LiteLLM was compromised through the Trivy hack and abused to distribute information-stealing malware to its users.
CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices.
A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges.
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
The best compliance programs aren’t the biggest ones. They’re the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
Register
SecurityWeek’s AI Risk Summit is the leading conference where technology, security, and risk leaders converge with AI researchers, developers, and policy makers shaping the future of enterprise AI.
[August 11-12, 2026 | In-Person]
SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[August 19, 2026 | Virtual]
SecurityWeek’s 2026 Attack Surface Management Summit will evaluate how organizations can protect corporate assets and reduce their attack surface in a modern security program.
[September 16, 2026 | Virtual]
SecurityWeek’s ICS Cybersecurity Conference celebrates its 25th anniversary in Nashville. Join the largest and longest-running event series focused on industrial cybersecurity.
[October 6-8, 2026 | In-Person]
-
The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild. (August 12, 2026)
-
Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution. (August 12, 2026)
-
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor. (August 12, 2026)
-
The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service. (August 12, 2026)
-
Affecting European contract logistics operations at eight Ceva warehouses, the incident caused shipment delays for multiple customers. (August 12, 2026)
-
Connor Riley Moucka was extradited to the United States in July 2025 after he was arrested in Canada. (August 6, 2026)
-
Maksim Silnikau was the creator and administrator of the ransomware group and involved in Angler EK’s distribution. (August 6, 2026)
-
Researchers demonstrate how attackers could abuse built-in email chatbots to evade detection, impersonate trusted employees, compromise executive accounts, and facilitate financial fraud. (August 4, 2026)
