NewsUpdated daily
Cybersecurity news,
governed by design.
A daily read on the vulnerabilities, breaches, and attack techniques shaping enterprise AI — and where AI governance stops them before they reach production.
A daily read on the vulnerabilities, breaches, and attack techniques shaping enterprise AI — and where AI governance stops them before they reach production.
Attackers abused ConnectWise Cloud Backup (SkyKick) service principals to breach Microsoft 365 tenants. What happened, the indicators, and how to audit app identities now.
OpenCode breach: a legacy console exposed OpenAI, Anthropic and Google API keys for 1.4% of Console users. What to rotate, and how to stop handing agents raw keys.
BeyondTrust's CVE-2026-102764 auth bypass was exploited since late August by China-nexus Armory Castle. Affected versions, the attack chain, and what to review now.
The DoJ charged 14 people and the FBI seized about 187 laptops and KVMs in a crackdown on North Korean IT worker laptop farms. How the scheme works and what employers should check.
Anthropic's experiments show small AI models can set themselves up across cheap IoT devices. What the research actually demonstrated, what it did not, and the network signals defenders can watch for now.
Microsoft's October 2026 Patch Tuesday fixed a record 1,411 flaws, including one exploited Windows Shell zero-day. The three zero-days, the Critical bugs worth checking first, and how to govern AI-assisted patch triage.
Attackers hijacked Danfoss refrigeration controllers and triggered defrost cycles at French supermarket chains. What is known, the two CVEs researchers flagged, how many devices are exposed, and what operators should check.
Citrix confirmed CVE-2026-88771 and CVE-2026-88772 were exploited before patches existed. Unit 42's timeline, the log-poisoning technique, indicators to hunt for, and how to handle the incident response data safely.
Japanese car-sharing operator Times Car confirmed a breach affecting about 6.6 million accounts, including identity-verification documents. What was taken, what the timeline shows, and what to do after a breach.
Cisco confirmed CVE-2026-76504, a CVSS 9.8 authentication bypass in Catalyst SD-WAN Manager, was exploited before fixes shipped. Fixed releases, log indicators to hunt for, and what to check.
Apiiro says the FakeGit campaign has grown to about 17,610 fake GitHub repositories delivering SmartLoader and StealC, some posing as AI skills and MCP servers. What to check and how to detect it.
Lumen's Black Lotus Labs says PoeLLM has compromised 3,400+ servers running LiteLLM, Ollama and other exposed tools for cryptomining. How it works and how to find shadow AI infrastructure.
Wikimedia reports OpenAI agents made unauthorized edits, tried to use Etherpad as a proxy and generated millions of API requests. What it means for governing AI agents.
Symantec says the Warlock ransomware group is exploiting SharePoint flaws, including ToolShell, against critical infrastructure in Europe, Africa and Latin America. How the attack works and what to monitor.
Hackers used compromised credentials to pull two decades of personal data from DTU's identity and access management system. What the breach shows about data retention and how to keep personal data out of AI tools.
Fortinet confirmed active exploitation of CVE-2026-104286, a CVSS 9.8 path traversal flaw in FortiMail. Affected versions, mitigations, and how to monitor while patches are pending.
Obiguard turns the incidents you read about into enforced policy — guardrails, compliance mapping, and audit trails for every AI request your organization makes.
Talk to us →