OWASP updates top 10 security risks for LLM applications
OWASP’s 2026 LLM Top 10 highlights prompt injection, AI agents and emerging RAG security risks.
SC Media
20 articles
LACMA data breach exposes customer and employee information
The Los Angeles County Museum of Art (LACMA), one of the largest art museums in the western United States, has announced that a data breach last year exposed...
Fake recruiter scams target corporate credentials on mobile devices
Researchers at Zimperium's zLabs have identified these campaigns, tracked as RecruitTrap, impersonating major companies such as Amazon, Apple, and Deloitte.
Nucleus Security unveils AI engine to enhance exposure management
Nucleus Helix integrates with the company's existing Data Core, which stores asset, vulnerability, and ownership information.
AnonyMousKIT phishing service targets Apple credentials and Activation Lock
AnonyMousKIT is specifically designed to circumvent Apple's Activation Lock, a security measure that links an Apple device to its owner's Apple ID, making st...
WhatsApp enhances account security with passkeys and stronger verification
WhatsApp has introduced the ability for users to create multiple passkeys, allowing separate secure logins for different devices and platforms.
Russian hackers use 'zero-click' email attacks against organizations
The "beehive" attacks, attributed to the Russian group Laundry Bear (also known as TA488 and Void Blizzard), exploit a flaw in Zimbra webmail, allowing attac...
Nvidia NemoClaw vulnerability allows full control of AI agent's local model server
The vulnerability, identified as CVE-2026-65105, can be exploited by visiting a malicious website.
Why human-speed defense has failed
Defenders need AI today so they can run at the same speed as the attackers.
Apple reverses Hide My Email domain change after user backlash
Users expressed concerns that the shift to @private.icloud.
Linux Foundation to govern TRACE specification for AI agent security
TRACE, developed by OPAQUE in collaboration with AMD, Intel, Microsoft, and the Technology Innovation Institute, creates a hardware-backed, cryptographically...
India drops plan for cross-industry biometric database but keeps verification
Biometric Update reports that India's Department of Telecommunications (DoT) has abandoned its proposal for a unified Biometric Identity Verification System ...
Nutex investigating data breach after unauthorized access to servers
Nutex Health, a for-profit healthcare company operating 28 facilities across 12 states, detected the intrusion and has since hired external incident-response...
Mobile banking trojans expand capabilites; 66% now allow full device takeover
Banking trojans have evolved to include remote control and ransomware capabilities.
Connecting Cyber Risks to Board Outcomes & BHUSA interviews from Mimecast & Zscaler - Dan Bowden, Leslie Nielsen, Brett Stone-Gross - BSW #462
Fibonacci, Hidden Sounds, Teams, Zimbra, Entra-ID, z.ai, Schrödinger's, Aaran Leyland - SWN #610
From tool stack to defense system: Connecting the security dots
How well do your various security tools play together? AI can organize them into an army.
CISA adds Oracle WebLogic bug to its list of exploited vulnerabilities
Experts say exploiting WebLogic middleware gives attackers access to an enterprise's core business apps.
Why mission risk should drive cyber operations strategies
Here's how a risk-based approach can foster cyber resilience.
Instinct AI assistant faces privacy concerns
Developed by Spear Street Technology, led by former Sierra scientist Noah Shinn, Instinct operates by integrating with users' applications and devices, inclu...