The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.
Vulnerabilities
Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution.
Vulnerabilities
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor.
Vulnerabilities
The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service.
Artificial Intelligence
To deploy AI tools securely and ethically, teams must balance innovation with accountability—establishing strong governance, upskilling developers, and enforcing rigorous code reviews.
Vulnerabilities
The two bugs are high-severity type confusion and inappropriate implementation issues in the browser’s V8 JavaScript engine.
Vulnerabilities
Broadcom has updated its advisory on CVE-2025-41244 to mention the vulnerability’s in-the-wild exploitation.
Vulnerabilities
The critical-severity flaw allows attackers to smuggle HTTP requests and access sensitive data, modify server files, or cause DoS conditions.
Vulnerabilities
Roughly 9 million exploit attempts were observed this month as mass exploitation of the critical vulnerabilities recommenced.
Vulnerabilities
The threat actor behind Operation ForumTroll used the same toolset typically employed in Dante spyware attacks.
Vulnerabilities
WhatsApp told SecurityWeek that the two low-impact vulnerabilities cannot be used for arbitrary code execution.
Artificial Intelligence
Researchers have discovered that a prompt can be disguised as an url, and accepted by Atlas as an url in the omnibox.
Vulnerabilities
CVE-2025-59287 allows a remote, unauthenticated attacker to execute arbitrary code and a PoC exploit is available.
Mobile & Wireless
Questions have been raised over the technical viability of the purported WhatsApp exploit, but the researcher says he wants to keep his identity private.
Artificial Intelligence
As AI coding tools flood enterprises with functional but flawed software, researchers urge embedding security checks directly into the AI workflow.
Vulnerabilities
Patched in September, the SessionReaper bug could be exploited without authentication to bypass a security feature.
Vulnerabilities
The vulnerabilities allow attackers to predict source ports and query IDs BIND will use, and to inject forged records into the cache.
Vulnerabilities
The bug has been exploited in the wild as a zero-day and the US cybersecurity agency CISA has added it to its KEV catalog.
Vulnerabilities
The vulnerability impacts multiple Rust tar parsers, allowing attackers to smuggle additional archive entries.
Vulnerabilities
The Critical Patch Update contains 374 new security patches that resolve many vulnerabilities.
IoT Security
Participants exploited 34 previously unknown vulnerabilities to hack printers, NAS devices, and smart home products.
Vulnerabilities
Leading to code execution, authentication bypass, and privilege escalation, the flaws were added to CISA’s KEV list.
Vulnerabilities
Affecting the Fireware OS iked process, the vulnerability can lead to remote code execution and does not require authentication.
Vulnerabilities
The cybersecurity agency has added CVE-2025-61884 to its Known Exploited Vulnerabilities (KEV) catalog.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)