News
AWS Continuum offers devs help with securing code
1+ hour, 59+ min ago (425+ words) AI coding agents are making it easier than ever to produce software. Ensuring that software is secure before deployment is another matter " one that AWS thinks AI should help with too. As enterprises adopt agentic development workflows, the volume of…...
Why Southeast Asia CISOs Need Zero Trust as Their AI Control Plane - AI Agents, Data Borders and Supply Chains
6+ day, 9+ hour ago (1092+ words) At Zenith Live 2026 held on 16-17 June in Vienna, Zscaler sharpened a reality that Southeast Asia CIOs and CISOs are already sensing, which are, AI agents are quickly becoming digital workers inside their organisations, while regulators tighten data residency rules and…...
Security considerations for adopting Claude Code and Cowork for SMBs
4+ day, 9+ hour ago (1777+ words) You are a security leader at a small or medium-sized business (SMB), and your organization has decided to adopt Claude. If you are like me, after the initial "surprise" wears off, you probably want to quickly get your arms around…...
Microsoft says web-enabled AI agents can trigger host-level RCE
3+ day, 9+ hour ago (410+ words) Microsoft is warning of a novel remote code execution (RCE) path possible through web-enabled AI agents, demonstrating the technique against Auto Gen Studio, its open-source interface for building and testing multi-agent applications. The demonstration showed that a malicious webpage rendered…...
M365 Copilot Search Leak: Your prompt injection attack surface just got bigger
3+ day, 16+ hour ago (624+ words) A recent proof-of-concept attack against Microsoft's M365 Copilot Enterprise highlights what could be a much broader prompt injection threat based on a common way many AI-enhanced web services operate. Dubbed Search Leak, the attack hinged on a typical malicious objective: to…...
Oracle releases 245 new security patches, all rated "high-priority security
4+ day, 5+ hour ago (732+ words) The Oracle Critical Security Patch update (CSPU) released this week contains 245 newly-announced fixes for supported on-premises software, some of which impact multiple products. It is in reaction to an industry trend to announce and fix security holes much more quickly,…...
Attackers abuse Google Ads, Git Lab, and Claude to deliver malware
4+ day, 6+ hour ago (583+ words) Threat actors are abusing trusted platforms, including Google Ads, Git Lab pages, and Claude's shared chat feature, to trick users into executing malicious commands on their systems. Disguised as popular AI developer tools, the threat actors used Click Fix social…...
Forti Bleed campaign exposes 75, 000 Fortinet firewalls worldwide
4+ day, 9+ hour ago (448+ words) A massive credential-compromise campaign dubbed "Fortibleed" has been found to expose tens of thousands of Fortinet devices worldwide, with researchers warning of persistent attacker access to affected enterprise environments. Further details came from SOCRadar after its team independently discovered an…...
Google's Vertex AI SDK could allow RCE through bucket squatting
5+ day, 9+ hour ago (528+ words) A design flaw in the Vertex AI software development kit (SDK) for Python, Google Cloud's managed platform for building, training, and deploying AI agents, could allow hijacking and poisoning of models outside of a developer's own Google Cloud project. According…...
Microsoft says you don't need another email security tool; experts say, not so fast
6+ day, 8+ hour ago (953+ words) Despite best efforts by defenders, malicious emails continue to slip through the cybersecurity cracks, leading some enterprises to implement a layered "defense in depth" strategy that incorporates multiple tools. Microsoft seems to be challenging this idea, revealing that there are…...