> TODAY'S SUMMARY (110 articles)
Today's cybersecurity landscape reveals several critical threats and vulnerabilities. Over 600,000 WordPress sites are at risk due to a newly discovered SQL injection vulnerability in the Backuply plugin. Additionally, a serious flaw in Cisco's Secure Email Gateway is actively being exploited, allowing attackers to gain root access and execute commands. The UK Legal Aid Agency hack has expanded in scope, with records dating back to 1978 compromised. New malware, including the Android RAT "Hirudo," is stealing banking credentials by replacing legitimate apps. Meanwhile, sophisticated spyware distribution methods via targeted ads raise concerns about zero-click exploits. Organizations are urged to patch vulnerabilities promptly as the cyber threat landscape evolves rapidly.
|
// AI-powered summary generated at 16:01
Capsule Security has launched from stealth with a $7 million seed round led by Lama Partners and Forgepoint Capital International. It prevents AI agents from being manipulated, misbehaving, or silently exfiltrating data when handling sensitive information and executing workflows. Capsule is advised...
The Israeli startup aims to secure AI agents at runtime, continuously monitoring their behavior to prevent unsafe actions.
The post Capsule Security Emerges From Stealth With $7 Million in Funding appeared first on SecurityWeek.
Broadcom has announced VMware Tanzu Platform agent foundations, introducing a secure-by-default agentic runtime designed to accelerate the delivery of autonomous AI applications. By extending the trusted code-to-production simplicity of Tanzu Platform to AI agents, Broadcom is enabling enterprise de...
The post <b>MFA vs SSO: What Should You Use?</b> appeared first on Sovy.
The post MFA vs SSO: What Should You Use? appeared first on Security Boulevard.
Researchers warn that a flaw in Anthropic’s Model Context Protocol allows unsanitized commands to execute silently, enabling full system compromise across widely used AI environments.
The post ‘By Design’ Flaw in MCP Could Enable Widespread AI Supply Chain Attacks appeared first on SecurityWeek.
Latest in a string of cases that have earned France an unfortunate title A mother and her ten-year-old son are now free after being kidnapped for around 20 hours while the father was being extorted for hundreds of thousands of euros.…
Bitdefender has launched GravityZone Extended Email Security, unifying email and endpoint protection in one platform. Built for organizations and MSPs, it uses an ICES approach to deliver continuous protection against modern email threats, including phishing, BEC, ransomware, impersonation, and insi...
Published through five accounts, the extensions appear part of a coordinated campaign based on shared C&C infrastructure.
The post 100 Chrome Extensions Steal User Data, Create Backdoor appeared first on SecurityWeek.
This convincing copyright scam is targeting YouTube creators. Attackers can take over your channel, plus your entire Google account.
Tenable unveiled a new OT asset discovery engine that enables security teams to bring risks associated with cyber-physical systems (OT, IoT, and shadow IT) into a unified view of cyber exposure. With instant deployment and no additional IT overhead required, Tenable’s new VM-Native OT Discovery capa...
Email remains the primary vector for cyberattacks. Attackers favor "low and slow" tactics—highly targeted spear-phishing, sophisticated brand impersonation, and supply chain fraud. To close these gaps, organizations need more than just a filter at the front door; they require deep visibility i...
Critical nginx-ui MCP authentication bypass CVE-2026-33032 actively exploited with CVSS 9.8
Software is being built faster than ever, but application security has not kept up.
The post Why Software Supply Chain Security Requires a New Playbook appeared first on Security Boulevard.
An experimental voice pipeline for the Agents SDK enables real-time voice interactions over WebSockets. Developers can now build agents with continuous STT and TTS in just ~30 lines of server-side code.
Cloudflare Workflows, a durable execution engine for multi-step applications, now supports higher concurrency and creation rate limits through a rearchitectured control plane, helping scale to meet the use cases for durable background agents.
Sophos’ Ross McKerchar discusses leadership at scale, retaining talent, defending against AI-enabled threats, and the industry’s growing trust problem.
The post CISO Conversations: Ross McKerchar, CISO at Sophos appeared first on SecurityWeek.
Browser Rendering is now Browser Run, with Live View, Human in the Loop, CDP access, session recordings, and 4x higher concurrency limits for AI agents.
Announcing a preview of the next edition of the Agents SDK — from lightweight primitives to a batteries-included platform for AI agents that think, act, and persist.
Generative AI is moving from experimentation to everyday enterprise use, often faster than governance models were designed to support. As adoption accelerates, organizations are navigating the evolving landscape with new questions around security, data privacy, compliance, and control, all while bei...
The Cloudflare Registrar API is now in beta. Developers and AI agents can search, check availability, and register domains at cost directly from their editor, their terminal, or their agent — without leaving their workflow.