> TODAY'S SUMMARY (145 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Attackers are actively exploiting a newly discovered vulnerability in Oracle E-Business Suite, prompting urgent patching efforts. The U.S. Treasury has sanctioned Russian and North Korean nationals for their involvement in fraudulent IT worker schemes, underscoring ongoing geopolitical cyber threats. In a concerning development, the Chinese state-sponsored group Volt Typhoon is leveraging a covert network to conduct zero-day attacks, while AI-driven hacks are increasingly targeting South Korea's financial sector. Additionally, significant vulnerabilities have been identified in software like PHP, with researchers warning of a potential "Vulnpocalypse" due to aging codebases. Companies are urged to update their systems promptly, as many recent breaches continue to expose vast amounts of sensitive data.
|
// AI-powered summary generated at 20:00
Dataminr used RSAC 2026 to roll out Dataminr for Cyber Defense, a new product suite the company says is designed to move security teams from alert-driven response to preemptive, risk-prioritized action. The suite aims to combine Dataminr’s real-time event and threat detection with an organization’s...
Netenrich launched Cyber Risk Operations at RSAC 2026 Monday, a new operating model powered by its Resolution Intelligence Cloud platform that aims to move enterprise security from reactive alert management toward continuous validation of control effectiveness. The offering targets CIOs, CTOs, and C...
'It freakin' worked' says Rob Joyce - and shows how relentless AI agents can find holes humans miss RSAC 2026Â The now-infamous Anthropic report about Chinese cyberspies abusing Claude AI to automate cyberattacks was a Rorschach test for the infosec community, according to former NSA cyber boss Rob...
Armor launched Dash at RSAC 2026 Monday, an executive dashboard that pulls cybersecurity posture data directly from an organization’s security stack via APIs and delivers it to the C-suite and board without any manual assembly or human filtering in between. The problem Dash addresses is familiar: se...
OmniTrust, formerly INTEGRITY Security Services, formally launched at RSAC 2026 Monday with the debut of its Trust Lifecycle Management (TLM) platform. The company, which became an independent entity in late 2024 after operating within Green Hills Software, is applying decades of safety-critical sec...
Qualys discovered that several vulnerabilities existed in the AppArmor
Linux kernel Security Module (LSM). An unprivileged local attacker could
use these issues to load, replace, and remove arbitrary AppArmor profiles
causing denial of service, exposure of sensitive information (kernel
memory), loca...
Cisco announced a broad set of security products at RSAC 2026 Monday aimed at securing the growing use of AI agents in enterprise environments. The announcements span identity management, pre-deployment testing, open-source tooling, and SOC automation. The centerpiece is Zero Trust Access for AI age...
Expel launched Managed SIEM on Monday at RSAC 2026, a co-managed service that puts the company’s detection engineers directly inside customers’ Microsoft Sentinel and Splunk Enterprise Security environments. The service is designed to address what Expel calls a fundamental mismatch between what SIEM...
Using IAM action wildcards to create policies that grant admin-equivalent access while evading name-based detections.
Tuskira announced its Federated Detection Engine at RSA Conference 2026, adding a new capability to its Agentic SecOps platform that lets security teams detect threats in real time directly across cloud, identity, endpoint, network, SaaS, infrastructure, and legacy SIEM environments without centrali...
Arctic Wolf launched the Aurora Agentic SOC at RSAC 2026, billing it as the world’s largest commercial agentic Security Operations Center. The announcement represents a significant platform rebuild for the company, shifting from a human-led model to one that puts AI agents at the center of SOC opera...
Mazda Motor Corporation (Mazda) announced that information belonging to its employees and business partners had been exposed in a security incident detected last December. [...]
Snyk launched its Agent Security solution and announced the general availability of Evo AI-SPM at RSAC 2026, targeting what it describes as a growing governance gap in enterprise AI agent deployments. The company’s position: autonomous coding agents like Claude Code, Cursor, and Devin are being depl...
Explore Google’s synced passkey architecture. Unit 42 details its mechanisms, key management, and secure communication in passwordless systems."
The post Google Authenticator: The Hidden Mechanisms of Passwordless Authentication appeared first on Unit 42.
The Strategic Importance of Non-Human Identities in Cybersecurity What role do Non-Human Identities (NHIs) play in cybersecurity, and why should organizations prioritize their management? In recent years, the rise of NHIs has significantly impacted data management and security strategies, particular...
What is Driving Enterprise Satisfaction in Secrets Sprawl Control? Is your organization effectively managing its secrets sprawl, and how satisfied are you with the current control measures in place? Enterprises across various industries are grappling with the challenge of overseeing multitudinous ma...
Washington content to be represented by actual empty chairs RSAC 2026Â Back in the day (circa 2023) when cybercrime group Scattered Spider and its help-desk voice-phishing calls were a relatively new threat, the feds considered pulling the government's top cyber-threat hunters and their private-sect...
Are You Leveraging Agentic AI for Optimal Data Security? Understanding the dynamics of Agentic AI in cybersecurity could be the catalyst your organization needs to bolster its data defenses. While we delve into the importance of Non-Human Identities (NHIs), we uncover critical insights into how the...
The Tycoon2FA phishing-as-a-service (PhaaS) platform that Europol and partners disrupted on March 4 has already returned to previously observed activity levels. [...]
In around 2011, the now defunct RuneScape Boards forum (also known as RSBoards) suffered a data breach that was later redistributed as part of a larger corpus of data. The vBulletin-based service exposed 223k unique email addresses along with usernames, IP addresses and salted MD5 password hashes.