1+ day, 2+ hour ago   (677+ words) Artificial intelligence (AI) has quickly become a strategic priority for enterprise security teams. Yet despite growing investment in AI-driven security software, many enterprise SOCs are struggling to translate AI into measurable operational improvements. The issue isn’t whether AI belongs in…...

1+ day, 3+ hour ago   (1572+ words) Ask a security researcher what makes an AI agent dangerous, and the instinct is to talk about the model — what it will and won’t refuse, how easily it can be jailbroken, whether its weights can be trusted. That instinct is…...

5+ day, 22+ hour ago   (217+ words) A Canadian hacker has admitted being part of a group responsible for several major cyberattacks. Connor Riley Moucka pleaded guilty to being part of a coterie of hackers that hit 165 organizations, resulting in the theft of customer records and the…...

6+ day, 23+ hour ago   (606+ words) For decades, cybersecurity has been built around one assumption: defenders had enough time to: That assumption shaped how organizations built security programs, how vendors developed security products, and how regulators measured cyber resilience. That assumption no longer holds AI has…...

6+ day, 23+ hour ago   (603+ words) AI is accelerating vulnerability discovery, exploit development, and attacker weaponization faster than most organizations can adapt. Security teams are inundated with vulnerability disclosures, threat intelligence feeds, exploit chatter, and vendor advisories, all demanding immediate attention. Yet only a small percentage…...

6+ day, 23+ hour ago   (739+ words) After more than 300,000 production penetration tests (pentests), our company has learned something that may surprise people watching the recent wave of autonomous security announcements. The hardest problem in autonomous security isn’t teaching a machine how to attack. It’s teaching an…...

1+ week, 14+ hour ago   (303+ words) AI is accelerating the pace of cyberattacks. The window between vulnerability disclosure and exploitation continues to shrink, giving security teams less time to identify, prioritize, and remediate risk. That reality exposes a growing gap in the way many organizations validate…...

1+ week, 2+ day ago   (342+ words) Operators have drawn comfort from the wrong conclusion. Cellular opacity did not protect the victims; it merely hid the exposure from everyone, including themselves. If a security researcher cannot see your cellular attack surface, neither can your own assessment — and…...

2+ week, 20+ hour ago   (468+ words) Anthropic’s Claude Mythos Preview model has helped researchers discover ways to speed up attacks against two widely studied cryptographic algorithms. One of the targets is Hawk, a candidate for post-quantum digital signature algorithms currently being evaluated by NIST, while the…...

2+ week, 1+ day ago   (645+ words) Security teams have long known that severity alone doesn’t determine risk. A CVSS score says little about whether a vulnerability is reachable from the Internet, is being actively exploited, can be automated or provides the attacker with control of the…...