to bypass, and nearly a third admit getting around them It’s been months since the UK government began requiring stronger age checks under the Online Sa…
The Amazon Simple Email Service (SES) is being increasingly abused, a cybersecurity company's telemetry data shows, to send convincing phishing emails that can bypass standard secu…
Cybersecurity firm Kaspersky reports that the Amazon Simple Email Service (SES) is being increasingly abused to send convincing phishing emails that can bypass standard security fi…
Shortly after the authentication-bypass flaw was disclosed multiple proof-of-concept exploits appeared, and one researcher claims there's been zero-day activity for at least a mont…
Everything you need to build the PS-85 is available from its designer's website, even if you can't get to space We've all been there: You're doing maintenance on a Weyland-Yutani h…
Everything you need to build the PS-85 is available from its designer's website, even if you can't get to space
The acquisition strengthens Cisco’s push into identity-centric security for AI and machine access. The post Cisco Moves to Acquire Astrix Security to Tackle Non-Human Identity Risk…
An active phishing campaign has been observed targeting multiple vectors since at least April 2025 with legitimate Remote Monitoring and Management (RMM) software as a way to estab…
Article URL: https://www.strix.ai/blog/how-strix-found-zero-auth-vulnerability-dod-backed-startup Comments URL: https://news.ycombinator.com/item?id=48012162 Points: 221 # Comments…
In elite soccer, success isn’t measured solely on the field. The fan experience, operational efficiency, and the ability to anticipate decisions are also at stake. In this context,…
The cybersecurity firm’s investigation has not found any impact on its source code release or distribution process. The post Trellix Source Code Repository Breached appeared first…
A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a credential-stealing payload targeting browsers, environment files, and …
Take a Network Break! It’s a busy show this week. We start with follow-up on Anthropic’s Project Glasswing, router bans, and end-of-engineering/end-of-support date changes for Fort…
Progress Software has released updates to address two security flaws in MOVEit Automation, including a critical bug that could result in an authentication bypass. MOVEit Automation…
It's not the fork that's the problem, it's the attempt to make it look official, says original Notepad++ dev Don Ho Notepad++ remains a Windows-only app, at least under that name. …
It's not the fork that's the problem, it's the attempt to make it look official, says original Notepad++ dev Don Ho
Cybersecurity firm Trellix disclosed a data breach after attackers gained access to "a portion" of its source code repository. [...]
The Register gets a look inside AWS' networking lab in Cupertino FEATURE In an unassuming three-story office building in Cupertino, California, engineers from Amazon Web Services a…
The Register gets a look inside AWS' networking lab in Cupertino
'If you don't have visibility, you can't understand what to protect' When it comes to securing enterprise supply chains, now heavily infused with AI applications and agents, a soft…
'If you don't have visibility, you can't understand what to protect'
Why no cloud storage architecture was designed for what agentic AI is about to demand
More than 1,600 socially engineered messages from the China-backed advanced persistent threat (APT) group target various sectors to deliver the previously undocumented ABCDoor back…
This week, the shadows moved faster than the patches. While most teams were still triaging last month’s alerts, attackers had already turned control panels into kill switches, kern…
Keeping time across a distributed network is harder than it sounds. The OpenInfra Foundation is now out with StarlingX 12.0, and precision timing support is one of its headline add…
Fraudsters aren't hacking credit unions, they are exploiting normal business processes. Flare reveals how structured loan fraud methods use stolen identities to pass verification a…
Your local Cisco AI Assistant just got a little Jedi training. Cisco is looking to make the most of the unofficial Star Wars Day with a May the Fourth Be With You release of wha…
Significant cybersecurity M&A deals announced by Airbus, Cyera, Fortra, Palo Alto Networks, Silverfort, and Socket. The post Cybersecurity M&A Roundup: 33 Deals Announced in April …
Hackers delivered malware via a customer chat channel, infected an analyst’s system, and accessed the internal support portal. The post DigiCert Revokes Certificates After Support …