Threat actors have started to exploit a critical vulnerability in Flowise that allows them to execute arbitrary code remotely, VulnCheck warns. Flowise is an open source development platform that allows users to build customized LLM flows and autonomous agents using… Read More "Critical Flowise Vulnerability in Attacker Crosshairs"
When talking about credential security, the focus usually lands on breach prevention. This makes sense when IBM’s 2025 Cost of a Data Breach Report puts the average cost of a breach at $4.4 million. Avoiding even one major incident is enough to justify most… Read More "The Hidden Cost of Recurring Credential Incidents"
I recently had the opportunity to review five popular SIEM solutions as part of a judging panel for a Security award. While each platform had its own unique flair, their core promises were remarkably consistent: 24/7/365 SOC monitoring: Round-the-clock coverage… Read More "The noisy tenants: Engineering fairness in multi-tenant SIEM solutions"
A newly identified critical vulnerability dubbed GrafanaGhost has been used by attackers to silently extract sensitive enterprise data from Grafana environments. According to researchers at Noma’s Threat Research Team, the exploit bypasses client-side protections and AI guardrails, enabling unauthorized data… Read More "GrafanaGhost Exploit Bypasses AI Guardrails for Silent Data Exfiltrati"
The latest Android security updates address only two vulnerabilities: a critical denial-of-service (DoS) issue, and a StrongBox flaw whose impact does not appear to have been disclosed. The DoS vulnerability is tracked as CVE-2026-0049 and it affects Android’s Framework component.… Read More "Severe StrongBox Vulnerability Patched in Android"
An active campaign has been observed targeting internet-exposed instances running ComfyUI, a popular stable diffusion platform, to enlist them into a cryptocurrency mining and proxy botnet. “A purpose-built Python scanner continuously sweeps major cloud IP ranges for vulnerable targets, automatically installing… Read More "Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign"
From there, attackers use indirect prompt injection techniques to manipulate the AI into executing malicious instructions. The model is tricked into generating requests that include sensitive data while interpreting the instructions as benign. In a disclosure, Noma said that the… Read More "Zero‑click Grafana AI attack can enable enterprise data exfiltration"
Cybercrime cost victims over $17.7 billion during 2025, as financial losses to internet-enabled fraud continue to grow. Published on April 6, the FBI’s 2025 Internet Crime Report, detailed how the Internet Crime Complaint Center (IC3) received over a million complaints about suspected… Read More "Over $17bn Lost to Cyber Fraud in the Last Year, Warns FBI"
Live Webinar: April 7, 2026 at 1PM ET – Register to Attend If your Automated Penetration Testing (APT) tool went significantly quiet after the initial PoC, you haven’t fixed your network—you’ve simply hit the structural limits of a “silver bullet”… Read More "Webinar Today: Why Automated Pentesting Alone Is Not Enough"
![[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk](https://i2.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRHgJL0SczODx5PAnF85b8b0mRpiOOkIQdOWvhivyXu6H8UeZKH9ZUdaeW5IuU59q2hjMNioQWQ5vk1Km8yinGGc8GA079qvhTtFsp9PV76Kmp-3lpKh2zi3vgd_-6dFcOI6i1YHs7VkJ-p-HvOEuOwkjooBVSvYFOrVqXqNhZShZy3IUeD6BVHVvUIj50/s1600/webinar-cerby.jpg?w=1140&resize=1140,855&ssl=1 "[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk")
The Hacker NewsApr 07, 2026SaaS Security / Enterprise Security In the rapid evolution of the 2026 threat landscape, a frustrating paradox has emerged for CISOs and security leaders: Identity programs are maturing, yet the risk is actually increasing. According to new research from the… Read More "[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk"
