Industrial giants Siemens, Schneider Electric, Aveva, Rockwell Automation, ABB, Phoenix Contact, Mitsubishi Electric, and Moxa have published new ICS security advisories since the previous Patch Tuesday. Siemens has published nine new advisories since the previous Patch Tuesday. Vulnerabilities with a… Read More "ICS Patch Tuesday: 8 Industrial Giants Publish New Security Advisories"
Ravie LakshmananApr 15, 2026Vulnerability / Secure Coding OpenAI on Tuesday unveiled GPT-5.4-Cyber, a variant of its latest flagship model, GPT‑5.4, that’s specifically optimized for defensive cybersecurity use cases, days after rival Anthropic unveiled its own frontier model, Mythos. “The progressive use of AI… Read More "OpenAI Launches GPT-5.4-Cyber with Expanded Access for Security Teams"
Built by a veteran security team and led by a former Google and Mandiant executive, Mallory delivers intelligence that drives action for enterprise security teams. Mallory is launching a AI-native threat intelligence platform, purpose-built to answer the questions CISOs and… Read More "Mallory Launches AI-Native Threat Intelligence Platform, Turning Global Threat Data Into Prioritized Action"
Infosecurity Europe has unveiled a new Cyber Startup Programme aimed at spotlighting emerging cybersecurity innovators and bolstering the future resilience of the cyber ecosystem. Set to debut at Infosecurity Europe 2026, the initiative will provide startup founders, investors and ecosystem… Read More "New Cyber Startup Programme to Debut at Infosecurity Europe 2026"
Drum prüfe… Miljan Zivkovic | shutterstock.com Die zunehmende Abhängigkeit von IT-Dienstleistern und Software von Drittanbietern vergrößert die Angriffsfläche von Unternehmen erheblich. Das wird auch durch zahlreiche Cyberattacken immer wieder unterstrichen. Zwar lassen sich die Risiken in Zusammenhang mit Third-Party-Anbietern nicht… Read More "13 Fragen gegen Drittanbieterrisiken"
Newsletter platform Substack has confirmed it suffered a security incident, leading to the compromise of users’ email addresses and phone numbers. Chris Best, the CEO of Substack, notified users of the data breach in an email sent to some users… Read More "Substack Confirms Data Breach, “Limited User Data” Compromised"
The problem it addresses is that traditional IAM tools assume that applications are being accessed by human users or machine identities, governed by a one-time authentication process. But agents, which assume long chains of actions conducted at incredible speed, don’t… Read More "Curity looks to reinvent IAM with runtime authorization for AI agents"
A malware framework that remained hidden for years has been discovered by security researchers at Cisco Talos. The researchers were hunting for samples of DarkNimbus, a backdoor linked to the MOONSHINE exploit kit which have both been known about since 2023, when they… Read More "Chinese-Made Malware Kit Targets Chinese-Based Edge Devices"
Teams must be adequately resourced to cope Reguly said CISOs this month might be worried about the sheer number of items that admins have to review. “There are a lot of CVEs and a lot of one-offs that we don’t… Read More "April Patch Tuesday roundup: Zero day vulnerabilities and critical bugs"
Amid exploitation campaigns targeting end of support (EOS) edge devices, the US’ leading cybersecurity agency has issued a directive to decommission all such devices within 12 months. On February 5, the Cybersecurity and Infrastructure Security Agency (CISA) published Binding Operational… Read More "US Agencies Told to Scrap End of Support Edge Devices"
