AI giant Anthropic has unveiled Project Glasswing, a cybersecurity initiative built around Claude Mythos Preview, a model it describes as “cybersecurity in the age of AI” that can autonomously identify software vulnerabilities at scale. Rather than release the model publicly,… Read More "What Anthropic Glasswing reveals about the future of vulnerability discovery"
Over half (56%) of IT and cybersecurity professionals have no idea how quickly they could shut down AI systems affected by a cyber-attack or security incident, new research by ISACA has found. Published on 23 March by the global certification… Read More "Cybersecurity Staff Don’t Know How Fast They Could Stop AI Attacks"
The Medusa ransomware group has been operating at a fast pace, seizing short windows of opportunity in attacks across multiple verticals, Microsoft says. Operating as a ransomware-as-a-service (RaaS), Medusa has been active since June 2021 and hit over 300 organizations… Read More "Medusa Ransomware Fast to Exploit Vulnerabilities, Breached Systems"
Supply chain attacks have rapidly become one of the most damaging and difficult threats facing IT and security teams. When an adversary compromises a trusted vendor, software component, cloud service, or MSP tool, they bypass traditional defenses and enter through… Read More "5 steps to strengthen supply chain security and improve cyber resilience"
A months-long supply chain attack that affected the Notepad++ update process has been linked to a compromise of shared hosting infrastructure rather than a flaw in the software’s code. This according to an ongoing investigation involving external security experts and the… Read More "Notepad++ Update Hijacking Linked to Hosting Provider Compromise"
A vulnerability in how Grafana’s AI components process information could allow attackers to bypass the application’s safeguards and leak enterprise information, new research from Noma Security shows. An open source analytics and visualization application that ingests data from various sources,… Read More "GrafanaGhost: Attackers Can Abuse Grafana to Leak Enterprise Data"
The new vulnerability is an authentication bypass issue that stems from improper access control in the FortiClient EMS API. It allows attackers to execute code on the underlying server without valid credentials or user interaction. “The two vulnerabilities have not… Read More "Fortinet releases emergency hotfix for FortiClient EMS zero-day flaw"
A new set of Zero Trust Implementation Guidelines (ZIGs) detailing how organizations can progress to target-level zero trust maturity has been released by the US National Security Agency (NSA). The guidance introduces Phase One and Phase Two of the ZIGs,… Read More "NSA Publishes New Zero Trust Implementation Guidelines"
As US President Donald Trump threatens wholesale demolition of Iran’s infrastructure in the midst of an escalating war, Iran now appears to have already reciprocated with its own form of infrastructure sabotage: A hacking campaign hitting industrial control systems across… Read More "Iran-Linked Hackers Are Sabotaging US Energy and Water Infrastructure"
UK cybersecurity startup Trent AI today announced emerging from stealth mode with $13 million in seed funding. The investment round was led by LocalGlobe and Cambridge Innovation Capital, with additional support from several angel investors. Founded in 2025 by former… Read More "Trent AI Emerges From Stealth With $13 Million in Funding"
