The so-called “AI skills” used to scale and execute AI operations are dangerously exposed to data theft, sabotage and disruption, TrendAI has warned. The newly named business unit of Trend Micro explained in a report published this week that AI… Read More "AI Skills Represent Dangerous New Attack Surface, Says TrendAI"
Consider the lifecycle of a typical microservice. In its journey from a developer’s laptop to production, it might generate a dozen distinct identities: a GitHub token for the repository, a CI/CD service account for the build, a registry credential to… Read More "Why short-lived systems need stronger identity governance"
The time between vulnerability disclosure and exploitation has plunged 94% over the past five years as threat actors weaponize so-called “n-days,” according to a new Flashpoint study. The threat intelligence vendor claimed that “time to exploit” (TTE) dropped from 745 days… Read More "Time to Exploit Plummets as N-Day Flaws Dominate"
Ravie LakshmananFeb 12, 2026Vulnerability / Network Security A significant chunk of the exploitation attempts targeting a newly disclosed security flaw in Ivanti Endpoint Manager Mobile (EPMM) can be traced back to a single IP address on bulletproof hosting infrastructure offered… Read More "83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting Infrastructure"
The Trump administration is suspending US support for the Global Forum on Cyber Expertise (GFCE) and the European Centre of Excellence for Countering Hybrid Threats (Hybrid CoE) as part of an exit from international organizations. President Donald Trump signed an… Read More "US To Leave Global Forum on Cyber Expertise"
Ravie LakshmananFeb 12, 2026Zero-Day / Vulnerability Apple on Wednesday released iOS, iPadOS, macOS Tahoe, tvOS, watchOS, and visionOS updates to address a zero-day flaw that it said has been exploited in sophisticated cyber attacks. The vulnerability, tracked as CVE-2026-20700 (CVSS… Read More "Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Apple Devices"
It’s not all bad. Some of the agents discuss ways to make their users’ lives easier by proactively identifying and fixing problems while the humans sleep. And one of the most popular posts, with over 60,000 comments, is about how… Read More "What CISOs need to know about the OpenClaw security nightmare"
Nike appears to be in full-on incident response mode after a ransomware group claimed to have posted a huge cache of stolen internal data. The World Leaks group added Nike to its leak site last week, with the countdown expiring… Read More "WorldLeaks Ransomware Group Claims 1.4TB Nike Data Breach"
Who’s to blame when the AI tool managing a company’s compliance status gets it wrong? 07 Aug 2025 • , 3 min. read If you put a group of CISOs in a room, they are all likely to wait for… Read More "Policy compliance & the cybersecurity silver bullet"
A new high-severity zero-day vulnerability in Microsoft Office has been exploited in the wild, according to Microsoft. The tech giant released a patch in a January 26 advisory for the flaw which has been summarized as an over-reliance on untrusted… Read More "Microsoft Releases Patch for Exploited Office Zero Day"
