The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
ICS/OT
Pre-Patch Tuesday advisories were published by VDE CERT, Phoenix Contact, Johnson Controls, and Hitachi Energy.
Artificial Intelligence
AI-driven development is not something organizations can or should block. But it must be governed.
Vulnerabilities
The flaw allows attackers to execute arbitrary code remotely and has been exploited in the wild for two months.
Vulnerabilities
Unauthenticated attackers can exploit the flaw via specially crafted POST requests that crash the Serv-U service.
Data Breaches
The social media giant has informed authorities about the impact of the recent attack involving an account recovery support tool.
Cybersecurity Funding
Emphere’s solution delivers AI-driven remediation to software companies to speed up releases.
Supply Chain Security
CVE Lite CLI is a free, open-source command line tool that scans your projects in seconds and tells you exactly which included packages contain...
Vulnerabilities
Over 100 bugs are critical or high-severity, mainly use-after-free and insufficient validation of untrusted input flaws.
Vulnerabilities
The vulnerability is tracked as CVE-2026-20245 and it can allow arbitrary command execution as root, but no patch yet.
Artificial Intelligence
Attackers could have triggered dangerous actions, including controlling smart home devices via Google Home and starting Zoom video calls.
Vulnerabilities
A flaw in the Full Page Cache Warmer extension can be exploited without authentication via serialized PHP object payloads.
Vulnerabilities
The high-severity flaw can be exploited remotely, without authentication, in server-side request forgery (SSRF) attacks.
Vulnerabilities
A researcher has disclosed the full details of the vulnerability and released a PoC without notifying Microsoft in advance.
Vulnerabilities
Threat actors are exploiting vulnerable Kirki and Burst Statistics deployments to elevate privileges and take over websites.
Vulnerabilities
An improper authentication bug allows attackers to escalate their privileges and escape containers.
Vulnerabilities
The default HTTP/2 configuration of major web servers is vulnerable to an attack chain combining a compression bomb and a Slowloris-style hold.
Vulnerabilities
Microsoft responds to backlash over its threats of legal action against researchers who publicly disclose zero-day vulnerabilities.
Application Security
As AI shortens the path from vulnerability disclosure to exploitation, researchers disagree on whether the problem is inadequate security tools or inadequate operational control.
Mobile & Wireless
Google says the Android vulnerability CVE-2025-48595 has been exploited in limited, targeted attacks.
Endpoint Security
A stack-based buffer overflow bug can be exploited for remote code execution on a vulnerable device.
Vulnerabilities
The vulnerability is CVE-2024-21182 and it can be exploited without authentication to hack affected WebLogic servers.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)