CISA Leverages AI Automation for Enhanced Threat Analysis
The Cybersecurity and Infrastructure Security Agency has seen significant gains from AI automation in its security operations unit, enabling faster threat triage and response.
Attackers exploit identity verification processes, particularly during onboarding and account recovery, to gain unauthorized access to corporate systems.
The Cybersecurity and Infrastructure Security Agency has seen significant gains from AI automation in its security operations unit, enabling faster threat triage and response.
The Federal Trade Commission has banned data broker Kochava from selling sensitive location information without consumers' explicit consent.
Joey Melo, a Principal Security Researcher at CrowdStrike, discusses his approach to hacking AI systems, focusing on controlling the experience without changing the rules.
The Amazon Simple Email Service is being increasingly abused to send convincing phishing emails that bypass standard security filters and render reputation-based blocks ineffective.
Attackers are actively exploiting a Linux vulnerability, dubbed 'Copy Fail', which allows for total control of a system with authenticated local access, affecting mainstream Linux kernels built since 2017.
Congress extended Section 702 of the Foreign Intelligence Surveillance Act for 45 days, allowing warrantless surveillance of foreign targets to continue.
Microsoft Defender has incorrectly identified legitimate DigiCert root certificates as Trojan:Win32/Cerdigent.A!dha, leading to false-positive alerts and removal of certificates from Windows systems.
Data centers have become vital to modern society, making them high-value targets for cyber and physical attacks, with potential disruptions affecting not just businesses but also national security and entire economies.
Fraudsters are increasingly targeting small to mid-sized credit unions with structured loan fraud methods, exploiting weaknesses in work processes and verification systems.