Latest security news

SANS Institute says governance programs are still nascent even as AI failures and threats grow

The White House announced Gold Eagle to help accelerate the discovery, prioritization and patching of flaws found by AI

Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims

Eleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machine

Research of incidents by Sophos finds that phishing, brute force attacks and other identity-based threats have surpassed software vulnerabilities as means of delivering ransomware

Progress has restored access to its ShareFile Storage Zones Controller after a four-day suspension triggered by a credible external security threat

Microsoft released fixes for a record 570 CVEs in its July Patch Tuesday update, as experts warn AI is dramatically accelerating vulnerability discovery and increasing patch volumes

The UK government is warning of the potential impact of catastrophic cyber-attacks

Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence.

The US Department of Defense announced the immediate suspension of the CMMC Phase II requirements until further review