Tag: defense
-
The US needs a real plan to defend its water systems
Tags: defenseHere’s what it would take: stronger defenses for large utilities, hands-on help for smaller systems and federal support to make both happen. First seen on cyberscoop.com Jump to article: cyberscoop.com/us-water-system-cybersecurity-ai-threats-op-ed/
-
South Korea Orders Investigation Into AI-Powered Cyberattacks on Major Banks
South Korean President Lee Jae Myung has ordered a comprehensive investigation into a series of data breaches impacting major banks and other financial institutions. Concerns have been raised that attackers may have utilized AI-enabled offensive security tools. These incidents have prompted emergency regulatory action and a sector-wide effort to strengthen defenses against increasingly automated intrusions.…
-
Cybersecurity 2026 Von der Abwehr zur Resilienz: Die zehn Sicherheitsprioritäten für Unternehmen
Cybersecurity 2026 ist kein Wettrüsten um immer mehr Einzelwerkzeuge. Der Microsoft Digital Defense Report beschreibt eine Risikolage, in der kompromittierte Identitäten, KI-Agenten, Cloud-Plattformen und Zulieferer miteinander verknüpft sind. Für Vorstände und CIOs folgt daraus ein klarer Auftrag: Sicherheitsverantwortung in der Unternehmensführung verankern, Abhängigkeiten sichtbar machen und Wiederherstellungsfähigkeit konsequent testen. Management Summary Cyberrisiken sind Geschäftsrisiken: Identitäten,……
-
Die nächste Stufe der Cyberbedrohung: KI-Agenten greifen zunehmend autonom an
KI-Agenten beschleunigen Angriff und Verteidigung entscheidend sind kontrollierte Identitäten, begrenzte Rechte und nachvollziehbare Entscheidungen. KI verändert die Kräfteverhältnisse in der Cybersicherheit: Angriffe werden schneller, skalierbarer und zunehmend autonom. Der Microsoft Digital Defense Report 2026 beschreibt eine Lage, in der Identitäten, KI-Systeme und Lieferketten zugleich zur Angriffsfläche werden. Für Unternehmen folgt daraus eine Managementaufgabe:… First seen…
-
CISA Sends Final CIRCIA Rule to White House for Review
Final Rule Goes to OMB as Defense Contractors Face Second Reporting Regime. The U.S. Cybersecurity and Infrastructure Security Agency sent its final cyber incident reporting rule to the White House for review Thursday after missing a September target, as analysts question whether existing Pentagon reporting will satisfy the new requirements. First seen on govinfosecurity.com Jump…
-
RemoteThreat Bets Security Teams Need to Test What Happens After Defenses Fail
The offensive cyber operations startup looks to evolve red teaming beyond traditional methods to simulate attackers’ increasingly advanced capabilities. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/remotethreat-bets-security-teams-need-to-test-what-happens-after-defenses-fail
-
AI is giving attackers a head start, Microsoft warns
Threat actors are using AI to find bugs, build malware and run intrusions faster than defenders can keep up. Microsoft’s 2026 Digital Defense Report, covering July 2025 … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/02/ai-cybersecurity-threats-microsoft-report/
-
Inside Gemini 4 Argon, the model Google is testing on its own infrastructure first
Google unveils Gemini 4 Argon, a frontier AI model built for coding, enterprise work, and autonomous cybersecurity defense, rolling out to trusted testers. Google announced Gemini 4 Argon, and it’s not going straight to the public. It’s rolling out first to a set of trusted cyber defenders through what Google calls the Fairwind Program, which…
-
Pentagon breach exposes personal data of more than 3 million people
The Pentagon’s Defense Manpower Data Center (DMDC) is notifying millions of people that hackers gained access to their personal data. The breach affects 2.76 million living … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/01/pentagon-dmdc-data-breach-3-million-people/
-
China-Nexus Hackers Compromise 350 Systems Across Asia With New Antino Backdoor
A China-nexus cyber-espionage campaign that compromised approximately 350 endpoints across Asia using a previously undocumented Rust-based Windows backdoor called Antino. The activity cluster, tracked as UAT-11587, targeted government, defense, diplomatic, policy, academic and civil-society organizations in at least eight countries between September 2025 and July 2026. Talos identified 10 confirmed and five probable affected institutional…
-
China-Nexus Hackers Compromise 350 Systems Across Asia With New Antino Backdoor
A China-nexus cyber-espionage campaign that compromised approximately 350 endpoints across Asia using a previously undocumented Rust-based Windows backdoor called Antino. The activity cluster, tracked as UAT-11587, targeted government, defense, diplomatic, policy, academic and civil-society organizations in at least eight countries between September 2025 and July 2026. Talos identified 10 confirmed and five probable affected institutional…
-
China-Nexus Hackers Compromise 350 Systems Across Asia With New Antino Backdoor
A China-nexus cyber-espionage campaign that compromised approximately 350 endpoints across Asia using a previously undocumented Rust-based Windows backdoor called Antino. The activity cluster, tracked as UAT-11587, targeted government, defense, diplomatic, policy, academic and civil-society organizations in at least eight countries between September 2025 and July 2026. Talos identified 10 confirmed and five probable affected institutional…
-
Hackers stole Pentagon personnel records of over 3 million people
The Pentagon’s Defense Manpower Data Center (DMDC) is notifying millions of military service members that hackers stole their data after breaching the Pentagon’s human resources management system in October 2025. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-breach-pentagon-human-resources-management-system-steal-data-of-nearly-3-million-people/
-
Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version
Google on Wednesday announced its latest frontier artificial intelligence (AI) model, Gemini 4 Argon, that it said is being rolled out to a set of trusted cyber defenders through its Fairwind Program.”It delivers frontier performance in complex workflows across real-world software engineering, enterprise knowledge work like legal and finance, and cybersecurity defense,” Koray Kavukcuoglu, First…
-
Hackers Hide Microsoft Defender Exclusions From Admins to Evade Antivirus Scans
Threat actors are increasingly abusing Microsoft Defender Antivirus exclusions to keep malicious files outside the reach of endpoint scans, and a little-known policy setting can conceal those exclusions from administrators using normal management tools. Huntress researchers found that attackers can combine broad Defender exclusions with the HideExclusionsFromLocalAdmins setting, creating a stealthy defense-evasion path that leaves…
-
Hackers stole millions of US military personnel records during months-long data breach
The Department of Defense notified millions of current and former U.S. military personnel that their personal information had been stolen in a months-long breach. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/30/hackers-stole-millions-of-us-military-personnel-records-during-months-long-data-breach/
-
Protego Ventures closes debut $125M fund for Israeli defense tech
Tags: defenseProtego Ventures, the first and largest dedicated defense tech VC in Israel, just completed its final $125 million closing, TechCrunch learned exclusively. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/29/protego-ventures-closes-debut-125-million-fund-for-israeli-defense-tech/
-
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
A group of academics from VUSec and Scuola Superiore Sant’Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time (JIT) engines present in web browsers, language runtimes, and the operating system kernel, across multiple CPU vendors.The new Spectre-v2 variant has been codenamed Branch Target Reuse (BTR).”The key insight is that, while…
-
Deepfakes become a board priority once an executive falls for one
Nearly three-quarters of security leaders have encountered or suspect a deepfake attack in the past year, while just 10% say their organizations have purpose-built defenses, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/29/pindrop-enterprise-deepfake-attacks-report/
-
Deepfakes become a board priority once an executive falls for one
Nearly three-quarters of security leaders have encountered or suspect a deepfake attack in the past year, while just 10% say their organizations have purpose-built defenses, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/29/pindrop-enterprise-deepfake-attacks-report/
-
Protego Ventures closes debut $125 million fund for Israeli defense tech
Tags: defenseProtego Ventures, the first and largest dedicated defense tech VC in Israel, just completed its final $125 million closing, TechCrunch learned exclusively. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/29/protego-ventures-closes-debut-125-million-fund-for-israeli-defense-tech/
-
Pentagon Data Breach Exposes Sensitive Data of Over 3 Million People
The Pentagon has confirmed a major data breach involving the Defense Manpower Data Center (DMDC) information system, exposing sensitive personal information linked to more than three million individuals. The breach affects 2.76 million living people and approximately 294,000 deceased individuals. The scale of this exposure has intensified scrutiny on the DMDC, one of the Department…
-
New Windows Process Injection Technique Bypasses EDR Monitoring Without WriteProcessMemory
A newly disclosed method for Windows process injection utilizes redirected console input and named pipes to transfer payload data into a child process without invoking the heavily monitored APIs VirtualAllocEx and WriteProcessMemory. This technique, called console named-pipe injection, highlights the need for endpoint defenses to correlate events across processes, memory protection, thread context, and interprocess…
-
US Appeals Court Backs Pentagon Blacklisting of Anthropic
D.C. Circuit says Claude’s built-in restrictions can qualify as a supply chain risk. A federal three judge panel gave the U.S. Department of Defense the go-ahead to continue blacklisting Anthropic, a setback in the artificial intelligence giant’s bid to take on the Trump administration in court. The ruling may dissuade companies from working with Anthropic.…
-
US Appeals Court Backs Pentagon Blacklisting of Anthropic
D.C. Circuit says Claude’s built-in restrictions can qualify as a supply chain risk. A federal three judge panel gave the U.S. Department of Defense the go-ahead to continue blacklisting Anthropic, a setback in the artificial intelligence giant’s bid to take on the Trump administration in court. The ruling may dissuade companies from working with Anthropic.…
-
Stop Waiting for Someone Else to Make AI Safe
Forget AI Doomsday. Defend Against the Agent Already Jimmying the Locks AI labs warn their creations could someday threaten humanity while governments race to keep their nations competitive. Security teams have a less cinematic problem: Autonomous agents can already probe defenses, exploit weaknesses and wield credentials. Time for Cybersecurity 101. First seen on govinfosecurity.com Jump…
-
Stop Waiting for Someone Else to Make AI Safe
Forget AI Doomsday. Defend Against the Agent Already Jimmying the Locks AI labs warn their creations could someday threaten humanity while governments race to keep their nations competitive. Security teams have a less cinematic problem: Autonomous agents can already probe defenses, exploit weaknesses and wield credentials. Time for Cybersecurity 101. First seen on govinfosecurity.com Jump…
-
Businesses expand AI’s cybersecurity uses as comfort with technology grows
Companies in the experimentation stage were less likely than established users to deploy advanced AI-powered defenses, a new survey found. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-cybersecurity-maturity-agents-kpmg/831385/