Coordinated by the European Commission in cooperation with Europol, the analysis draws on stakeholder consultations, dedicated meetings, surveys and…
Category: EN
Sysdig Adds Runtime Security and Governance for AI Agents
Sysdig’s platform uses runtime visibility to track AI agent actions and block risky behavior before it reaches production systems.
CVE-2026-119301 – Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
Bulletin ID: 2026-161-AWS Publication Date: 11/02/2026 08:30 AM PST Description: We are aware of CVE-2026-119301 in the Apache Iceberg write component,…
Descope Envoy brings AI agent authentication to consumer apps
Descope has announced Envoy, a set of capabilities that gives personal AI agents a delegated sign-in path alongside a consumer app’s existing…
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through…
Microsoft pushes AI PCs despite rising RAM costs
Microsoft is attempting to reposition AI-capable PCs as essential infrastructure investments rather than routine hardware replacements, urging enterprise…
HYFLOCK Ransomware Evolves with New Builds and Encryption Weaknesses
Four ransomware generations. Six months of development. Eight victim claims published in a single day. HYFLOCK spent much of 2026 building its ransomware…
CVE-2026-119085 – Template injection in the publishing component of Virtual Engineering Workbench
Bulletin ID: 2026-162-AWS Publication Date: 11/02/2026 09:30 AM PST Description: Virtual Engineering Workbench (VEW) is an open-source platform where…
Canadian extradited for university supercomputer cryptomining
Federal prosecutors have charged two Canadian nationals with illegally accessing university supercomputers to mine cryptocurrency, with one defendant now…
Cycurion Habit verifies threats and validates fixes before closing cases
Cycurion has launched Habit, an AI-driven security operations center (SOC) built to identify threats before they disrupt operations. The launch also marks…
Revolve fashion retailer breach affects 1.5M
Fashion retailer Revolve Group has notified customers that payment card information was stolen in a breach affecting an estimated 1.5 million people.
Storm Ransomware Is Scaling Fast and Selling an AI Powered Image
A new ransomware operation appeared in August 2026 with an ambitious pitch: sophisticated infrastructure, aggressive affiliate payouts, global ambitions,…
Impart Security launches AI-powered Runtime Defense Harness
Impart Security has introduced Runtime Defense Harness, a new tool designed to accelerate vulnerability response by using AI agents to create virtual…
APT29 Watering Holes Target Unpatched iPhones and Android Devices
APT29 compromised Ukrainian analytics tracker Plerdy to serve n-day exploits to mobile users
European and Ecuadorian cooperation leads to 20 arrests in major hit against drug trafficking
The operation, codenamed Operation CANTABRIA, underscores the success of strong cooperation between European and Ecuadorian law enforcement agencies,…
Attackers Leverage Critical Node-RED Flaw to Gain Unauthorized Access
There is an active exploit of a critical security vulnerability in Node-RED by threat actors to install malicious Linux bots and webshells on vulnerable…
Token thieves costing companies $100K+ per day in illicit LLM charges
Don’t let the LLMjackers hit you
HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites
On October 22, 2026, Google published CVE-2026-111497, a critical vulnerability in Brotli, one day after the Brotli project released fixed versions. The…
As the White House touts its AI task force, CISA is conspicuously missing
Without the cybersecurity agency, the new group could stumble as it tries to work with critical infrastructure operators on AI security, experts said.
Synthetic CISOs Call AI Agents the Most Underestimated Risk
Synthetic CISOs rank AI agents as the top underestimated threat. See key survey findings and learn how to secure overpermissioned agents and vulnerable…