The full corpus — beyond today's front page.
1334 results · page 9 of 56
Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks involving stolen GitHub tokens, malicious AI installers, and MFA phishing, explaining why faster detection and automated containment are critical. [...]
Who should care: General readers · AI governance · Policy
Two Marines have filed a class-action lawsuit against the Pentagon, alleging that the Defense Manpower Data Center suffered a data breach that the Department of Defense could have prevented by addressing known cybersecurity vulnerabilities.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A commentary published by Just Security argues that current systems for evaluating frontier AI models fall short, calling for evaluation processes that are more meaningful, independent, and transparent. The piece frames existing approaches as inadequate rather than merely imperfect.
Who should care: General readers · AI governance · Policy
Problem in language that underpins 70% of sites has led governments and companies to pull sites offline to patch fault Tell us: have you been affected by the PHP code flaw? Websites around the world have been hit by millions of attempts to exploit a recently discovered vulnerability in their code, cybersecurity companies have said, as the US National Security Agency warned the flaw could allow attackers to take control of web servers, steal data and disrupt services. The problem in the PHP programming language, which underpins about 70% of the world’s websites, emerged on Wednesday causing go…
Asia needs $1 trillion investment annually for next 15 years to boost energy security, McKinsey says Reuters
Japan considers broader definition of security spending to inflate defense outlays, sources say Reuters
South Korea activates emergency response to PHP security flaws Reuters
Hermes ramped up security after French unrest, CFO says Reuters
AI uncovered long-hidden programming flaws, triggering a rare global cyber-security response.
Who should care: General readers · AI governance · Policy
Global Encryption Day is an annual day of action when advocates, champions, and everyday people come together to celebrate, promote, and defend encryption, a key security approach that enables safe online experiences.
The Department of Homeland Security has updated its internal policy governing how the agency uses artificial intelligence. The revision signals a shift in how one of the federal government's largest and most powerful agencies is setting rules for AI deployment.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
DHS publishes July order excluding and removing DeepSeek AI products from federal civilian agency IT systems. The post Just the Docs: DHS Discloses July Order Stripping DeepSeek AI from Federal Civilian IT Systems appeared first on Just Security.
Who should care: General readers · AI governance · Policy
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Microsoft has linked a nation-state threat actor, tracked as Storm-0940, to a supply chain attack on ConnectWise that used an agentic AI tool called ARTEX to accelerate the compromise. The campaign targeted Microsoft 365 environments by abusing application credentials stolen through the breach.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
The vulnerabilities with PHP, a programming language widely used across the internet, have been described as the most significant ever found by AI.
Who should care: General readers · AI governance · Policy
An analysis of DHS and ICE's AI inventory disclosures found that both agencies fell short of even the minimal transparency standards the Trump administration set for federal AI use. The findings point to structural weaknesses in how the government tracks and reports its own AI deployments.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch the flaws could have dire consequences.
U.S. federal agencies including CISA, the FBI, and the Secret Service have issued a joint advisory warning about the SafePay ransomware group. The advisory, which also involves international cybersecurity partners, signals that SafePay is considered a significant and active threat.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
ClickFix attacks are surging as cybercriminals use fake AI installers, malicious search results, and trusted chatbot platforms to trick users into executing malware. Push Security examines how these attacks evade traditional defenses and why AI tools have become increasingly effective lures. [...]
Who should care: General readers · AI governance · Policy
AI security incidents are driving faster regulatory action around the world, according to reporting from IAPP. The pattern suggests governments are moving from watching AI risks to actively writing rules in response to them.
Who should care: Lawyers · Compliance · General readers · AI governance · Policy
Lenovo’s security portfolio will add tools to track workplace AI use and control data sharing. Stock Titan
Who should care: General readers · AI governance · Policy
A design flaw in Meta's Muse AI assistant allowed outside parties to access private conversations through shared links, according to security researchers. Meta has suspended the share link feature while it addresses the vulnerability.
Who should care: General readers · AI governance · Policy
Fleet has released new AI governance features aimed at enterprise device management. The capabilities are designed to give organizations more oversight and control over AI activity across their device fleets.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024. [...]
Who should care: Cybersecurity · Privacy officers · Administrators