Stories tagged by our AI curator.
A critical vulnerability in UEFI firmware used by most server vendors allows attackers to execute code during the boot process, affecting data centers globally.
Google launched Gemini 4 Carbon, its latest frontier AI model, with improvements in coding, agentic tasks, and cybersecurity capabilities.
A hacker obtained and published personally identifiable information of more than 40,000 U.S. Homeland Security employees, including CBP and ICE agents.
Infinidat is addressing cyber recovery planning and data restoration as enterprises adopt agentic AI systems that expand the attack surface and require new approaches to security and resilience.
Two critical bugs discovered in PHP, which powers roughly 70% of websites, have prompted widespread emergency patching efforts across organizations.
Enterprise data discovery and classification are becoming critical as organizations integrate AI systems, requiring security teams to govern AI access to sensitive information.
Bank of America warns customers against sharing banking passwords with AI agents as agentic AI payment systems pose rising security risks.
A critical UEFI firmware vulnerability in EDK II allows attackers to execute code before the operating system loads, affecting most servers.
A security vulnerability has been discovered in widely used barcode scanners that could expose warehouses and retail stores to cyberattacks.
Enterprises must implement human oversight and security monitoring to manage AI agent resilience as autonomous systems handle more business tasks.
A critical UEFI firmware vulnerability potentially affects data centers and servers worldwide, posing significant security risks across the infrastructure layer.
Volt Typhoon, a Chinese state-sponsored hacking group, has developed a framework called 'Silent Train' that uses rotating chains of compromised devices to conduct zero-day attacks on high-value systems.
Ascend Performance Materials uses security infrastructure and cyber recovery capabilities to protect manufacturing data and prepare for operational disruptions.
South Korea's financial sector faces a new round of cyberattacks with growing AI-driven threats emerging across Asia.
Organizations are moving from strategic planning toward implementation of post-quantum cryptography, with public key infrastructure emerging as a particularly complex challenge.
CISA adds two PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to its Known Exploited Vulnerabilities catalogue, with a deadline for federal agencies to patch by October 29.
Coinbase, Bithumb, and two South Korean financial firms disclosed data security incidents affecting customer information and internal systems.
Security analysis explains how limiting service account access reduces breach damage more than patching alone, using PHP2Shell vulnerability as case study.
