Source-8

Noteworthy stories that might have slipped under the radar: Microsoft rolled out patches for cloud services, hackers compromised 5,000 Dropbox accounts, and Guardio is now valued at $1.1 billion. … [Read more...]

Nearly two dozen issues, tracked collectively as CVE-2026-73749 (CVSS score of 9.8), were addressed with the updates. … [Read more...]

The Daybreak initiative will provide subsidized AI cyber capabilities, training and technical assistance, though OpenAI has disclosed few details about costs and eligibility. … [Read more...]

Tracked as CVE-2026-9586, the unauthenticated SQL injection flaw can be exploited remotely for arbitrary code execution. … [Read more...]

Dubbed PostGREShell, CVE-2026-6471 turns low-level replication access into code execution, permanent superuser privileges and a persistent database backdoor. … [Read more...]

Catch promises the capabilities of a trusted executive assistant, with built-in controls governing what data and systems it can access. … [Read more...]

The flaws could allow attackers with administrative access to a virtual machine to execute code on the host system. … [Read more...]

Google's Chrome 152 security update resolves 12 vulnerabilities, including a high-severity type confusion flaw in the V8 engine. … [Read more...]

The deal highlights Nvidia's push to champion increasingly popular open-source AI models. … [Read more...]

Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed admin keys. … [Read more...]

New models, trained using NVIDIA Nemotron 3 Ultra, aim to catch rogue agent behavior before it executes, without the latency of large-model review. … [Read more...]

The Austin-based company will invest in agentic runtime security capabilities to secure AI coding agents. … [Read more...]

The startup's firewall evaluates AI skills, plugins and MCP servers for malicious instructions, excessive permissions and software supply chain risks. … [Read more...]

Cybercriminals are offering digital scans of US and Canadian driver's licenses, likely stolen from IDScan.net. … [Read more...]

The high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution. … [Read more...]

Publicly disclosed S/MIME flaws could expose encrypted email content, while critical IOS XR and Nexus bugs could enable remote code execution and authentication bypass. … [Read more...]

The security tool intercepts potentially dangerous agent actions, blocking clear threats and requesting human approval when intent is uncertain. … [Read more...]

Late amendments to the Cyber Security and Resilience Bill would give ministers new powers to restrict risky technology providers as supply chain attacks intensify. … [Read more...]

The industrial giant has released advisories for its RSLinx Classic, ArmorStart, ControlFLASH, FactoryTalk, and other products. … [Read more...]

The security defect allows remote attackers to bypass authentication through argument bearer manipulation. … [Read more...]