Security researcher Tom Jøran Sønstebyseter Rønning, posting as @L1v1ng0ffTh3L4N, has revealed that Microsoft Edge decrypts every saved password at startup and holds all of them in process memory, in cleartext, for the entire browser session. He says this includes passwords for sites the user is visiting as…
Tag: Information Security Buzz
US weighs slashing vulnerability patching deadlines as AI-driven threats accelerate
There are discussions in US cybersecurity circles to radically shorten the time given to government agencies to fix software vulnerabilities currently being exploited, especially amid concerns about the growing use of artificial intelligence-based attacks. According to a report by Reuters, there are talks of reducing the time frame from the current two or three weeks down to just…
How Iranian Cyber Intrusions Unfold Inside Enterprise Networks
Iranian cyber operations have gone from being disruptive single events to ongoing campaigns against governments, infrastructure providers, technology companies, and research organizations. Their ability to operate inside the same tools and infrastructure that defenders rely on makes these intrusions difficult…
Copy Fail lands in CISA KEV as actively exploited Linux flaw threatens widespread privilege escalation
The Cybersecurity and Infrastructure Security Agency (CISA) has added another Linux kernel vulnerability, CVE-2026-31431, also known as Copy Fail, to the Known Exploited Vulnerabilities (KEVs). Inclusion in the list implies active real-world attacks and increases the priority of patches. This particular vulnerability, which…
Visual data is the blind spot in enterprise security: that’s about to change
Most enterprise security teams can tell you exactly how their databases are encrypted. They know who has access to their CRM and can pull audit logs for every sensitive document that’s been opened, copied, or shared in the last 90…
AppSec is dead, long live AI security
“AppSec is Dead, Long Live AI Security” is the kind of statement designed to provoke a reaction. It is bold, dramatic, and easy to remember. It also captures a growing belief in the market that AI will soon make traditional…
The new rules of war have no rules
James Blake is VP of Global Cyber Resiliency Strategy at Cohesity. He has handled hundreds of ransomware and wiper incidents, advised boards on recovery priorities, and spent the better part of three decades thinking about what it actually takes for…
Myth or Mythos? The illusion of advantage in the AI cybersecurity race
Anthropic Mythos platform has sparked a new round of debate over a classic cybersecurity question – except at an entirely new level: What will happen as the systems used to discover and exploit vulnerabilities gain the ability to do so…
Rogue users allegedly access Anthropic’s restricted Claude Mythos model
Unsanctioned users have allegedly accessed Anthropic’s controversial Claude Mythos Preview AI frontier model although the company has limited the businesses that can use it. The group, who have yet to be named, had apparently made many attempts to access Mythos since it debuted earlier this month. They finally gained access via a…
How integrated GIS is powering the next generation of industrial cyber resilience
Cyber professionals have spent countless hours reinforcing the systems of myriad industries. Now, some of them are reciprocating, as integrating geographic information systems (GIS) with enterprise IT/OT systems becomes more common. By mapping location-based data against utility infrastructure, these platforms…
Vercel confirms April 2026 security incident linked to third-party AI tool
Cloud development platform Vercel has confirmed a security incident involving unauthorized access to parts of its internal systems, following a breach disclosed in April 2026. In an official security bulletin, the company stated: “We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems.” Vercel added that…
The 7 Top AI SOC Platforms to Watch in 2026
AI SOC platforms have been gaining rapid traction in the industry over the past few years. and will continue to grow in popularity as their usability and time-saving capabilities are demonstrated. These AI-driven, often agentic SOC platforms sit at the intersection of autonomy…
The Real Cyber Awards and Conference opens for entries
Entries have opened for the Real Cyber Awards 2026 and Conference, a UK-based cybersecurity event designed to recognise the organisations and individuals working to keep businesses secure. Positioned as a platform to highlight “the real work happening in cybersecurity today,”…
Pro-Russian threat actors target Swedish heat and power plant in failed cyberattack
In 2025, pro-Russian threat actors attempted to disrupt a Combined Heat and Power (CHP) facility in western Sweden. A failed attack on dual-purpose critical infrastructure serving both electricity generation and district heating networks. The Minister for Civil Defence of Sweden, Carl-Oskar Bohlin, revealed…
Security trends today: AI escalation, identity exposure, and the operationalization of Zero Trust
Security conversations are no longer centered on whether attacks will increase; instead, they are focused on evolving threats, how convincingly threat actors impersonate trust, and how prepared organizations are to detect what they have never seen before. Because cybercriminals use…
OpenAI expands cybersecurity program with GPT-5.4-Cyber model
OpenAI will be expanding its cybersecurity efforts by increasing the number of verified defenders served by its Trusted Access for Cyber (TAC) program into the thousands, with hundreds more security teams to follow. This move aims to address the challenge of defenders…
When PUPs bite: Huntress uncovers “weaponised” adware exposing 25,000+ systems
Cybersecurity provider Huntress has identified a major security threat. What appeared to be an unassuming potentially unwanted program (PUP) has transformed into a threat that can disable antivirus systems and put thousands of endpoints at risk. As mentioned in a recent blog, the cyberattack involves the…
Why the cybersecurity skills gap is partly self-inflicted
The cybersecurity skills gap is usually framed as a hiring problem. Organizations respond by expanding recruitment pipelines, investing in certifications, and launching internal training programs. The logic seems simple: if security teams are understaffed, the solution is to add more…
The quiet revolt: what the world happiness report 2026 tells security professionals
Something the World Happiness Report 2026 reveals deserves more attention than it has received outside wellbeing circles. In Western Europe and English-speaking countries, young people who use social media for more than seven hours a day report significantly lower wellbeing…
The Quiet Revolt: What the World Happiness Report 2026 Tells Security Professionals
Something the World Happiness Report 2026 reveals deserves more attention than it has received outside wellbeing circles. In Western Europe and English-speaking countries, young people who use social media for more than seven hours a day report significantly lower wellbeing…