-
Calls for global regulation of AI are growing. What exactly could it look like?
Australian Prime minister Anthony Albanese appears to be listening to artificial intelligence (AI) firms’ warnings to the world about the …
-
Treasury chief says AI bosses, not their bots, will carry the can for criminal acts
The US appears to be inching ever so slowly toward holding AI executives legally liable for their models’ criminal activities. Treasury …
-
Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto
The North Korean threat actors behind the Contagious Interview campaign have compromised at least 30,000 devices located in more than 100 …
-
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR
A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security …
-
Google Wants Android Apps to Look Beyond the Security Patch Date
Google’s new Android security libraries let apps and administrators inspect patch status by component instead of relying on a single …
-
Best IT Asset Management Software for SOC 2 and ISO 27001 Readiness
Most lists answering this question point to compliance automation platforms such as Vanta or Drata. Those tools collect evidence and test …
-
Dragos closes its NetRise and runZero deals as Accenture takes control
“It’s about whether the lights stay on and the water stays safe when an adversary attacks,” said Dmitri Alperovitch, the CrowdStrike …
-
The AI plot to scan and destroy books (Lock and Code S07E19)
This week on the Lock and Code podcast… If you want AI to tell you a story, it will. If you want that story to sound like one of your …
-
The fake sites using a cheap toolkit to sell $2,000 AI subscriptions
We found more than 100 subscription websites linked through the same toolkit and closely related developer details. Some impersonate …
-
SD Times Unveils Fall 2026 Supercast Series: Economics, Testing, and Security in the Age of AI
There are three questions we keep hearing from engineering leaders this year, whether directly, in conversations at conferences, or in the …
-
Transforming Bedrock Guardrails events into OCSF with CloudWatch
publishes this telemetry to AWS CloudWatch metrics and model invocation logs for operational monitoring. In this post, I show you how to …
●●●
NVD
- CVE-2026-94098 – A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This vulnerability …
- CVE-2026-94095 – A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this …
- CVE-2026-94096 – A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue …
- CVE-2026-94097 – A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an …
- CVE-2026-94501 – jshERP through 3.6 contains an authorization bypass vulnerability in the userBusiness …
EXPLOITS
- CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth – ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
- Metabase 0.61.0 – Authenticated Remote Code Execution
- FreePBX 17.0.2 – Remote Code Execution (RCE)
- Ghost_CMS 6.19.0 – Remote Code Execution
- Bludit CMS 3.20.0 – Reflected Cross-Site Scripting
SECURELIST
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies
- Angry Birds: Toy Ghouls’ new toys