Enterprise AI is quietly undoing a decade of credential hygiene
AI adoption is reviving risky static credentials, unsigned artifacts and poor secrets management.
SC Media
20 articles
AI now makes SMBs worth a hacker’s time
AI has erased an economic advantage that once helped protect SMBs.
SonicWall advises customers to patch two new SMA1000 zero-days
Attackers are chaining two SonicWall SMA1000 zero-days to gain remote code execution.
Ping YOUniverse: Restoring trust in both humans and AI agents
As AI makes identity management even more critical, Ping says it is solidifying trust in people and machines alike.
CrowdStrike unveils Falcon Guardian to secure AI agents
As reported by Silicon Angle, CrowdStrike has introduced Falcon Guardian, a new software designed to identify and disable unapproved artificial intelligence ...
Critical SQL injection vulnerability in Sangoma Switchvox exploited in the wild
The vulnerability, a severe SQL injection flaw with a CVSS score of 9.3, affects Sangoma Switchvox SMB Edition 8.
METR discloses 2 security incidents, including $600,000 model credit theft
The first incident, in March 2026, saw attackers steal an API key for public model inference.
CrowdStrike launches AI models for cybersecurity with Nvidia
SafeMind comprises two primary models: Red Tempest, designed to simulate AI-driven adversaries and execute advanced attack scenarios, and Blue Solano, which ...
Mozilla rolls out ad blocking to Firefox for iOS
Due to Apple's requirement for all iOS browsers to use its WebKit engine, Mozilla had to build ad blocking directly into Firefox for iOS.
FBI warns of sophisticated phishing attacks targeting high-profile individuals
X investigates mass password reset attempts following X Money launch
Users have reported receiving numerous password reset emails, prompting X product engineer Mridul Singhai to acknowledge the issue on the platform.
BGP hijacking incident diverts traffic, targeting Softaculous and Virtualizor users
The incident began around 20:57 UTC on August 28, when an unknown network began announcing a block of IP addresses belonging to Hetzner, a Softaculous upstre...
Malicious Composer themes deliver spyware to unpatched iOS devices
The malicious code performs two main functions: a mobile ad-fraud and gambling-redirect chain, and a WebKit-to-kernel exploit chain on iPhones that installs ...
Breeze Comet threat actor targets Brazilian financial sector with sophisticated attacks
Breeze Comet gains initial access through password spraying and social engineering tactics, impersonating IT support to trick victims into installing Remote ...
Leaked documents reveal Russian military cyber recruitment pipeline
Originally reported on by DomainTools and GBHackers, the documents detail a force-generation mechanism for General Staff components, including the GRU and th...
NASCIO urges Congress to reauthorize grant program and address AI governance
NASCIO's executive director, Doug Robinson, outlined three federal priorities in a letter to congressional leaders: reauthorizing the SLCGP, reauthorizing Fi...
65% of enterprises see AI agents acting outside of scope
A report by Enterprise Management Associates (EMA) for Cequence Security found that 65% of surveyed enterprises have seen AI agents act outside their scope, ...
New PackClient RAT sold on Telegram
The PackClient RAT, observed by Proofpoint, offers a wide range of capabilities including file theft, remote shell execution, screen capture, and keylogging.
Microsoft identifies ‘TerminalFix’ campaign spreading Python reverse tunnel
The campaign uses DLL sideloading and PNG steganography to evade detection.