202 article(s) in our index mention this organisation.
This week's Threat Source newsletter highlights a growing trend of malware authors embedding natural language instructions into their code to evade AI-assisted analysis. The core takeaway is that attackers are proactivel…
Cisco has released security updates to address 35 vulnerabilities across its products, including over a dozen critical issues.
Australia is considering mandatory reporting requirements for artificial intelligence incidents, particularly those involving agentic AI, following a breach by OpenAI that impacted Australian government services. Discuss…
Researchers at Proofpoint and Cisco Talos have uncovered Chinese government-backed hacking campaigns targeting AI firms and government organizations across Asia.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical authentication bypass vulnerability (CVE-2026-76504, CVSS: 9.8) to its KEV list, impacting Cisco Catalyst SD-WAN Manager.
This article from Cisco Talos offers practical advice for cybersecurity professionals to frustrate adversaries throughout the attack chain. The article emphasizes a shift from reactive defenses to a more proactive approa…
The flaw could allow remote, unauthenticated attackers to access vulnerable appliances with administrative privileges. The post Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability appeared first on SecurityWee…
A vulnerability, CVE-2026-76504, has been discovered in Cisco Catalyst SD-WAN software. This allows an attacker to bypass security policies. Users are advised to apply the security patch provided by Cisco.
A critical zero-day vulnerability (CVE-2026-76504) in Cisco SD-WAN Manager allows unauthenticated remote access to the API, potentially leading to compromise. Cisco has confirmed active exploitation of this flaw as of Se…
A China-nexus threat actor, UAT-11587, is targeting government and policy organizations across Asia, including Taiwan, India, the Philippines, and Cambodia, with a previously undocumented backdoor named ‘Antino’. The cam…
Cisco Talos is launching Executive Threat Detection (ETD), a new proactive service designed to protect executive accounts from sophisticated attacks that bypass standard endpoint detection and response (EDR) systems. The…
Nvidia has announced the Open Agent Safety Platform, a system combining open-source software (OpenShell) and hardware-based monitoring (Sentry) to enhance the security of AI agents. The platform is designed to address re…
This week’s cybersecurity news highlights a range of threats, including a Clop ransomware leak site takeover, a Docker botnet targeting AI API keys, and vulnerabilities impacting the water sector. Additionally, a Go impl…
The ISC Stormcast highlighted a significant increase in malicious email campaigns targeting financial institutions, leveraging sophisticated spear-phishing techniques to steal credentials. The threat landscape is evolvin…
Cisco Talos has released CAIRN, a new research toolkit designed to identify and track AI-integrated malware. CAIRN utilizes a metadata-first approach, focusing on identifying AI-related artifacts like API endpoints, tool…
Security researchers at Hacktron exploited two flaws in OpenAI's systems – a vulnerability in Discourse's image processing and a weakness in OpenAI's login system – to gain access to OpenAI staff accounts and a code repo…
Cisco has disclosed a critical zero-day vulnerability (CVE-2026-76460) in its Identity Services Engine (ISE) that allows attackers to bypass authentication and gain unauthorized access to devices. This flaw, under active…
Researchers at Hacktron exploited a vulnerability in OpenAI’s community forum sign-in system, leveraging a flawed image processing library and a separate issue with excessive sign-in token permissions, to gain access to…
A new JavaScript stealer, dubbed WeaselBiscuit, is spreading through 13 npm packages and leverages similarities with DPRK-linked malware like BeaverTail and OtterCookie. This malware primarily targets Chrome extension st…
A critical vulnerability (CVE-2026-58138) in Orkes Conductor allows attackers to execute arbitrary commands without authentication, and has been actively exploited in the wild for over a month. Organizations using Orkes…
