Security Stuff

Tenet Security has emerged from stealth mode with six million dollars in seed funding to address a critical gap in AI security: detecting and stopping dangerous behavior from AI agents in real time. Founded by former Cisco AI Defense researchers, the company uses its own AI agents to monitor and predict potentially harmful actions before they occur, whether from runaway automation or "agentja...

In a significant supply chain attack, 144 Mastra npm packages were compromised after attackers hijacked a contributor's account. The breach highlights ongoing security vulnerabilities in the JavaScript package ecosystem, where compromised developer credentials can lead to widespread distribution of malicious code. This incident underscores the critical need for stronger authentication measure...

1Password has acquired Israel-based Apono in a deal reportedly valued between 250 and 300 million dollars, significantly expanding its identity security capabilities. Apono specializes in just-in-time access governance, providing temporary, narrowly scoped permissions for humans, machines, and AI agents that automatically expire after tasks are completed, eliminating the need for persistent privil...

Security researchers have uncovered two dangerous campaigns targeting developers and AI users: malicious JetBrains plugins designed to steal API keys for AI services, and Chrome extensions that capture conversations with AI chatbots. These attacks specifically target valuable credentials and sensitive data from users working with artificial intelligence tools and development environments.

Organizations are increasingly seeking to move beyond basic security visibility to more confident threat prioritization through adversarial exposure validation. This approach helps security teams identify and focus on the vulnerabilities that pose the greatest actual risk to their systems, rather than simply cataloging potential issues. The methodology bridges the gap between detecting security pr...

Here's a summary of the top attack surface exposures expected in 2026. The article highlights emerging cybersecurity concerns including AI-discovered software vulnerabilities and the ongoing shift from traditional VPN infrastructure to Zero Trust Network Access approaches. Security experts emphasize the need for organizations to modernize their security frameworks and develop specialized expe...

The UK is set to ban users under 16 from social media platforms like Facebook, Instagram, and TikTok starting in early 2027, joining Australia and Canada in restricting minors' online access. However, privacy experts warn that age verification requirements could force platforms to collect sensitive biometric data and create unprecedented surveillance risks, potentially causing more harm than...

A massive credential-harvesting campaign has compromised more than thirty thousand Fortinet firewalls and VPN gateways across nearly two hundred countries, affecting government agencies, telecommunications companies, and other critical sectors. Security researchers from SOCRadar discovered the operation after finding an exposed server belonging to the attackers, who appear to be Russian-speaking a...

Over two dozen fintech and tech companies have formed a coalition called Athena to protect open source software from AI-accelerated cyberattacks by fixing vulnerabilities before they're publicly disclosed. The group, which includes JPMorgan Chase, Cisco, Cloudflare, and Docker, shares vulnerability findings among members and deploys patches through Chainguard Libraries before making them publ...

Over 100 cybersecurity executives from companies like Adobe and Nvidia are urging the Trump administration to lift its export restrictions on Anthropic's latest AI models, Fable 5 and Mythos 5, which the company took offline Friday to comply with the directive. The experts argue the restrictions could help US adversaries more than hurt them, noting that while the models are good at finding so...

Arch Linux has suspended new user registrations on its community-driven Arch User Repository after more than fifteen hundred malicious packages were published in an ongoing supply chain attack called Atomic Arch. The attackers targeted abandoned packages, modifying them to install rootkit-like malware designed to harvest credentials, SSH artifacts, and browser data, while using Linux kernel techno...

President Trump signed a new cybersecurity memorandum to strengthen protections for National Security Systems, which handle the government's most sensitive classified information and military operations. The directive establishes a governance structure by reestablishing and modernizing the Committee on National Security Systems, which will set baseline security requirements across all agencie...

TrustCloud has launched Application Assurance, a platform designed to automate how CISOs assess trust in their production applications, replacing the traditional manual questionnaire process that can take months and only provides a snapshot in time. The system uses hundreds of connectors to continuously monitor security tools, infrastructure, documentation repositories, and ticketing systems acros...

California Water Service is investigating claims by Iran-linked hackers from the group Handala, who say they've stolen 5 gigabytes of data from the utility's systems, including customer billing information and personal data. The hackers, believed to be a front for Iranian government operations, claimed they could have disrupted water service but chose not to, instead leaking the stolen f...

A cybercrime group called FulcrumSec has claimed responsibility for hacking Danish pharmaceutical giant Novo Nordisk, allegedly stealing one-point-three terabytes of data including intellectual property, undisclosed drug programs, and proprietary AI models. The hackers say they gained access through a GitHub token in March and demanded twenty-five million dollars in ransom, which Novo Nordisk refu...

Security Week surveyed dozens of security experts to create a comprehensive look at how AI is currently being used in cybersecurity. The report examines five key areas including generative AI, agentic AI, shadow AI, machine learning, and artificial general intelligence, exploring both the opportunities and risks each presents. While generative AI is proving useful for tasks like summarizing incide...

Endpoint security startup Ent has emerged from stealth mode with a massive 100 million dollar seed funding round, led by Decibel with participation from Sequoia and other major investors. Founded by the cybersecurity veterans behind RiskIQ, which Microsoft acquired, Ent is building an intent-aware security platform that uses real-time AI reasoning to evaluate behavioral patterns of both human user...

San Francisco-based cybersecurity startup Magnitude has launched with 10 million dollars in seed funding led by Ballistic Ventures, introducing an autonomous AI workforce for third-party risk management. The company's platform uses AI agents that continuously monitor vendor ecosystems, automatically identifying vulnerabilities and prioritizing remediation across third-party and downstream dep...

North Korean threat actors are deploying NarwhalRAT malware through fake Microsoft security alerts. The attacks use social engineering tactics that mimic legitimate Microsoft warnings to trick users into downloading the remote access trojan. Once installed, NarwhalRAT gives attackers backdoor access to compromised systems, allowing them to steal data and maintain persistent control over infected m...

Chinese-linked threat actors have upgraded their SprySOCKS backdoor malware to now target Windows systems, incorporating driver-based stealth techniques to avoid detection. The malware, which was previously focused on other platforms, now uses Windows drivers to hide its presence and maintain persistent access to compromised systems. This evolution represents a significant enhancement in the sophi...

Attackers are actively exploiting three security vulnerabilities in Fortinet's FortiSandbox product, including one that was just patched last week. The flaws allow malicious actors to compromise the security sandbox solution, which organizations use to analyze suspicious files and URLs. Fortinet users are urged to apply patches immediately to prevent exploitation of these actively targeted vu...

A new survey reveals that 94% of security incidents involve anonymized infrastructure, highlighting how attackers increasingly use tactics to hide their identity and evade detection. Despite this growing threat, security teams remain largely reactive rather than proactive in their defense strategies, struggling to stay ahead of adversaries who leverage anonymized networks and infrastructure to lau...

A new Android malware called Rokarolla is targeting users by stealing PINs, SMS authentication codes, and cryptocurrency wallet funds. The sophisticated malware represents a growing threat to mobile security, particularly for users who store sensitive financial information and digital assets on their Android devices. Security experts are urging users to be vigilant about app permissions and to imp...

The FBI and Google have successfully dismantled Outsider Enterprise, a massive China-based phishing-as-a-service platform that operated since 2023 and caused an estimated 1.9 billion dollars in losses through the theft of nearly 4 million credit cards. The operation, which targeted victims across 55 countries primarily through text message campaigns, sent over 2.5 million phishing messages in just...

Maine's Attorney General has temporarily shut down its data breach reporting portal after fake breach notifications were submitted targeting VRChat and Discord, falsely claiming millions of users were affected. The portal, which had cataloged nearly six thousand incidents since 2020, is unique because Maine requires organizations to report nationwide breach impacts, not just state residents....