Palo Alto Networks Unit 42 analyzed 405 AI-linked malware samples and found only 12 reached production endpoints.
The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks.
TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation.
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
Join this live webinar for a practical framework for evolving your AI security program from a single application to an enterprise AI ecosystem and autonomous agents.
RegisterJoin as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
Register
SecurityWeek’s AI Risk Summit is the leading conference where technology, security, and risk leaders converge with AI researchers, developers, and policy makers shaping the future of enterprise AI.
[August 11-12, 2026 | In-Person]
SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[August 19, 2026 | Virtual]
SecurityWeek’s 2026 Attack Surface Management Summit will evaluate how organizations can protect corporate assets and reduce their attack surface in a modern security program.
[September 16, 2026 | Virtual]
SecurityWeek’s ICS Cybersecurity Conference celebrates its 25th anniversary in Nashville. Join the largest and longest-running event series focused on industrial cybersecurity.
[October 6-8, 2026 | In-Person]
-
Adobe and Nvidia each published several advisories, including ones that address critical vulnerabilities in their products. (August 26, 2026)
-
Most of the flaws were discovered by Google using AI, but researchers are still discovering high-value Chrome vulnerabilities. (August 26, 2026)
-
CVE-2026-60004 is a remote code execution vulnerability patched by Gitea developers in late July with the release of version 1.27.1. (August 26, 2026)
-
CVE-2026-61979 and CVE-2026-15981 are authentication bypass vulnerabilities affecting the MiniOrange SAML 2.0 SSO plugin. (August 25, 2026)
-
A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard. (August 24, 2026)
-
Juan Manuel Gouveia-Aguilera has been sentenced to 8 years in prison for his role in an ATM jackpotting scheme that caused millions in losses. (August 24, 2026)
-
We all know they’re watching us. But we don’t know who they are, nor why nor how they are doing it. (August 20, 2026)
-
Affecting European contract logistics operations at eight Ceva warehouses, the incident caused shipment delays for multiple customers. (August 12, 2026)
