Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 131 stories in 24 hours
How attackers use AI, how AI is attacked, and how defenders use it.
53stories this week
8today
the last seven days
Most fromHelp Net Security, CSO Online UK, The Hacker News, Dark Reading
In the news hereOpenAI13Microsoft5Anthropic4GitHub3
Officials say amendments remain under consideration despite minister’s pledge to act…
The Register
In this Help Net Security interview, Michael Scott, CISO at Immuta, talks about how organizations should handle permissions for AI agents. He argues agents should be treated as lower-trust identities that don’t inherit everything their user can access. Scott explains why agent privilege creep differs from the human kind, how authority should pass to sub-agents,…
Help Net Security
A bug in Claude Code Desktop’s preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
Dark Reading
AI is expanding faster than anyone can imagine, as organizations race to use AI to gain a competitive advantage. It started with Generative AI. Now, agentic AI is changing the way people think and work. With the rise in usage of AI agents, the fear of data leakage and having more than necessary permissions has…
Cloud Security Alliance
Researchers say small AI models could be capable of spreading across vulnerable smart devices within months.
Malwarebytes
Texas HB 3834 and HB 3512 require annual cybersecurity and AI awareness training. Learn who’s in scope, what’s required, and how to comply fast.
Huntress
The letter argues federal agencies should more rigorously test AI models for security threats and sandbox evasion, set new safety standards and lean into defensive AI.
CyberScoop
How do you secure AI agents when your identity program is already years in the making? Start with the access those agents can use. Amy ended her last post with four questions …
Palo Alto Networks (CyberArk)
The cybersecurity startup plans to expand engineering and go-to-market teams in the US and UK.
SecurityWeek
AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave many assets and vulnerabilities untested. Picus Security explains how combining agentic pentesting with exposure validation and breach simulation can help close these gaps.
BleepingComputer
Security and IT teams are under pressure to adopt AI, but many are seeing the opposite of what was promised. Tools that demo well don’t hold up in real workflows. Complexity increases. Trust breaks down. And instead of reducing workload, AI can introduce new risks and oversight burdens. This guide breaks down why AI adoption…
Help Net Security
Simply asking Anthropic’s Claude Code to review an HTML file could hand attackers access to a developer’s machine, cloud credentials and software development environment, according to a new Noma Security finding. Noma’s researchers found a vulnerability affecting Anthropic’s Claude Code Desktop app that could allow malicious JavaScript embedded in an HTML file to execute without…
CSO Online UK