SecurityWeek

OpenAI says its AI models went rogue, as CISOS call the incident a watershed moment, warning that autonomous AI threat models have officially crossed into production reality.

New executive order calls for end-to-end visibility into defense supply chains, including software dependencies, foreign ownership and cyber-related supplier risks.

The open-weight Antares models are designed to pinpoint known vulnerabilities in codebases faster and at a fraction of the cost of larger AI models.

The startup will use the investment to accelerate the development of its threat prediction and discovery products.

Independently judged and sponsor-neutral, the new awards program honors the people, organizations, and technologies delivering proven impact in industrial cybersecurity; winners to be announced live at the 2026 ICS Cybersecurity Conference in Nashville

Part of a larger toolkit, HollowGraph uses a compromised 365 account’s calendar as a two-way dead-drop.

Gaetje’s story shows that you don’t need to be a ‘deep bit-crawler’ to become a Chief Information Security Officer.

Hackers exfiltrated personal, financial, and health information from the company’s Oracle EBS instance in August 2025.

A security researcher discovered a broken access control vulnerability in Meta’s support infrastructure.

Using social engineering, hackers compromised employee accounts with access to personal and health information.

The ServiceNow AI platform vulnerability tracked as CVE-2026-6875 can be exploited for remote code execution.

The latest Zimbra refresh resolves command injection, XSS, restriction bypass, and SSRF security defects.

Neo raised money across seed and Series A funding rounds from Andreessen Horowitz, Bessemer Venture Partners, and others.

The zero-days CVE-2026-15409 and CVE-2026-15410 were exploited by a threat actor tracked by Volexity as UTA0533.

Attackers could send waves of malicious payloads to trigger buffer pre-allocations that are not freed, exhausting server memory.

Longtime cybersecurity executive Richard Bird built the resource for security experts, journalists, policymakers, and everyday citizens.

Hackers stole names, addresses, Social Security numbers, credit/debit card numbers, and other information from a third-party management platform.

Attendees will be able to interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.

The agentic security tool identifies potentially exploitable code flaws, traces attack paths, and recommends targeted remediations.

Targeting production infrastructure, the attack compromised internal datasets and service credentials.