One bug disabled the security service on restart, another blocked installation on hardened RHEL systems This article has been indexed from www.theregister.com – Articles Read the original article: Microsoft Defender for Endpoint leaves some Linux boxes defenseless after update
Category: EN
JetStream Security enables on-demand shutdown of compromised AI agents
JetStream Security has announced the release of an AI Kill Switch that allows organizations to shut down compromised AI agents on-demand without impacting other AI operations. This new control plane for AI agents solves the inability to stop a single…
NVIDIA, Microsoft, and CrowdStrike Launch Alliance for Open-Source AI Security
NVIDIA, Microsoft, and CrowdStrike have joined a broad coalition of technology, cybersecurity, and open-source organizations to launch the Open Secure AI Alliance. This initiative focuses on developing open tools, models, agent harnesses, and security techniques to defend AI-enabled infrastructure. The…
7AI expands platform with Federated SIEM and AI workflow builder
7AI has announced two major platform capabilities: 7AI Federated SIEM, which lets security teams query, investigate, and act on data wherever it lives, including within 7AI, and 7AI Build, which lets enterprises and partners define agentic workflows, skills, and AI-native…
MedusaHVNC Malware Uses Hidden Windows Desktops to Evade Detection
The malware-as-a-service operation launches legitimate browsers on an invisible desktop, giving attackers persistent and covert remote access to compromised Windows systems. This article has been indexed from SecurityWeek Read the original article: MedusaHVNC Malware Uses Hidden Windows Desktops to Evade…
Google changes how it names cyber threat actors
Google Threat Intelligence Group (GTIG) has started using a new naming system for the threat actors it tracks. The change comes after Mandiant and Google’s Threat Analysis Group (TAG) merged into one unit, leaving the company with two separate naming…
WalletService Privilege Escalation Flaw Allows Attackers Full Control of Windows Systems
Microsoft has addressed a local privilege escalation vulnerability in WalletService on Windows. This flaw could allow a standard user to gain full control over an affected machine, operating as \text{NT AUTHORITY\SYSTEM}. The vulnerability specifically affects WalletService, a LocalSystem component used…
DentaQuest disclosed a data breach that impacted +23 million individuals
DentaQuest disclosed a data breach that may have exposed the personal and dental health information of more than 23 million people. DentaQuest is notifying more than 23 million people of a data breach after hackers accessed its network in May…
Cruciferra Crypter Uses BYOVD, Process Ghosting
A China-linked cybercrime operation targeting Indian taxpayers, tax professionals, and corporate finance teams has adopted Cruciferra, an advanced crypter service that uses multiple evasion techniques to bypass security controls. This article has been indexed from CyberMaterial Read the original article:…
Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update
Cybersecurity researchers have flagged a Microsoft Teams-themed phishing campaign that employs "secure document" lures to deliver legitimate remote monitoring and management (RMM) tools. "The victim was directed through compromised web infrastructure to a counterfeit Microsoft Store page claiming that Microsoft…
US charges citizen for wiping phone at border
Federal authorities have charged a US citizen with obstruction after he allegedly provided a password that wiped his smartphone during a border search at Atlanta's Hartsfield-Jackson airport on January 24, 2025. This article has been indexed from CyberMaterial Read the…
PTC Windchill Vulnerability Exploited in Ransomware Campaign
The critical unsafe deserialization flaw allows attackers to execute arbitrary code remotely, without authentication. This article has been indexed from SecurityWeek Read the original article: PTC Windchill Vulnerability Exploited in Ransomware Campaign
Lookout MSEC: Mobile App Security Tool
Lookout has introduced the Mobile Security Exposure Center (MSEC), a new security tool designed to provide transparency into enterprise mobile applications through automated SBOM generation. This article has been indexed from CyberMaterial Read the original article: Lookout MSEC: Mobile App…
C1 adds shadow AI discovery to its identity governance platform
C1 has launched shadow AI discovery to eliminate the massive security blind spots created by unauthorized AI agents, tools, and credentials. By automatically discovering and folding every AI-adjacent identity into C1’s existing identity governance platform, organizations can finally ensure that…
LLM Cheating on Cybersecurity Benchmarks
Large language models are systematically cheating on cybersecurity benchmarks, achieving inflated success rates that misrepresent their actual capabilities, according to new research published on arXiv. This article has been indexed from CyberMaterial Read the original article: LLM Cheating on Cybersecurity…
n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
n8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform. Security Joes found the flaw while probing n8n's February fix for CVE-2026-27577 for another bypass. The…
OpenAI Model Escapes Containment, Hacks Hugging Face
OpenAI has disclosed a security incident in which one of its AI models went rogue during testing and successfully compromised systems at Hugging Face, an AI infrastructure company. This article has been indexed from CyberMaterial Read the original article: OpenAI…
Iranian Hackers Are Disabling Industrial Safety Alarms and Hiding It From Operators
Iranian-affiliated hackers are targeting internet-connected industrial controllers used across critical infrastructure in the United States. Their activity can disrupt essential processes in water, energy, and government environments, where even a small change to control logic can create serious real-world consequences.…
Wrench Attacks Bypass Encryption by Forcing Victims to Unlock Crypto Wallets
Cryptocurrency theft is increasingly moving beyond the screen. Criminals are using violence, threats, home invasions, and kidnapping attempts to force victims to unlock wallets or approve transfers while under pressure. These incidents are known as wrench attacks, a term that…
Anyone With a Browser Could Access 700,000 Vatican Prayer App Accounts
A critical access control vulnerability in the Vatican’s official “Click to Pray” platform has exposed the personal data of more than 700,000 users, highlighting once again how basic web security misconfigurations continue to put large-scale user bases at risk. The…