SecurityWeek

The Austin-based company will invest in agentic runtime security capabilities to secure AI coding agents.

The startup’s firewall evaluates AI skills, plugins and MCP servers for malicious instructions, excessive permissions and software supply chain risks.

Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.

The high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution.

Publicly disclosed S/MIME flaws could expose encrypted email content, while critical IOS XR and Nexus bugs could enable remote code execution and authentication bypass.

The security tool intercepts potentially dangerous agent actions, blocking clear threats and requesting human approval when intent is uncertain.

Late amendments to the Cyber Security and Resilience Bill would give ministers new powers to restrict risky technology providers as supply chain attacks intensify.

The industrial giant has released advisories for its RSLinx Classic, ArmorStart, ControlFLASH, FactoryTalk, and other products.

The security defect allows remote attackers to bypass authentication through argument bearer manipulation.

Anthropic introduced Enterprise Frontier Safeguards (EFS), a system that combines zero data retention with automated monitoring for misuse.

Using a technically valid TLS certificate for Softaculous’ domains, a threat actor diverted traffic to fake software updates.

The designation applies when a model can independently find and exploit zero-day vulnerabilities across many well-defended systems.

The browser refreshes fix multiple use-after-free, sandbox escape, and privilege escalation bugs.

The shutdown operation involved peer list manipulation and Sality payload URL takedown.

The vulnerabilities CVE-2026-83549 and CVE-2026-83548 can be chained for unauthenticated remote code execution.

The cybersecurity giant announced the acquisition alongside quarterly results showing a 34% increase in revenue and strong growth in next-generation security ARR.

Sevii has expanded its ADR platform with AI agents designed to investigate, contain, and remediate AI-driven attacks within minutes.

The new office will serve as the central authority for cybersecurity policy covering US ports, vessels, and maritime facilities.

Forescout researchers used Claude AI to port a remote code execution exploit between WAGO PLC models.

Tracked as CVE-2026-0768, the security defect allows unauthenticated attackers to execute arbitrary Python code remotely.