Establishing oversight of frontier model cyber capabilities One of the most consequential sections of the order concerns advanced AI systems, often referred to as frontier models. Within 60 days, the NSA, CISA, Treasury Department, National Institute of Standards and Technology,… Read More "Trump revives parts of canceled AI order with cybersecurity-focused directive"
A critical vulnerability in Citrix’s networking and security solutions is being exploited in the wild, security researchers have confirmed. The vulnerability, disclosed by Citrix as CVE-2026-3055 on March 23, is a critical out-of-bounds read in NetScaler Application Delivery Controller (ADC)… Read More "Critical Citrix NetScaler Vulnerability Exploited in the Wild"
Anthropic announced on Tuesday that it is expanding Project Glasswing, its collaborative program aimed at securing critical software using AI. The initiative, launched with roughly 50 initial partners in early April, granted them access to Claude Mythos Preview. Those partners… Read More "Anthropic Expanding Mythos Access to 150 New Organizations"
Ravie LakshmananJun 02, 2026Threat Intelligence / Malware The Russian hacking group known as Gamaredon has been attributed to the continued exploitation of a WinRAR vulnerability to deliver multiple malware families aimed at data theft and propagation. Per Sekoia, the activity… Read More "Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine"
As AI-powered cyber-attacks are a top risk for UK cybersecurity professionals, investment priorities over the next 12 to 24 months is set to focus on AI and advanced threat preparedness. This according to new findings from ManageEngine which surveyed 1500… Read More "UK Firms Prioritize AI Threat Preparedness as Cyber Risks Evolve"
I’ve been covering spam calling for years, so when Google offered me details about a new Android feature built to detect and flag spoofed calls, I was ready to hear more. What I didn’t expect from the demo was to… Read More "Android Is Fighting Phone Scams With a New Feature to Prove Who’s Calling"
Two reports offer differing viewpoints. One suggests a failure of tools to provide what security teams really need. The other suggests the tools exist but are not properly managed. The industrialization of cybercrime threatens to overwhelm cyber defense. It’s a… Read More "Two New Reports Offer Competing Explanations for Cybersecurity’s Growing Crisis"
Three structural changes. Remote work put corporate credentials on personal devices outside EDR. Infostealer malware harvests them and ransomware affiliates buy that access. Cloud adoption created east-west traffic between workloads that most security tools can’t see, giving attackers undetected lateral… Read More "How Hybrid Work and Cloud Are Changing Ransomware Risk"
Security teams must improve collaboration and enhance cyber resilience if they are to survive in an increasingly volatile world, one of the UK’s leading cybersecurity agencies has warned. Speaking at Infosecurity Europe on June 2, National Cyber Security Centre (NCSC) director… Read More "NCSC Urges Immediate Action to Boost Resilience as Uncertainty Persist"
Most vendor risk programs still rely on periodic assessments that capture a single snapshot of a vendor’s security posture, then go silent for months while that posture changes. Attackers exploit those same gaps between scheduled reviews, and the numbers prove… Read More "Top Vendor Risk Monitoring Solutions for Continuous Oversight"
