Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
Swati KhandelwalSep 22, 2026Artificial Intelligence / Vulnerability A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more...
Blog
Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates
Swati KhandelwalSep 22, 2026Vulnerability / Endpoint Security A zero-day proof-of-concept tool that stops Microsoft Defender from installing platform and signature...
AI Agents Are Rewriting the Rules of Lateral Movement
Security teams have spent decades asking whether an identity has too much access. AI agents raise a harder question: how...
New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups
Swati KhandelwalSep 22, 2026Vulnerability / Network Security Attackers are exploiting a new flaw in on-premises VeloCloud Orchestrator (VCO), the server...
Proofpoint Stops the Attacks Traditional Defenses Miss in the AI Era
Intent-based detection and multi-stage AI reasoning identify and stop sophisticated attacks before, during and after they reach people. Stops sophisticated...
Proofpoint Breaks Down the Divide Between Data Security and AI Security with the Industry’s First Unified Agentic System
A single system for intent and access to empower organizations to adopt AI without losing data control or missing emerging...
Beware these fake websites selling subscriptions to AI assistants
if ( !emtpy($headline_subheadline ) ) : ?> Over 100 websites abusing legitimate Google sign-in processes are ripping off customers who...
A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight
Cisco Talos researchers created a new framework for identifying malware and hacking tools that rely on AI chatbots—and quickly discovered...
How to Use AI With Your Privacy Intact
Your conversations with AI chatbots are both highly personal and deeply vulnerable to surveillance. Here’s how you can protect yourself.Photo-Illustration:...
Public PoC Exposes Critical Veeam Agent Privilege Escalation
Public PoC Exposes Critical Veeam Agent Privilege Escalation Pierluigi Paganini September 22, 2026 A Veeam Agent flaw lets local users...
U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 22, 2026 U.S. Cybersecurity and Infrastructure...
Contagious Interview: 30,000 devices infected by a fake job interview
Contagious Interview: 30,000 devices infected by a fake job interview Pierluigi Paganini September 22, 2026 North Korea-linked WaterPlum runs the...
GPT-6 Astra Breaks an Old Enigma Message
GPT-6 Astra Breaks an Old Enigma Message This is pretty amazing: However, the most astonishing thing about this break is...
DORA Year Two: Can Your SOC Actually See the Attack?
When the Digital Operational Resilience Act (DORA) became enforceable across the European Union in January 2025, it triggered an administrative...
New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory
Swati KhandelwalSep 22, 2026Vulnerability / Virtualization A new flaw in the Linux kernel's KVM virtualization code for ARM64 processors can...