Parallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the highest level of access on a Mac, software company JFrog said this week. The attack needs code already running on the machine… Read More "Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can’t Install Fix"
Privacy now a ‘data stewardship obligation’ Jeff Valdes, a director at Acceligence, noted, “there is definitely some irony here.” “If Microsoft wants customers to view it as a steward of their privacy when the government comes asking for their information,… Read More "LinkedIn fights for the right to tell customers when the feds want their data"
A likely Russian threat actor is deploying a sophisticated malware implant capable of harvesting credentials, scanning internal networks, and capturing live traffic on compromised devices by chaining two vulnerabilities in Cisco’s Firewall Management Center (FMC) technology. In separate reports, Sophos… Read More "‘Sandworm’ Chains Cisco Flaws to Deploy Cyclops Blink"
In today’s interconnected business landscape, outsourcing to third-party vendors and service providers is an effective method for most organizations to improve operational efficiency and lower financial costs. However, as businesses form third-party partnerships, they inherit potential risks and increase the… Read More "Building a Robust Vendor Risk Management Dashboard"
Cybersecurity and intelligence agencies in the US, UK, and Netherlands have issued a joint advisory warning of a Windows malware family dubbed Chosen Brick, deployed by Iranian state cyber actors to target dissidents, activists, and journalists worldwide. Active since at… Read More "US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware"
Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromium-based products: Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon and the Claude in Chrome extension.… Read More "One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude"
AI agents’ actions are out of scope for new guidance from US authorities on securing identity and access tokens, but there is still plenty enterprises can do to protect their systems from rogue humans and AI agents alike. “Protecting Tokens… Read More "AI agent authorization risks remain a gap in new NIST-CISA token security guidance"
Microsoft on Monday issued out-of-band updates to address several issues caused by this month’s massive, record-setting Patch Tuesday. The emergency patches fix problems with Remote Desktop Services (RDS) that came to light last week, as well as unintended side effects… Read More "Microsoft Issues Emergency Fixes After Massive Patch Tuesday"
Security leaders who already use the NIST Cybersecurity Framework often assume it covers AI, but it doesn’t. The Cybersecurity Framework (CSF) protects the confidentiality, integrity, and availability of the systems around a model. Outcome risk from model decisions is a… Read More "NIST AI RMF 1.0: The AI Risk Management Framework"
Ursula von der Leyen, the current President of the European Commission, delivered the State of the European Union 2026 speech on September 16, 2026, at 9:00 am CEST. It was naturally heavy on European political theory (center left freedom protected… Read More "EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media"
