HPE patches ArubaOS-CX switches vulnerable to remote code execution
HPE patched 35 ArubaOS-CX flaws, including a critical bug that could enable remote code execution.
SC Media
20 articles
Are our AI agents turning rogue?
Today's agents are very powerful -- that why someone -- or something -- must watch them at all times.
‘Empty envelope’ email attacks target company leaders
The technique bypasses RejectDirectSend by SMTP envelope sender blank.
Linux Threat Hunting - PSW #942
Phishing campaign targets widely used RMM platforms in 46 countries
Phishing attacks trick victims into installing legitimate RMM tools for remote access.
The next insider threat doesn't have a pulse
Here are some ideas on how to manage insiders when more and more of them are no longer human.
Human attacker uses AI agents to breach enterprise network in under 10 hours
The sophisticated attack, detailed in a Palo Alto Networks Unit 42 report, bypassed the need for novel zero-day exploits or advanced tradecraft, relying inst...
AI models show increasing capability for autonomous cyberattacks, report warns
Booz Allen's Cyber Weapon Index evaluated 18 AI models, nine from the U.S.
Senator Wyden urges NSA to update VPN guidance amid foreign surveillance concerns
A Congressional Research Service analysis, requested by Wyden, indicates that foreign intelligence services may be able to link VPN users to specific website...
Capsule Security unveils 'AI circuit breaker' to control rogue AI agents
Capsule's system assesses whether a specific action aligns with the agent's assigned task, providing a control layer outside the agent itself.
SQL injection vulnerability in WordPress plugin affects millions of sites
The vulnerability, tracked as CVE-2026-19949, is a second-order SQL injection that impacts versions prior to 7.110.
Google launches Gemini 3.8 Flash and Gemini 3.8 Flash Cyber
Gemini 3.8 Flash demonstrated strong performance across 16 AI benchmarks, outperforming competitors like Claude Opus 5 and GPT 5.
New 'Spring Ring' operation uses vishing via Microsoft Teams
The "Spring Ring" operation, observed between January and April, illustrates a shift from traditional email phishing to attacks leveraging trusted enterprise...
New browser malware uses remote commands to control Windows systems
The malware, disguised as a "privacy browser," was distributed via a deceptive sponsored search result after an employee mistyped a URL.
Russian national charged in US for malware scheme targeting 80,000 users
A Russian national has been charged by the U.S.
Grafana fixes critical SSRF flaw affecting Grafana MCP servers
An MCP caller could potentially reach unintended internal services leveraging the MCP server’s network position.
FCC proposes consumer scorecard for telecom robocall prevention efforts
The proposed scorecard would evaluate how well voice service providers, including wireless, wireline, and VoIP companies, deter robocalls and their transpare...
Microsoft Defender for Office 365 mistakenly flags Google search links as malicious
The false positive is attributed to an inaccurate security classification within the Defender for Office 365 Safe Links feature.
Hackers compromise 5,000 Dropbox accounts using Lenovo ID flaw
The breach, which occurred between August 4 and August 21, allowed attackers to access Dropbox accounts by registering Lenovo IDs with the victims' email add...
Ping YOUniverse: How AI lets identity management go 'headless'
Agentic AI now makes it possible to develop and use the Ping Identity platform without GUIs or dashboards.