Ravie LakshmananJul 09, 2026Vulnerability / Endpoint Security Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month after details of the flaw became public. The vulnerability, tracked as CVE-2026-50656 (CVSS score: 7.8), is a privilege… Read More "Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges"
A representative finding from current engagements: human identity governance at Stage 4 — central IAM, MFA, lifecycle managed — and agent governance at Stage 1, with agents recently inventoried but still authenticating via long-lived API keys against shared service accounts,… Read More "Agentic AI identity: A 6-stage maturity model for non-human identities"
Over 70 cybersecurity organizations have signed a new charter, vowing a responsible use of AI for cybersecurity purposes. The AI Charter, launched by cyber industry body CREST on July 9, is built around nine principles for AI-enabled cybersecurity activities that… Read More "New AI Security Charter Backed by Over 70 Cyber Firms"
Fat Joe is a superfan, both of the New York Knicks and their controversial owner, Jim Dolan. The rapper celebrated with Dolan in Cleveland when the team clinched its first finals appearance in decades. When the Knicks organization came under… Read More "Madison Square Garden Kept a List of Gay Celebrities"
Several popular AI coding assistants were tricked into facilitating developer machine hacking via an attack technique that has been known for decades, according to Google-owned cloud security giant Wiz. Dubbed GhostApproval, the attack has been successfully tested against Claude Code,… Read More "AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique"
Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer’s computer. The assistant asks permission to edit one harmless-looking file, but the write lands on a sensitive one… Read More "GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents"
Security leaders have been on a spending sprint. The global AI in cybersecurity market is valued at $44 billion in 2026 and is projected to reach $213 billion by 2034, a trajectory that reflects genuine belief that machine learning will… Read More "Why fixing your data architecture matters more than upgrading your detection models"
ESET researchers analyzed the robust EDR-killing toolset of the ransomware-as-a-service gang Gentlemen. Since the beginning of 2026, Gentlemen has emerged as one of the most active gangs in the ransomware ecosystem. The group distinguishes itself through a mature, operator-maintained set… Read More "Inside Gentlemen’s EDR killer framework"
Cybercriminals are increasingly turning to AI agents and chatbots to autonomously plan and carry out cyber-attacks, according to new analysis of hacker activity. Cybersecurity researchers at ESET examined 900,000 AI skills, small functional components used by AI agents, listed in… Read More "Cybercriminals Plant Malicious AI Agents in Open Source Tools"
Google on Wednesday announced a Chrome 150 security update that resolves 27 vulnerabilities, including two critical-severity flaws. The two critical bugs are use-after-free issues in Chrome’s Ozone and Views components. Both were found by Google last month. The Chrome refresh… Read More "Chrome 150 Update Patches 27 Vulnerabilities"
