“Agentic AI is really the intersection of all of the cybersecurity risks that come with traditional software systems along with all of the AI security and safety risks,” he says. AI is a team sport, too Bryan points to Microsoft’s… Read More "AI red teaming comes of age"
How come it’s still possible to ‘secure’ an online account with a six-digit string? 07 May 2026 • , 4 min. read The most-used password globally is exactly what you think it is: ‘123456.’ That’s according to NordPass’s latest annual… Read More "Fixing trivial passwords is as easy as 123456"
Google Cloud’s operations chief said the tech giant does not plan to release a separate, cyber‑focused frontier model like Anthropic’s Clause Mythos. Instead, Google believes high‑quality generalist AI models, like Gemini 3.1 Pro, Google’s latest large language model (LLM), are… Read More "Google Favors General‑Purpose Gemini Models Over Cybersecurity‑Specif"
Fortinet and Ivanti on Tuesday rolled out fixes for multiple vulnerabilities in their products, including critical-severity OS command injection flaws. Fortinet published three advisories describing security defects in FortiSandbox, FortiOS, FortiProxy, and FortiPortal. The most severe of the three bugs… Read More "Critical Vulnerabilities Patched in Fortinet, Ivanti Products"
On June 9, Anthropic released Claude Fable 5, the most capable model it has ever made, generally available. It also did something unusual: it shipped one model as two products, split not by capability but by a layer of safety… Read More "Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards"
There’s an app for everything nowadays… right? Well, looking up call records for a phone number of choice is not one of those things, as potentially millions of Android users found out after paying for app subscriptions promising just that.… Read More "How CallPhantom tricks Android users"
System administrators are in for a busy few weeks after Microsoft published updates to fix 200 vulnerabilities including three publicly disclosed zero-days June’s Patch Tuesday. A total of 33 critical CVEs were tackled, with most (28) remote code execution (RCE)… Read More "Microsoft Fixes 200 CVEs This Patch Tuesday"
ICS Patch Tuesday advisories were published this month by Siemens, Schneider Electric, and Phoenix Contact. Siemens published only four new advisories. In Sinec INS, the industrial giant fixed authenticated command execution, information disclosure, privilege escalation, and password exposure flaws. The… Read More "ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact"
Ravie LakshmananJun 10, 2026Cyber Attack / Vulnerability ServiceNow has warned about a security incident in which unknown threat actors exploited a flaw to obtain deeper unauthorized access to susceptible instances. “On June 5, 2026, ServiceNow applied a security update to… Read More "ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances"
The Trump administration’s shift in tone and approach toward traditional allies has understandably unsettled many nations, raising doubts about U.S. reliability and concerns over dependence on American technology. Many had become used to China and Russia’s often belligerent tone, flexing their… Read More "The quest for greater tech independence"
