While non-public frontier AI models, like Anthorpic’s Claude Mythos, have been shown to identify thousands of zero-day vulnerabilities across major operating systems, commercial models are also indicating progress in the discovery of software bugs. Forescout’s Vedere Labs found that just a… Read More "Commercial AI Models Show Rapid Gains in Vulnerability Research"
What is vendor tiering? Vendor Tiering is a method of classifying vendors based on the level of security risk they introduce to an organization. The level of security criticality decreases with each subsequent level. The number of tiering levels depends… Read More "What is Vendor Tiering? Optimize Your Vendor Risk Management"
Drupal is warning users that it’s already seeing attempts to exploit CVE-2026-9082, the highly critical vulnerability patched this week. The vulnerability affects an API designed to ensure that database queries are sanitized to prevent SQL injection. “A vulnerability in this… Read More "Drupal Vulnerability in Hacker Crosshairs Shortly After Disclosure"
Too many alerts with no clear priority Teams spend time validating findings, delaying response to critical risks. Risks are grouped into meaningful exposures, enabling faster and focused action. Working across multiple cloud environments Investigations require switching between tools, slowing analysis,… Read More "What Makes Fidelis CSPM Enterprise Ready for Modern Security?"
And a new tab page will pull together calendar entries, files and Copilot prompts, reducing the need to switch between tools, it said. A key feature of the new browser version will be its ability to protect corporate data. Enterprises… Read More "Microsoft says it’s making AI ‘safe for work’ in your browser"
A sanctioned cryptocurrency exchange has claimed that Western intelligence agencies are to blame for a targeted attack last week which led to the theft of one billion rubles ($13.2m) from Russian customers. Kyrgyzstan-based Grinex is believed to be the successor… Read More "Crypto Exchange Grinex Blames Western Spies for $13m Theft"
Vendor tiering is the key to a more resilient and sustainable third-party risk management strategy. But like all cybersecurity controls, it must be supported by the proper framework. To learn how to optimize your Vendor Management and Vendor Risk Management… Read More "Vendor Tiering Best Practices: Categorizing Vendor Risks"
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy… Read More "In Other News: Industrial Router Exploitation, CISA KEV Nomination Form, Gas Station Hacking"
1 Introduction This article provides a technical analysis of how many Windows kernel mode drivers can be interacted with from user mode without the hardware they were developed for. This work was motivated by driver-oriented vulnerability research and the need… Read More "Making Vulnerable Drivers Exploitable Without Hardware"
The UK’s National Cyber Security Centre (NCSC) has shared details of an ongoing coordinated plan to improve cyber resilience in the National Health Service (NHS). Over the past 18 months, government and industry organizations have deepened their collaboration to reduce… Read More "NCSC Outlines Coordinated Plan to Boost NHS Cyber Resilience"
