The Curious Engineer

All blogs / Security

SCM feed for Latest

scworld.com/topic/latest

The essential resource for cybersecurity professionals, delivering in-depth, unbiased news, analysis and perspective to keep the community informed, educated and enlightened about the market.

Security

’26
Posts
167 from 29 May 2026 to 7 Nov 2026
Posting
about daily (167 in the last year)
Kind
magazine
Feed
https://www.scworld.com/feed/topic/latest

2026 161

  1. OWASP Global AppSec: How to hide prompt injection in plain sight
  2. MetaMask addresses infrastructure security incident
  3. Microsoft addresses high-severity vulnerability in Paint application
  4. Veeam addresses boot failures on AMD EPYC processors
  5. D-Link issues mitigation guidance for unpatched DGS-3130 switch vulnerabilities
  6. AI hates us all, Binance, OpenSSH, Apple, WordPress, DNS, Scams, Josh Marpet and more - SWN #631
  7. FBI, CISA warn of cyberattacks targeting refrigeration systems
  8. The 'Frankensteinization of the Internet.' Thanks, Meta
  9. Truffle Security launches a program to revoke exposed API keys
  10. What the OpenAI–Hugging Face incident says about AI agent access
  11. Paul Wagenseil
  12. OWASP Global AppSec: Cybersecurity industry overdue for a ‘market correction’
  13. “That’s Not Supposed to Happen” – PSW #951
  14. Genius toddler with your production credentials
  15. Bug affecting multiple Apple products added to CISA exploited list
  16. Back to the beginning: Why AI’s impact on data security makes the endpoint the battlefield once again
  17. PHP2Shell: The storm before the calm?
  18. Russian state-backed hackers launch mobile cyberespionage campaign
  19. Sentra raises $150 million to secure enterprise data against AI agents
  20. Researchers identify prompt adware targeting OpenAI Codex
  21. Former US government contractor pleads guilty to espionage
  22. Operation CloudFire: phishing campaign targets corporate Google sessions
  23. SonicWall warns of unpatched vulnerabilities in end-of-life management software
  24. Two critical vulnerabilities discovered in Xen hypervisor
  25. Texas A&M develops sovereign AI platform for research
  26. Research warns developers struggle to verify AI-generated security fixes
  27. Supply-chain attack targets Goddess of Victory: NIKKE PC launcher
  28. WordPress Core bug added to CISA’s exploited vulnerabilities list
  29. AI doesn’t create new cyber threats – it just makes the old ones unstoppable
  30. The EU AI Act has entered the real world: What organizations need to do now
  31. It’s The Trickery While Empowering Employees and Redesigning Work for AI – Frank Riccardi – BSW #472
  32. Barracuda Networks issues patches for critical security vulnerabilities
  33. Gartner report outlines evolving roles in AI-enabled security operations centers
  34. Identity and access management spending to surge due to AI adoption
  35. Password manager mSecure alerts users to suspicious activity
  36. OpenAI partners with Cathedral Systems to improve security infrastructure
  37. CrowdStrike acquires two AI security startups for nearly $500 million
  38. Harvard University data breach impacts over 850,000 individuals
  39. Patrick Stewart, Videostrong, C3RB3R, GitLab, VMware, BTCPay, Binance, Aaran Leyland. - SWN #630
  40. Suspected cyberattacks target US military, European supermarket freezers
  41. How our cyber Black October resembled the crash of 1987 -- and how teams should respond
  42. The MCP server nobody inventoried
  43. More Vulns and More Guesswork from Less Data – Jeremiah Grossman – ASW #407
  44. New research reveals limitations of vendor advisories in identifying critical security vulnerabilities
  45. Researchers demonstrate specter attack on air-gapped computers
  46. BTCPay Server urges users to update after hot wallet attacks
  47. US government orders removal of Acronis software from federal systems
  48. Abrigo restores Sageworks platform following irregular activity
  49. Synology warns of C3RB3R ransomware targeting outdated NAS devices
  50. The impact of AI on cybersecurity and legacy software risks
  51. Trigger.dev discloses security incident involving exposed environment variables
  52. Massive AT&T data breach exposes customer call logs
  53. Microsoft warns of help desk impersonation and certificate abuse
  54. Over 1,000 GitLab servers exposed to exploited critical RCE flaw
  55. What the Binance heist reveals about how North Korea exploits the seams
  56. Shifting Cyber Turtles with Casey Ellis, the Vibe Check, and the News – Casey Ellis – ESW #483
  57. Applebee's patches security flaw exposing customer data
  58. Broadcom uses AI to remediate software vulnerabilities
  59. Federal Reserve security program rated ineffective in watchdog audit
  60. Critical Linux kernel vulnerability allows remote code execution
  61. Security researcher releases proof-of-concept for Android SMS of Death vulnerability
  62. Chainalysis reports security breach involving offensive agentic techniques
  63. Reddit plans transition to logged-in service to curb scraping
  64. AI-generated code security shows first significant improvement in a year
  65. Anthropic files for initial public offering amid broader tech market volatility
  66. Sophisticated malware targets government-specific windows systems in Asia
  67. GCHQ faces scrutiny over lost storage drives and data handling failures
  68. Organizations face security risks from excessive AI autonomy
  69. Moldova investigates massive cyberattack on national identity infrastructure
  70. Fake cryptocurrency trading app steals funds from Solana wallets
  71. Mrfoofoo, Binance, Polymarket, Silent Train, robosurance, privacy, and Josh Marpet - SWN #629
  72. Identifying election domain threats before they become attacks
  73. Drupal Commerce Core access bypass flaw exploited in attacks
  74. A clean code review does not mean a safe runtime
  75. Indonesia seeks storage upgrades to bolster national identity infrastructure
  76. County election websites show persistent security vulnerabilities
  77. Valve steam platform vulnerabilities enable zero-click remote code execution
  78. Federal Election Commission systems go offline during cyberattack
  79. Security researchers warn of camera management software exploitation
  80. CISA adds Linux kernel and Broadcom VMware ESX flaws to known exploited vulnerabilities catalog
  81. Enterprise networking market growth faces component supply challenges
  82. Security researcher gains network access via legacy server vulnerability
  83. Unauthorized AI relay service poses security risks to enterprise users
  84. SecurityScorecard releases benchmark for testing AI in vendor risk management
  85. Vulnpocalypse Continues Until Defense Improves – PSW #950
  86. A revoked certificate is not a blocked connection
  87. Cisco SD-WAN Catalyst Controller attacks linked to Volt Typhoon’s Silent Train network
  88. From AI Agents to Critical Infrastructure: Closing the Cyber Resilience Gap
  89. How AI forces data security back to the endpoint
  90. After the breach: Uncovering the full scope of the attack
  91. Federal Election Commission systems taken offline following cyberattack
  92. Upwind Security raises $400 million to scale cloud and AI security platform
  93. Discord to index discoverable server discussions for web search
  94. Cisco releases open source project quarry to monitor AI agent behavior
  95. FCC commissioner outlines timeline for US Cyber Trust Mark rollout
  96. Security researchers identify bluetooth vulnerabilities in warehouse barcode scanners
  97. Malicious AI desktop applications distribute Yoba malware
  98. Army selects Amazon Web Services and World Wide Technology for Project Griffin
  99. Federal agencies face growing fraud threats requiring better data visibility
  100. Node2Shell flaw in Brotli added to CISA exploited vulnerabilities list
  101. Why cyber due diligence should be part of every vendor risk review
  102. Passports and Visas: A practical identity model for AI agent security
  103. CyberSN Jobs Report as CIOs and CISOs are Unaccountable and Unprepared for AI - BSW #471
  104. Engie confirms customer data breach via marketing platform
  105. Police and fire services in England and Wales face significant cyber risks
  106. China-linked Warlock ransomware group targets global infrastructure
  107. Japanese ISP GMO Internet suffers major data breach and ransomware demand
  108. University of Copenhagen reports data breach affecting over 500,000 individuals
  109. The shadow AI epidemic: Uncovering hidden AI agents and components on the endpoint
  110. Agents, Train Robberies, Jazz, Microsoft, Elvis Gyrates, Aaran Leyland, and More - SWN #628
  111. OpenAI calls for industry to raise its cyber defenses
  112. Steve Zurier
  113. Closure codes are chosen to close the case
  114. How to evaluate OT detection and response platforms
  115. Risk advisory: AI security programs fail when they do not control the system
  116. GITEX Global 2026 to showcase advancements in artificial intelligence and cybersecurity
  117. Former NSO Group head advocates for sovereign AI to reduce reliance on US firms
  118. Cisco introduces privileged infrastructure access to secure network management
  119. Enterprises accelerate public key infrastructure modernization for quantum readiness
  120. The intelligence problem AI can’t solve
  121. Securing Modern Financial Systems in the Age of AI - Rashid Feroze - ASW #406
  122. DreamHost resets user passwords following service disruption
  123. Dutch police arrest two men over AI-powered bank fraud scheme
  124. Sweden bans ChatGPT and Claude for government use
  125. UK Biobank prepares to reopen research platform following major data breach
  126. PHP2Shell exploitation confirmed, but mass attacks remain elusive
  127. The lagging indicator problem: why we measure security burnout after it has already cost us
  128. De-identification is an access control wearing a data-transformation label
  129. Centralised inspection: why the hub exists and what it costs
  130. Security groups, network ACLs and policy: what each one can actually express
  131. Validating an assumption that spans a vendor you do not operate
  132. AI ‘solved’ the wrong half of the vulnerability management lifecycle
  133. New AI tool identifies property locations from interior photos
  134. Okta advances AI agent governance and identity security
  135. Oracle experts discuss strategies for securing agentic AI against emerging threats
  136. Recent PHP vulnerabilities spark global cybersecurity concerns
  137. Security affairs malware newsletter highlights global threat landscape
  138. Bright Security launches STAR Fuzzer to automate application security testing
  139. Building a parallel Internet, security buzzwords that should be retired, and the news - Barrett Lyon - ESW #482
  140. Security firm disables vulnerable Popcorn Time updater
  141. Security researcher identifies potential privilege escalation in Tailscale SSH
  142. Federal judge rules OPM access for DOGE personnel was unlawful
  143. The importance of usage intelligence for artificial intelligence companies
  144. Tor, PhP2Shell, Deepfakes, eMudhra, LiteLLM, Meta, Josh Marpet, and More – SWN #627
  145. AI pentesting tool Artex used in recent ConnectWise compromise
  146. After memory poisoning, an AI agent needs more than a restart
  147. Why we don’t need an AI ‘kill switch’
  148. Moving images: How a runtime bill of materials provides total dependency visibility
  149. PHP2Hell – Joshua Wright – PSW #949
  150. PHP2Shell attacks surge worldwide as governments rush to patch
  151. In continuous operation: How Simpson Strong-Tie safely AI red-teams AI-powered applications
  152. CISA advises orgs to patch PHP2Shell bugs immediately
  153. SC Media Editorial Intelligence, reviewed by Habibullah
  154. Siemens Software Center flaw exploited in ClickFix DLL-sideloading attack
  155. Attackers compromise Microsoft 365 credential via ConnectWise Cloud Backup
  156. BeyondTrust zero-day exploited by China-linked group Armory Castle
  157. How to get enterprise-grade security without an enterprise-sized team
  158. The AI you can’t see: Bringing third-party shadow AI into the risk picture
  159. Transforming MDR: How AI challenges and strengthens protection services
  160. Changing the game: How AI forces organizations to revisit assumptions about recovery and resilience
  161. Identity-based attacks: how they work and how to defend against them

Undated 6

  1. The Network Isn’t What You Think It Is: Securing an Environment Built for Machines
  2. Threat intelligence futures: AI-powered intel, cross-sector sharing
  3. The shift from SDLC to ADLC: How the human role is changing in software development
  4. Crown jewels: The better way to protect your privileged accounts
  5. Accelerating DFIR: How agentic AI changes the investigation
  6. Playing catch-up: How to adapt to the agentic AI threat landscape