We've been working on CSP Integrity for a little while now, and it was only announced in open beta back in September. Since then, as more of our customers start to use it, we've continued to improve it and observe the potentially huge benefits. CSP Integrity
Read the latest DFIR news â free mobile forensics talks from MSAB, vehicle data analysis, deepfake audio risks, memory forensics research, and more.
Amazon Threat Intelligence is warning of an active Interlock ransomware campaign that's exploiting a recently disclosed critical security flaw in Cisco Secure Firewall Management Center (FMC) Software.
The vulnerability in question is CVE-2026-20131 (CVSS score: 10.0), a case of insecure deserializa...
As AI systems grow more autonomous, observability becomes essential. Learn how visibility into AI behavior helps detect risk and strengthen secure development.
The post Observability for AI Systems: Strengthening visibility for proactive risk detection appeared first on Microsoft Security Blog.
Phil Venables, former CISO of Google Cloud and now a venture partner at Ballistic Ventures, has joined Nativeâs board of directors.
The post Cloud Security Startup Native Exits Stealth With $42 Million in Funding appeared first on SecurityWeek.
Amazon threat intelligence has identified an active Interlock ransomware campaign exploiting CVE-2026-20131, a critical vulnerability in Cisco Secure Firewall Management Center (FMC) Software that could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected d...
One constant I hear from CISOs I speak with is that AI agents are not coming. They are already inside organizations, reasoning through goals, selecting tools, and taking action through the same APIs that connect your most sensitive systems.
And most security teams have no idea what those agents are...
CVE-2026-3888 Ubuntu snap flaw lets local users escalate to root via timing-based exploit
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 architecture;
- GPIO subsystem;
- GPU drivers;
- MMC subsystem;
- BTRFS file system;
- XFRM subsystem;...
Marquis, a Texas-based financial services provider, revealed this week that a ransomware gang stole the data of over 670,000 individuals in an August 2025 cyberattack that also disrupted operations at 74 banks across the United States. [...]
Targeting six iOS vulnerabilities and leading to full device compromise, the exploit chain is meant for surveillance.
The post âDarkSwordâ iOS Exploit Kit Used by State-Sponsored Hackers, Spyware Vendors appeared first on SecurityWeek.
Qualys discovered that several vulnerabilities existed in the AppArmor
Linux kernel Security Module (LSM). An unprivileged local attacker could
use these issues to load, replace, and remove arbitrary AppArmor profiles
causing denial of service, exposure of sensitive information (kernel
memory), loca...
See how Aid4Mail helps digital forensics and eDiscovery teams fill the email evidence gaps that general-purpose platforms often miss, from cloud attachment collection to advanced recovery and AI-powered classification.
IntroductionIn December 2025, Zscaler ThreatLabz identified a new command-and-control (C2) framework implant that we track as SnappyClient, which was delivered using HijackLoader. SnappyClient has an extended list of capabilities including taking screenshots, keylogging, a remote terminal, and data...
CVE-2026-32746 is a critical flaw in GNU InetUtils telnetd that allows remote attackers to execute code with elevated privileges Cybersecurity company Dream disclosed a critical flaw, tracked as CVE-2026-32746 (CVSS score of 9.8), in GNU InetUtils telnetd that lets unauthenticated remote attackers e...
Explore how overprivileged AI agents are becoming the "new insider threat" in 2026. Learn about the rise of autonomous machine identities, the "superuser problem," and real-world breaches like Amazon Q and EchoLeak that are forcing CISOs to rethink cybersecurity governance.
The post The New Insider...
Google's $32B pursuit of Wiz shows security market consolidating. When hyperscalers own security vendors, customers lose pricing leverage and choice.
The post Googleâs $32B Wiz Bet: Why Security Consolidation Means Youâre Losing Negotiating Power appeared first on Security Boulevard.
Token Security has unveiled intent-based AI agent security, a new approach that governs autonomous agents in enterprise environments by aligning their permissions with their intended purpose. As organizations deploy autonomous AI agents across enterprise infrastructure, security models are strugglin...
AI-generated code is growing faster than humans can review it. See how automated code review and governance protect code quality and application security.
The post How to scale code review when AI writes code faster than you can understand it appeared first on Security Boulevard.
As AI code improves, bugs become harder to spot. Learn Java 25 risks and how SonarQube identifies critical issues before they ship.
The post Your AI can write Java 25 right with SonarQube appeared first on Security Boulevard.