Although press reports and the model providers themselves use language such as rogue agents or misalignment, cybersecurity experts who spoke with CSO argue that language obscures a simple truth: These incidents were caused by inexcusable failures by the frontier labs… Read More "AI agents aren’t ‘going rogue.’ Frontier labs are skipping security basics."
Companies with revenue of over $1bn are more than twice as likely as those who generate under $250m to knowingly leave high or critical vulnerabilities unpatched, according to new research. In a study released during its Assemble London event on… Read More "$1bn Companies Twice as Likely to Leave Critical Flaws Unpatched"
Simply put, a data leak is when sensitive data is unknowingly exposed to the public, and a data breach is an event caused by a cyberattack. An example of a data leak is a software misconfiguration facilitating unauthorized access to… Read More "Data Breach vs. Data Leak: What’s the Difference?"
Security updates released on Tuesday resolve 29 vulnerabilities across Citrix, Fortinet, and Ivanti products, including multiple critical-severity bugs. Citrix published three advisories detailing nine security defects impacting Workspace App for Windows, XenServer 8.4 and XenServer 9, and UniconOS. Successful exploitation… Read More "Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products"
In a world where nothing can be 100% secure, U.S. elections are remarkably close. CISA has issued numerous statements assuring voters of the measures in place and warning against claims of hacking intended to “manipulate public opinion and undermine confidence… Read More "2024 U.S. Election Integrity Threats: Not Just Data Leaks & Hacks"
Data leak detection software identifies an organization’s data leaks – the accidental public exposure of sensitive data due to software misconfigurations and poor network security. Data leaks quickly become data breaches when cybercriminals identify and exploit this exposed data. The… Read More "What is Data Leak Detection Software?"
Swati KhandelwalOct 14, 2026Vulnerability / Virtualization Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. The protected area is a… Read More "Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave"
Similar to Ollama and llama.cpp, LlamaIndex provides an application layer for connecting your data to LLMs and interacting with it through a chat interface. While LlamaIndex is an open source project like other LLM application frameworks, LlamaIndex is also a… Read More "Data Leakage and Other Risks of Insecure LlamaIndex Apps"
Enterprise software maker SAP on Tuesday announced the release of 22 new and updated security notes, including four that address critical-severity vulnerabilities. At the top of the list is CVE-2026-89111 (CVSS score of 10/10), an OAuth2 SSRF vulnerability in Cloud… Read More "SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities"
The risk of a data breach is exceptionally high for financial organizations. Hackers recognize the high value financial data has on the dark web. Other cybercriminals pay significant amounts to get their hands on customers’ personally identifiable information (PII) and… Read More "8 Ways Finance Companies Can Prevent Data Leaks"
