ESET researchers examined CVE‑2025‑50165, a serious Windows vulnerability described to grant remote code execution by merely opening a specially crafted JPG file – one of the most widely used image formats. The flaw, found and documented by Zscaler ThreatLabz, piqued… Read More "Revisiting CVE‑2025‑50165: A critical flaw in Windows Imaging Component"
A threat actor has been caught using AI-generated malware in a real network intrusion, deploying a PowerShell script that an assistant had “vibe-coded” to map out an Active Directory environment. In a report published on July 8, Huntress said it… Read More "Vibe-Coded Malware Caught in Active Directory Attack"
According to the 2026 Context Gap research, 79% of organizations first learn about active threats from outsiders rather than their own tooling. You’ve watched another headline roll past of a Fortune 500 company exposed on the dark web. Each story… Read More "Dark Web Monitoring Vendors Compared"
Watching the Watchers Months before the Hugging Face hack, OpenAI says, employees noticed that its agents had created a covert message board in the package manager Artifactory, which they would later use to coordinate their attack. Around May 26, OpenAI… Read More "What We Still Don’t Know About OpenAI’s Hugging Face Hack"
Kiteworks has announced the acquisition of AI data security company Bonfy.AI, a move aimed at extending real-time policy enforcement over sensitive data exchanged by both human users and AI agents. Kiteworks delivers a content-sharing platform to safeguard sensitive data as… Read More "Kiteworks Acquires Bonfy.AI to Fill the AI Gap in Data Governance"
Ravie LakshmananSep 11, 2026Vulnerability / Cyber Attack PaperCut on Thursday released a new security maintenance release that replaces all previously published emergency patches that were pushed to address two security flaws that have come under active exploitation. The software development… Read More "PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws"
AI convergence AI is causing previously distinct sectors such as ITSM and cybersecurity to converge, with AI itself turning into a unifying AIOps front end to diverse, specialized technologies sitting below it. In this, ServiceNow looks well-placed, having added the… Read More "How AI and cybersecurity are reshaping ServiceNow"
Have you ever received a package you never ordered? It could be a warning sign that your data has been compromised, with more fraud to follow. 23 Dec 2025 • , 5 min. read Global e-commerce sales are predicted to… Read More "A brush with online fraud: What are brushing scams and how do I stay safe?"
AI is being deployed faster than the data foundation beneath it is being checked, a new Syskit study has revealed. In its latest State of Microsoft 365 Governance Report, published on September 10, security governance firm Syskit has found that… Read More "Most Organizations Skip Permissions Reviews Before Deploying AI Tools"
Cyber threat monitoring is critical for effective cybersecurity, yet most organizations operate with gaping blind spots. In this post, we shed some light on the limitations of conventional approaches to help you achieve comprehensive visibility of your attack surface. Why… Read More "What Is Cyber Threat Monitoring in 2026?"
