> TODAY'S SUMMARY (88 articles)
Today's cybersecurity landscape highlights several critical issues and trends. A Ukrainian ransomware affiliate was sentenced to 70 months in prison for targeting hospitals and businesses, underscoring ongoing ransomware threats. The UK government is considering holding software companies liable for cyber breaches, which could reshape accountability in cybersecurity. Additionally, attackers are increasingly exploiting vulnerabilities in critical infrastructure, notably a 16-year-old UEFI flaw and a newly patched Oracle vulnerability. A significant data breach at Sony's internet provider exposed 2.6 million customer records, while the FBI continues to target "bulletproof" hosting services involved in criminal activities. Lastly, the rise of AI in security operations is prompting both optimism and caution as organizations adapt to new threats, including those involving fake apps that spread malware.
|
// AI-powered summary generated at 16:00
AI agents can access data directly, making data security the foundation of AI security. Learn more about how Varonis Atlas helps orgs see, secure, and control AI systems and the data they can reach. [...]
Qualys discovered that several vulnerabilities existed in the AppArmor
Linux kernel Security Module (LSM). An unprivileged local attacker could
use these issues to load, replace, and remove arbitrary AppArmor profiles
causing denial of service, exposure of sensitive information (kernel
memory), loca...
Every year, the cyber threat landscape forces defenders to adapt to evolving adversary tactics, techniques, and procedures (TTPs). In 2025, Mandiant observed a clear divergence in adversary pacing that closely aligns with the trends we have been documenting for defenders over the past year. On one e...
Several security issues were fixed in GVfs.
Several security issues were fixed in pyOpenSSL.
Qualys discovered that several vulnerabilities existed in the AppArmor
Linux kernel Security Module (LSM). An unprivileged local attacker could
use these issues to load, replace, and remove arbitrary AppArmor profiles
causing denial of service, exposure of sensitive information (kernel
memory), loca...
Hackers published a malicious scanner release and replaced tags to point to information-stealer malware.
The post Aqua’s Trivy Vulnerability Scanner Hit by Supply Chain Attack appeared first on SecurityWeek.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- PowerPC architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
-...
Apiiro has announced AI Threat Modeling, a new capability within Apiiro Guardian Agent that automatically generates architecture-aware threat models to identify security and compliance risks before code exists. AI Threat Modeling allows enterprises to prevent risks at the speed of AI, whether develo...
For the latest discoveries in cyber research for the week of 23rd March, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Navia Benefit Solutions, a United States-based employee benefits administrator, has disclosed a breach affecting more than 2.6 million individuals after...
RSAC 2026 coverage: The Purple Book Community (PBC), in partnership with ArmorCode, released its State of AI Risk Management 2026 report on Monday, based on a survey of more than 650 senior enterprise cybersecurity leaders in North America and Europe. The report points to a governance gap as organiz...
FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks CISA and FBI Director Kash Patel jointly warned Friday that Russian intelligence-linked threat actors are conducting an active, widescale phishing campaign targeting users of encrypted commercial messaging apps — primarily Si...
Vorlon announced two new products at RSAC 2026 designed to answer a question most security teams currently cannot: what did that AI agent just do, and who needs to fix it? The AI Agent Flight Recorder captures a continuous, cross-application audit trail of every agent action, covering which identity...
Anvilogic has launched Blueprints, a workflow automation capability that captures expert analyst practices and turns them into scalable, repeatable workflows across security teams. Instead of requiring specialized engineers to build and maintain code, Blueprints lets analysts author automation in na...
A survey of 500 U.S. CISOs published by Vorlon ahead of RSAC 2026 found that 99.4% of organizations experienced at least one SaaS or AI ecosystem security incident in 2025. Only three out of 500 reported zero incidents. The numbers get more uncomfortable from there. One in three enterprises dealt wi...
Another week, another reminder that the internet is still a mess. Systems people thought were secure are being broken in simple ways, showing many still ignore basic advisories.
This edition covers a mix of issues: supply chain attacks hitting CI/CD setups, long-abused IoT devices being shut down, a...
Astrix Security has revealed a major expansion of its AI agent security platform, covering every layer where AI agents operate in the enterprise: from managed AI platforms to shadow deployments running on managed devices, detecting both agent existence and unauthorized access to enterprise resources...
It was discovered that pyOpenSSL incorrectly handled exceptions in the
tlsext_servername callback. This could result in connections being
accepted after an exception, contrary to expectations. (CVE-2026-27448)
It was discovered that pyOpenSSL incorrectly handled the DTLS cookie
generation callback....
Ridge Security released PurpleRidge 3.0 at RSAC 2026, a self-service penetration testing platform that uses agentic AI to give small and mid-sized businesses the kind of offensive security validation that has traditionally required dedicated teams and six-figure budgets. The upgrade marks a shift fr...
Straiker has launched Discover AI and expanded Defend AI to secure coding agents, productivity agents, and custom-built agent platforms. Agents are operating across enterprise systems with broad access, growing autonomy, and zero security oversight. That’s why Straiker built Discover AI and Defend A...