Tag: cybersecurity

A China nexus threat actor is using the Antino backdoor against Asian government and policy organizations with Microsoft 365 services for command and control.

APIC Digital Technologies and Oculus Systems have formed a strategic consortium partnership to collaborate on cloud, AI, cybersecurity, infrastructure, and digital transformation projects.

CISA adds Fortinet FortiMail zero day flaw CVE-2026-104286 to its exploited vulnerabilities catalog after reports of active attacks.

OpenAI separates from three safety researchers over alleged sensitive information mishandling as AI safety concerns and agent security incidents gain attention.

An analysis of AI risks, corporate transparency, global regulation, and the challenges nations face as advanced artificial intelligence systems reshape technology, security, and society.

Google has announced Gemini 4 Argon, an AI model being provided to trusted cyber defenders through the Fairwind Program with advanced vulnerability research capabilities.

Security company Glow found over 13,000 internal images exposed through public GitHub repositories by AI coding agents, including billing records and unreleased features.

Awan Distribution and Fortinet discussed AI driven cybersecurity, AI powered SecOps, Unified SASE, and Security Fabric approaches for modern enterprises.

Microsoft has detailed a JADEPUFFER linked cyberattack in which compromised Azure service principals were used to conduct reconnaissance, collect credentials, and attempt to delete cloud resources in an incident aligned with ransomware activity.

Organizations need stronger visibility into AI agents before applying Zero Trust controls, as experts highlight risks around shadow AI, monitoring gaps and governance challenges.

Kiteworks has advised customers to temporarily shut down systems after receiving threat intelligence about a possible cyber attack while stating no customer compromise has been confirmed.

A patched Roundcube Webmail SQL injection vulnerability CVE-2026-48842 is being actively exploited, allowing unauthenticated attackers to potentially access sensitive email data.