The Trivy Supply Chain Compromise: What Happened and Playbooks to Respond
The post The Trivy Supply Chain Compromise: What Happened and Playbooks to Respond appeared first on Security Boulevard.
Author, Creator & Presenter: Simon Maxwell-Stewart - Security Researcher And Data Scientist At BeyondTrust
Our thanks to BSidesSLC for publishing their Creators, Authors and Presenter’s outstanding BSidesSLC 2025 content on the Organizations' YouTube Channel.
Permalink
The post BSidesSLC 2025...
Agentic AI platforms are shifting from passive recommendation tools to autonomous action-takers with real system access,
The post Why Agentic AI Systems Need Better Governance – Lessons from OpenClaw appeared first on SecurityWeek.
Measuring data center efficiency requires the right tools — not guesswork. This guide covers 20 platforms across six categories, from enterprise DCIM suites to cloud-native options like Hyperview, helping IT leaders track PUE, reduce energy costs, and meet sustainability mandates with confidence.
Th...
Google has launched a new dark web intelligence service to tackle the grueling task of monitoring underground criminal forums. It is deploying Gemini-powered artificial intelligence (AI) agents to sift through upwards of 10 million posts daily, the tech giant said, to replace clunky, keyword-based...
TeamPCP, the threat actor behind the recent compromises of Trivy and KICS, has now compromised a popular Python package named litellm, pushing two malicious versions containing a credential harvester, a Kubernetes lateral movement toolkit, and a persistent backdoor.
Multiple security vendors, includ...
The author of a new book on surveillance discusses how an upcoming Supreme Court case could limit what data police can dig up showing individuals’ locations.
Qualys discovered that several vulnerabilities existed in the AppArmor
Linux kernel Security Module (LSM). An unprivileged local attacker could
use these issues to load, replace, and remove arbitrary AppArmor profiles
causing denial of service, exposure of sensitive information (kernel
memory), loca...
Securden launched what it calls the world’s first truly unified identity security platform at RSA Conference 2026, consolidating privileged access management, endpoint privilege management, identity governance, cloud entitlement management, non-human identity security, and AI agent security into a s...
Attackers compromised the open-source security tool and published malicious versions of the software. Mandiant warns the fallout could impact up to 10,000 downstream victims.
The post Experts warn of a ‘loud and aggressive’ extortion wave following Trivy hack appeared first on CyberScoop.
imper.ai made its public debut at RSAC 2026 with the launch of its Workforce Identity Security platform, built to stop impersonation and account takeover across the employee lifecycle. The company is targeting a specific gap it says current identity tools leave wide open: attackers who bypass authen...
Hyperproof announced AI Guided Experiences at RSA Conference 2026, its latest push to use AI to reduce the manual effort at the core of compliance operations. The new capabilities move beyond search and summarization, which the company introduced in September 2025, into workflow execution inside the...
The attacks included a destructive infiltration of Poland's energy system in December and was suspected of originating in Russia.
The post Poland Faced a Surge in Cyberattacks in 2025, Including a Major Assault on the Energy Sector appeared first on SecurityWeek.
Cy4Data Labs announced at RSAC 2026 that its flagship platform Cy4Secure now includes a Behavior Engine for insider threat detection, designed to bring the time it takes to identify and contain a data breach from more than 200 days down to seconds. The Behavior Engine is built around a three-phase r...
Tanium used RSAC 2026 to announce a wave of platform updates aimed at pushing enterprises closer to fully autonomous IT operations. The new capabilities span security operations, exposure management, and endpoint management, and they lean heavily on AI and real-time endpoint intelligence. The headli...
Several security issues were fixed in the Linux kernel.
ProjectDiscovery launched Neo commercially at RSAC 2026, bringing an autonomous penetration testing platform to market after winning the RSAC Innovation Sandbox in 2025. Neo performs end-to-end penetration tests, validates findings against live applications, and delivers what the company calls pente...
The choice to ban all foreign-made routers instead of targeting known risks could create legal and supply chain disruptions with unclear national security returns.
The post Critics call FCC router rule a ‘big swing’ that could create more supply chain uncertainty appeared first on CyberScoop.
Modern apps no longer have well-defined boundaries. In today’s SaaS ecosystem of cloud-native applications and hybrid setups, a mix of internal and third-party APIs often serve as the primary pipelines through which apps access information. Almost all transactions, whether authentication, data tran...
Several security issues were fixed in the Linux kernel.