Tag: data

Reco targets AI agent blind spots with new security capability

Mar 18, 2026 2:10 PM

Tags: access, ai, api, automation, compliance, data, monitoring, risk, saas, tool

Aiming where traditional SSPM falls short: Reco positions the launch as a break from traditional SSPM, arguing that those tools were never designed for autonomous systems.”SSPM sees connections. We see behavior,” Klein said. While a typical SSPM might flag a Zapier-Salesforce link as a third-party integration, “We identify that this specific Zapier workflow is an…
Claude Code Security and Magecart: Getting the Threat Model Right

Mar 18, 2026 2:10 PM

Tags: ai, data, malicious, threat

When a Magecart payload hides inside the EXIF data of a dynamically loaded third-party favicon, no repository scanner will catch it because the malicious code never actually touches your repo. As teams adopt Claude Code Security for static analysis, this is the exact technical boundary where AI code scanning stops and client-side runtime execution begins.A…
OpenAI Introduces GPT-5.4 Mini and Nano for Faster, Lightweight AI Performance

Mar 18, 2026 12:09 PM

Tags: ai, cyber, data, openai, programming

OpenAI has officially launched GPT-5.4 mini and GPT-5.4 nano, introducing high-efficiency models optimized for automated workflows, coding subagents, and latency-sensitive deployments. These models are designed to reduce application programming interface (API) overhead while maintaining complex reasoning capabilities, making them highly relevant for professionals scaling automated data extraction or telemetry analysis pipelines. Architecture and Capability Enhancements…
Cybersecurity and privacy priorities for 2026: The legal risk map

Mar 18, 2026 11:11 AM

Tags: attack, authentication, awareness, best-practice, breach, communications, country, cyber, cybersecurity, data, defense, finance, fraud, governance, government, incident, incident response, infrastructure, law, mfa, monitoring, privacy, ransomware, regulation, risk, risk-management, service, strategy, supply-chain, threat, usa

Continued federal interest in cybersecurity and privacy, especially in connection with national security concerns: The evident connection between cybersecurity and privacy and national security have led to a number of federal initiatives in recent years. Most recently in March 2026, the White House announced the current administration’s Cyber Strategy for America, renewing a commitment to…
Robotic surgery firm Intuitive reports data breach after targeted phishing attack

Mar 18, 2026 11:11 AM

Tags: attack, breach, corporate, data, data-breach, phishing

Intuitive suffered a phishing attack leading to a data breach exposing customer, employee, and corporate information. Intuitive is an American company that designs, manufactures, and sells robotic systems for minimally invasive surgery. Its most well-known products include the da Vinci Surgical System for general surgery and the Ion endoluminal system for precise procedures inside the…
CISOs rethink their data protection strategies

Mar 18, 2026 9:10 AM

Tags: access, ai, attack, automation, breach, business, cisco, ciso, cloud, compliance, computing, control, cyber, data, defense, framework, governance, healthcare, identity, jobs, LLM, privacy, resilience, risk, service, strategy, technology, tool, zero-trust

Factors driving strategy evaluations CISOs, security experts, and data practitioners cite the expanding use of AI in the enterprise as the main reason they’re rethinking their data protection strategies.”AI is exposing more sensitive information as [workers] are taking that information and typing it into LLMs,” says Errol Weiss, CSO at Health-ISAC.AI tools make it easy…
AWS Bedrock AgentCore Sandbox Bypass Enables Stealthy C2 and Data Exfiltration

Mar 18, 2026 7:10 AM

Tags: access, control, cyber, data, dns, network, threat, vulnerability

A newly disclosed vulnerability in AWS Bedrock AgentCore Code Interpreter allows threat actors to bypass network isolation and establish stealthy command-and-control (C2) channels. AWS originally advertised this mode as providing complete isolation without external access, researchers found that it permits outbound DNS queries for A and AAAA records. This structural allowance enables attackers to exfiltrate…
prompted: Key Insights from the AI Security Practitioners Conference FireTail Blog

Mar 18, 2026 5:10 AM

Tags: ai, api, application-security, attack, automation, conference, cybersecurity, data, defense, detection, exploit, google, infrastructure, injection, LLM, malicious, malware, monitoring, openai, risk, strategy, theft, threat, tool, training, update, vulnerability, zero-day

Mar 17, 2026 – Jeremy Snyder – The State of AI Security: Moving Beyond TheoryThe biggest shift evident at the [un]prompted AI Security Practitioners Conference was the move from purely theoretical discussions about “what could go wrong” to concrete, battle-tested methodologies for “what is going wrong and how we fix it.” It’s clear that AI…
prompted: Key Insights from the AI Security Practitioners Conference FireTail Blog

Mar 18, 2026 5:10 AM

Tags: ai, api, application-security, attack, automation, conference, cybersecurity, data, defense, detection, exploit, google, infrastructure, injection, LLM, malicious, malware, monitoring, openai, risk, strategy, theft, threat, tool, training, update, vulnerability, zero-day

Mar 17, 2026 – Jeremy Snyder – The State of AI Security: Moving Beyond TheoryThe biggest shift evident at the [un]prompted AI Security Practitioners Conference was the move from purely theoretical discussions about “what could go wrong” to concrete, battle-tested methodologies for “what is going wrong and how we fix it.” It’s clear that AI…
FAQ on CVE-2026-21514: OLE bypass N-Day in Microsoft Word

Mar 18, 2026 5:10 AM

Tags: access, ai, apt, attack, awareness, backdoor, cctv, cisa, cloud, control, cve, cyber, cyberattack, data, data-breach, detection, email, endpoint, exploit, flaw, fortinet, google, government, group, healthcare, identity, infrastructure, intelligence, Internet, iran, kev, malicious, malware, microsoft, mitigation, network, office, phishing, remote-code-execution, risk, technology, theft, threat, training, unauthorized, update, vulnerability, windows, zero-day

An N-day vulnerability in Microsoft Word exposes nearly 14 million assets. Attackers can exploit this flaw to bypass security prompts, enabling deployment of malware and establishing persistent access without triggering user warnings. Key takeaways: CVE-2026-21514 is a Microsoft Word n-day that bypasses OLE and Mark-of-the-Web protections, executing payloads silently without triggering user security prompts Tenable’s…
FAQ on CVE-2026-21514: OLE bypass N-Day in Microsoft Word

Mar 18, 2026 5:10 AM

Tags: access, ai, apt, attack, awareness, backdoor, cctv, cisa, cloud, control, cve, cyber, cyberattack, data, data-breach, detection, email, endpoint, exploit, flaw, fortinet, google, government, group, healthcare, identity, infrastructure, intelligence, Internet, iran, kev, malicious, malware, microsoft, mitigation, network, office, phishing, remote-code-execution, risk, technology, theft, threat, training, unauthorized, update, vulnerability, windows, zero-day

An N-day vulnerability in Microsoft Word exposes nearly 14 million assets. Attackers can exploit this flaw to bypass security prompts, enabling deployment of malware and establishing persistent access without triggering user warnings. Key takeaways: CVE-2026-21514 is a Microsoft Word n-day that bypasses OLE and Mark-of-the-Web protections, executing payloads silently without triggering user security prompts Tenable’s…
Operation Epic Fury: Why exposure data changes everything about Iran’s cyber-kinetic campaign

Mar 18, 2026 5:10 AM

Tags: access, ai, api, apt, attack, backdoor, breach, cctv, cisa, cloud, country, cve, cvss, cyber, cybersecurity, data, data-breach, ddos, detection, dns, espionage, exploit, firewall, flaw, fortinet, government, group, healthcare, identity, infrastructure, intelligence, Internet, iot, iran, kev, malware, microsoft, military, network, office, phishing, radius, remote-code-execution, risk, strategy, supply-chain, technology, threat, unauthorized, update, vpn, vulnerability, warfare, windows

Iran’s retaliatory campaign following Operation Epic Fury has collapsed the boundary between physical and digital warfare. Tenable’s exposure data analysis across seven target countries reveals that the largest exploitable attack surface isn’t the headline threat, it’s a Microsoft Word N-day affecting nearly 14 million assets. Key takeaways: Exposure data rebalances the threat picture. A Microsoft…
Operation Epic Fury: Why exposure data changes everything about Iran’s cyber-kinetic campaign

Mar 18, 2026 5:10 AM

Tags: access, ai, api, apt, attack, backdoor, breach, cctv, cisa, cloud, country, cve, cvss, cyber, cybersecurity, data, data-breach, ddos, detection, dns, espionage, exploit, firewall, flaw, fortinet, government, group, healthcare, identity, infrastructure, intelligence, Internet, iot, iran, kev, malware, microsoft, military, network, office, phishing, radius, remote-code-execution, risk, strategy, supply-chain, technology, threat, unauthorized, update, vpn, vulnerability, warfare, windows

Iran’s retaliatory campaign following Operation Epic Fury has collapsed the boundary between physical and digital warfare. Tenable’s exposure data analysis across seven target countries reveals that the largest exploitable attack surface isn’t the headline threat, it’s a Microsoft Word N-day affecting nearly 14 million assets. Key takeaways: Exposure data rebalances the threat picture. A Microsoft…
Anton’s Vibe Coding Experience: A Reflection on Risk Decisions

Mar 18, 2026 12:11 AM

Tags: access, ai, application-security, authentication, business, compliance, corporate, credentials, data, google, linkedin, LLM, risk, tool

Look, I’m not a developer, and the last time I truly “wrote code” was probably a good number of years ago (and it was probably Perl so you may hate me). I am also not an appsec expert (as I often remind people). Below I am describing my experience “vibe coding” an application. Before I go…
Less Lucrative Ransomware Market Makes Attackers Alter Methods

Mar 18, 2026 12:11 AM

Tags: data, ransomware, theft, tool, windows

Ransomware actors are ditching Cobalt Strike in favor of native Windows tools, as payment rates hit record lows and data theft surges. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/less-lucrative-ransomware-market-makes-attackers-alter-methods
The Now, New and Next in Data Center Infrastructure Management

Mar 17, 2026 10:10 PM

Tags: ai, data, infrastructure

I’m excited to announce that I will be leading the DCIM Leadership Workshop at Data Center World AFCOM 2026 this April, taking over from Bill Kleyman. For the past nine years, Bill has set the gold standard for this workshop, making it a crucial event for data center leaders to tackle real-world challenges. In this…
Smarter, Greener Data Centers Start Here: Why Spring Is the Best Time to Upgrade with Hyperview

Mar 17, 2026 10:10 PM

Tags: ai, cloud, data

Upgrade your data center this spring with Hyperview’s AI-powered, cloud-based DCIM for real-time insights, energy savings, sustainability, seamless integration, and expert support. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/smarter-greener-data-centers-start-here-why-spring-is-the-best-time-to-upgrade-with-hyperview/
Nvidia NemoClaw promises to run OpenClaw agents securely

Mar 17, 2026 10:10 PM

Tags: ai, ceo, data, governance, Hardware, infrastructure, nvidia, open-source

Hardware agnostic: For enterprises wary of lock-in, the first question they will ask is what Nvidia gains from NemoClaw. NemoClaw’s OpenShell is fully open source, an attempt to turn it into the gold standard for agentic claw security.The underlying hardware is not vendor specific either; NemoClaw is agnostic and will run on any hardware, not…
Telehealth Firm to Be Barred From Data Exchanges

Mar 17, 2026 10:10 PM

Tags: access, data, law, network

Epic v. Health Gorilla Lawsuit Spurs New Claims Over Alleged Patient Records Misuse. A telehealth firm has admitted that it gained access to patient medical records via a health information exchange network under the guise of treatment purposes when it actually provided the records to law firms. But the legal dispute involving Epic and Health…
OpenClaw, the Fastest-Adopted Software Ever, Is Also a Security Blind Spot

Mar 17, 2026 10:10 PM

Tags: ai, ciso, data, software

OpenClaw is already running inside enterprises, often unnoticed. Learn why banning it fails and how CISOs must shift to data-centric AI governance. The post OpenClaw, the Fastest-Adopted Software Ever, Is Also a Security Blind Spot appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-openclaw-shadow-ai-agents-enterprise-security-risks/
Why Data Security Standards in Cancer Innovation Matter

Mar 17, 2026 9:10 PM

Tags: data

Cancer research and treatment innovation – and the tech that powers that – requires a great deal of collaboration and data sharing among multiple parties. But keeping that sensitive information secure and private is crucial – and requires adherence to standards, said Baxter Lee of Clearwater. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/data-security-standards-in-cancer-innovation-matter-i-5540
ColorTokens Once Again Named a Leader and Outperformer in the 2026 GigaOm Radar for Microsegmentation

Mar 17, 2026 8:10 PM

Tags: cloud, container, data, endpoint, infrastructure, iot

Microsegmentation has moved well beyond a narrow infrastructure conversation. Today, teams need to enforce policy across cloud workloads, data centers, user endpoints, containers, and OT and IoT environments without creating more operational friction than security value. That broader requirement is exactly why we built the ColorTokens Xshield Enterprise Microsegmentation Platform the way we did. It is also……
AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCE

Mar 17, 2026 7:10 PM

Tags: ai, cybersecurity, data, dns, exploit, flaw, intelligence, rce, remote-code-execution

Cybersecurity researchers have disclosed details of a new method for exfiltrating sensitive data from artificial intelligence (AI) code execution environments using domain name system (DNS) queries.In a report published Monday, BeyondTrust revealed that Amazon Bedrock AgentCore Code Interpreter’s sandbox mode permits outbound DNS queries that an attacker can exploit to enable interactive shells First seen…
Best Cloud Firewall Vendors for 2026

Mar 17, 2026 6:10 PM

Tags: cloud, data, firewall, group, network

Cloud adoption didn’t simplify network security. It multiplied it. Today’s enterprises operate across data centers, hybrid environments, and multiple public clouds. Security teams now manage AWS security groups, Azure Firewall… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/best-cloud-firewall-vendors-for-2026/
Best Cloud Firewall Vendors for 2026

Mar 17, 2026 6:10 PM

Tags: cloud, data, firewall, group, network

Cloud adoption didn’t simplify network security. It multiplied it. Today’s enterprises operate across data centers, hybrid environments, and multiple public clouds. Security teams now manage AWS security groups, Azure Firewall… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/best-cloud-firewall-vendors-for-2026/
How to prepare for NERC CIP compliance deadlines in 2026 and beyond

Mar 17, 2026 5:10 PM

Tags: access, attack, cloud, communications, compliance, control, cyber, cybersecurity, data, detection, firmware, framework, government, guide, identity, incident, incident response, infrastructure, malicious, monitoring, network, resilience, risk, service, supply-chain, threat, unauthorized, update, usa

Explore key cybersecurity requirements and implementation deadlines for electric power utilities included in the NERC CIP-003-9 standard for Low-Impact BES (Bulk Electric System) Cyber Systems, and how Tenable can help deliver the comprehensive visibility required to ensure compliance. Key takeaways NERC CIP-003-9 introduces specific requirements for electric power utilities and related sectors with low-impact BES…
How to prepare for NERC CIP compliance deadlines in 2026 and beyond

Mar 17, 2026 5:10 PM

Tags: access, attack, cloud, communications, compliance, control, cyber, cybersecurity, data, detection, firmware, framework, government, guide, identity, incident, incident response, infrastructure, malicious, monitoring, network, resilience, risk, service, supply-chain, threat, unauthorized, update, usa

Explore key cybersecurity requirements and implementation deadlines for electric power utilities included in the NERC CIP-003-9 standard for Low-Impact BES (Bulk Electric System) Cyber Systems, and how Tenable can help deliver the comprehensive visibility required to ensure compliance. Key takeaways NERC CIP-003-9 introduces specific requirements for electric power utilities and related sectors with low-impact BES…
ClickFix Attack Targets Devs with MacSync Malware via Fake Claude Tools

Mar 17, 2026 5:10 PM

Tags: ai, attack, cybersecurity, data, fraud, google, hacker, malware, tool

Cybersecurity researchers at 7AI have revealed a new Claude Fraud campaign in which hackers use fake AI extensions and Google ads to steal data from tech professionals. First seen on hackread.com Jump to article: hackread.com/clickfix-attack-devs-macsync-malware-fake-claude-tools/
Top 5 Things CISOs Need to Do Today to Secure AI Agents

Mar 17, 2026 4:10 PM

Tags: access, ai, ciso, control, data, identity

AI agents are autonomous actors with real access to data and systems, not just copilots. Token Security explains why identity-based access control is critical to prevent misuse and data exposure. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/top-5-things-cisos-need-to-do-today-to-secure-ai-agents/
90% of people don’t trust AI with their data

Mar 17, 2026 4:10 PM

Tags: ai, data, privacy

AI may be everywhere, but according to our privacy survey, 90% say they don’t trust it with their data, and many are pulling back. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/90-of-people-dont-trust-ai-with-their-data/