Risk & Resilience

F5 highlights the importance of AI security, governance, API protection and workforce visibility as enterprises across Oman accelerate artificial intelligence adoption under Oman Vision 2040.

A China nexus threat actor is using the Antino backdoor against Asian government and policy organizations with Microsoft 365 services for command and control.

CISA adds Fortinet FortiMail zero day flaw CVE-2026-104286 to its exploited vulnerabilities catalog after reports of active attacks.

OpenAI separates from three safety researchers over alleged sensitive information mishandling as AI safety concerns and agent security incidents gain attention.

MetaMask is addressing an ongoing security incident affecting part of its infrastructure and has started exiting affected Ethereum validators as a precautionary measure.

Google has announced Gemini 4 Argon, an AI model being provided to trusted cyber defenders through the Fairwind Program with advanced vulnerability research capabilities.

Security company Glow found over 13,000 internal images exposed through public GitHub repositories by AI coding agents, including billing records and unreleased features.

Microsoft has detailed a JADEPUFFER linked cyberattack in which compromised Azure service principals were used to conduct reconnaissance, collect credentials, and attempt to delete cloud resources in an incident aligned with ransomware activity.

Organizations need stronger visibility into AI agents before applying Zero Trust controls, as experts highlight risks around shadow AI, monitoring gaps and governance challenges.

Kiteworks has advised customers to temporarily shut down systems after receiving threat intelligence about a possible cyber attack while stating no customer compromise has been confirmed.

A patched Roundcube Webmail SQL injection vulnerability CVE-2026-48842 is being actively exploited, allowing unauthenticated attackers to potentially access sensitive email data.

Attackers are actively exploiting WordPress CVE-2026-87902, a critical vulnerability that could enable remote code execution. Administrators are advised to update affected versions.