Cybersecurity

Deepfakes Expose Vulnerabilities at 74% of Firms

Deepfakes are exploiting a major weakness in corporate security: our trust in familiar faces and voices. In fact, a staggering 74% of firms have already fallen victim to suspected deepfake attacks in the past year alone.

NVIDIA Unveils Platform to Secure Autonomous AI Agents

NVIDIA's new Open Agent Safety Platform is a game-changer, bringing enforceable controls to autonomous AI systems to prevent them from going off the rails - and over 100 top organizations, including Microsoft and Salesforce, are already on board. This two-layer safety approach combines software controls with hardware monitoring to ensure AI agents operate safely and reliably.

AI Deployments Expose Governance Gaps via MCP Servers

A recent analysis of 5,095 unique MCP hostnames revealed a staggering 16% were accessible outside the US, including in high-risk countries like Russia and China, highlighting a glaring governance gap in AI deployments. This oversight allows AI integrations to bypass enterprise controls, creating a silent security risk.

US Soldier Sentenced for Hacking, Extorting Tech Firms

Meet Cameron John Wagenius, a 21-year-old former US Army soldier who hacked into tech giants like AT&T and Verizon, and was sentenced to 70 months in prison for his crimes, including extorting victim organizations for stolen data. He pleaded guilty to multiple federal charges, including aggravated identity theft and conspiracy to commit wire fraud.

CISA Mandates Patching of Exploited Citrix Flaws

The US government has stepped in, mandating that federal agencies patch two critical Citrix flaws by September 30 to prevent exploitation by malicious actors. This swift action follows the discovery of over 23,000 Internet-facing IP addresses vulnerable to these Citrix NetScaler flaws.

OpenAI Halts Advanced Model Training Amid Rogue Agent Allegations

OpenAI has hit the pause button on training its most advanced models after a rogue agent was allegedly used, and the company is now working to resolve the issue and prevent similar incidents in the future. CEO Sam Altman acknowledged that progress has been slower than hoped, but the company is prioritizing transparency and collaboration with affected organizations.

Cloudflare Rectifies Containers Flaw That Exposed Customer Data

Cloudflare's Containers flaw left customer data vulnerable, with residual material found on 18 of 24 container placements, including sensitive database fragments. The issue arose from a shared storage pool that didn't properly erase reused blocks, putting data at risk.

Microsoft Halts KB5002907 Update Amid Office License Issues

Microsoft has hit the pause button on the KB5002907 update due to issues with Office licenses, and is currently investigating the problem. The company will provide further guidance to affected customers through its usual channels.

Zero Trust for AI Requires Visibility First

Most organizations are flying blind, with 70% admitting that AI workflows are handling sensitive data without proper oversight - a gaping security risk that demands attention. To get ahead of the threat, experts agree that visibility must come before enforcement, because you can't secure what you can't see.

Unit 42 Experts Debunk Cybersecurity Myths

Don't fall into the trap of thinking that buying more security tools automatically means you're safer - in reality, this approach can lead to tool overload and alert fatigue, ultimately weakening your defenses. Unit 42 experts warn that true organizational security is built on discipline, not on chasing the latest trends and solutions.

OpenAI AI Agents Expose User Images in Third-Party Sites

OpenAI has confirmed a security incident where its AI agents accidentally shared 53 user-uploaded images with third-party sites, but stresses that most users were unaffected and the breach was limited in scope. The mishap occurred when research environment agents transmitted training data while using external image-hosting services.

Elementor Plugin CSRF Flaw Enables Site Takeovers

A single click on a malicious link by a logged-in WordPress user can be all an attacker needs to take control of a site, thanks to a critical flaw in the popular Elementor Website Builder plugin. This shocking vulnerability allows hackers to execute any action a user's account can perform, with just one cleverly crafted link.

Data Leaders Wrestle with File Governance Gaps

Join a private dinner discussion in New York on October 27th, where data leaders will gather to tackle the costly problem of file governance gaps - and share their own hard-won insights, off the record. This exclusive, peer-only conversation, led by Joe Fay, offers a unique chance to swap stories and solutions with fellow leaders.

US Military Healthcare Grapples with AI Integration, Interoperability Challenges

The US military's healthcare system is seeing its biggest wins with the modernization of electronic health records, particularly with the rollout of MHS GENESIS and parallel VA efforts. These unified platforms are revolutionizing the way healthcare is delivered, setting the stage for future innovations in cloud architecture and AI integration.

Microsoft Phases Out Windows Deployment Services

Microsoft is sunsetting Windows Deployment Services, ending active development and planning for its complete removal in a future Windows Server version. This change affects the inbox WDS server role and associated functionality.

Microsoft Updates Trigger Desktop Loading Issues in Windows

If you've installed the latest Windows updates, you might be experiencing desktop loading issues - including frustrating black screens - but don't worry, Microsoft has a simple fix: just install and configure the Group Policy, and restart your device. This solution should get your desktop up and running smoothly again.

Cloudflare Fixes Flaw Exposing Leftover Disk Data Between Containers

A startling security flaw was discovered in Cloudflare's container storage system, allowing leftover disk data to be exposed between containers, with researchers finding remnants on 18 of 24 production tests and 20 of 22 underlying machines worldwide. This vulnerability was caused by a misconfigured setting that reused disk blocks without properly wiping them clean.

Senate Leaders Unveil Bill to Bolster Telecom Cybersecurity

Senate leaders Mark Warner and Ted Cruz have introduced the Telecommunications Cybersecurity and Resilience Act, a bipartisan bill aimed at fortifying the nation's telecom infrastructure against devastating cyberattacks like the historic Salt Typhoon hack. The legislation seeks to boost cybersecurity standards and bring government and industry together to protect critical infrastructure.

Bill Aims to Establish Federal Body to Investigate AI-Driven Hacks

Italy Awards $4.2B Contract for DDX Destroyers to Fincantieri, Leonardo Venture

The Italian Navy is on the cusp of a major upgrade with a $4.2 billion contract awarded to Fincantieri and Leonardo's joint venture, Orizzonte Sistemi Navali, to build two cutting-edge DDX destroyers. This game-changing deal is set to revolutionize Italy's air and missile defence capabilities.

Lawmakers Push CISA to Bolster Biotech Cyber Defenses

US lawmakers are taking a crucial step to safeguard America's biotech sector by introducing bills that would boost cyber defenses for this rapidly evolving industry, deemed vital to the nation's economic and national security. The proposed legislation aims to fortify protections for biotech infrastructure, biomanufacturing, and sensitive biological data.

Malicious npm Packages Evade Traditional Defenses

Don't rely solely on install-time scanning to protect your projects - also use runtime behavioral analysis to catch malicious npm packages that can evade traditional defenses. JavaScript's widespread use has even led some to label it a bigger security pest than Flash.

Salesforce Vulnerabilities Expose CRM Data to Zero-Click Attacks

Meet SalesBleed, a trio of security flaws in Salesforce Agentforce that allowed hackers to hijack AI agents, steal sensitive CRM data, and send phishing messages - all without a single click. These vulnerabilities exposed the power of unchecked AI, as one expert warned: it's a lesson in what it takes to keep AI agents contained.

OnePlus Devices Exposed to Root Exploit via Unpatched Flaws

OnePlus has come under fire for telling a security researcher that revealing details of two major flaws in its OxygenOS phones without permission could lead to legal action, despite confirming the issues in May and promising a fix. The company claims European cybersecurity rules give it the exclusive right to decide when to disclose vulnerabilities.