This Reporters' Notebook video discusses AI agents breaching Hugging Face, Fairlife's ransomware attack, and threat actors targeting a dozen water systems.

ShinyHunters breached rival ransomware gang Cl0p's leak site, threatening to expose victim payment data and raising concerns about secondary data exposure.

As more reports of misalignment underscore AI risks, both large AI labs and regular businesses are searching for better way to keep control and be secure.

Amid the US and China's fight for eco-colonial influence in Latin America, a stealthy backdoor has taken flight.

CISOs are not waiting for AI to prove its cybersecurity value before investing in the technology. Is it the right move?

Cybersecurity industry veteran Hal Pomeranz gives a pep talk on career anxiety and shares advice on building connections during tech industry downturns.

Attackers are actively exploiting two of the vulnerabilities and another 58 are more likely to be exploited, according to Microsoft.

The surge of AI-powered vulnerability reports is driving down bug bounty prices, and that could spell trouble for independent researchers.

This installment of the Reporters' Notebook video series discusses several topics such as AI's effects on vulnerability reporting and security research.

North Korean operatives posing as IT workers are improving their tactics, but researchers say there are still ways to spot them before they do damage.

The AitM service lowers the barrier to entry for actors to create phishing attacks that steal more than just user credentials.

AI is discovering more vulnerabilities, faster, and the entire cybersecurity community must pitch in to respond.

Robert "RSnake" Hansen, Katie Moussouris, Rich Mogull, Richard Stiennon, and Bruce Schneier consider whether columns they penned have stood test of time.

The hacking of Hugging Face by a rogue OpenAI agent is significant, but unsurprising — and preventing the next AI model escape will be difficult, at best.

Advanced LLMs escaped their sandboxes while attempting to achieve a non-malicious benchmark test objective.

Job pressures have increased as companies run headlong into AI adoption, causing 26% of top security executives to consider leaving their position.

When chained together, the two vulnerabilities allow threat actors to gain root-level capabilities on SonicWall's mobile access appliances.

The White House launched Gold Eagle to coordinate vulnerability response in a new AI world, but multiple questions linger over how it's being implemented.

From the World Cup to the United States' 250th celebration, this year's event calendar has been packed with enormous security demands.

Breaking cybersecurity news, news analysis, commentary, and other content from Europe.

Three of the 622 CVEs for which Microsoft issued patches this week are zero-days; there are more than 60 critical vulnerabilities.

The US government's restrictions on Anthropic frontier models intensifies calls in the UK to reduce reliance on US tech, with cyber implications.

On the heels of recent honors for her contribution to cyber policy, Jen Ellis looks back at the events that shaped her advocacy for security researchers.

The attack vector is available for rent at scale, and evades AV and EDR, leaving YARA analysis as the best detection option.

In a first, the UK and the EU jointly imposed sanctions on Russian individuals and entities for cyberattacks and disinformation campaigns in the region.

Risk tolerance, exposure visibility, board oversight — handling third-party risk is complicated but achievable with disciplined, precise governance.

In some companies, engineers are building defense and attack tools to test the potential of artificial intelligence for cybersecurity — and its threat.

By addressing these overlooked risk vectors, organizations can continue leveraging GitHub's innovation while protecting against sophisticated supply chain attacks targeting interconnected software.

A more unified and behavior-aware approach to detection can significantly improve security outcomes.

Cybersecurity-focused leadership delivers better products and business outcomes.

With informed decision-making, organizations can strengthen their overall resilience and maintain the agility needed to adapt to emerging threats, without sacrificing innovation or productivity.

Security is everyone's responsibility, but as a CISO, it starts with you.

Securing AI systems represents cybersecurity's next frontier, creating specialized career paths as organizations grapple with novel vulnerabilities, regulatory requirements, and cross-functional deman...

By creating a safe environment for open discussion, prioritizing human context alongside technical data, and involving diverse stakeholders, organizations can turn security incidents into accelerators...

While the cybercrime underground has professionalized and become more organized in recent years, threat actors are, to a great extent, still using the same attack methods today as they were in 2020.

Black Hat News

The rise of agentic AI means the battle of the machines is just beginning. To win, we'll need our own agents — human and machine — working together.

A year after the largest outage in IT history, organizations need to make an active effort to diversify their technology and software vendors and create a more resilient cyber ecosystem moving forward...

By tying security investments to measurable outcomes — like reduced breach likelihood and financial impact — CISOs can align internal stakeholders and justify spending based on real-world risk.

When security leaders embrace this truth and learn to speak in the language of leadership, they don't just protect the enterprise, they help lead it forward.

Criminal networks are adapting quickly, and they're betting that companies won't keep pace. Let's prove them wrong.

Security often lags behind innovation. The path forward requires striking a balance.