Tag: risk
-
The UK Will Scan Asylum-Seekers’ Faces for Age Checks”, Despite Knowing the Tech Is Flawed
Internal Home Office tests of age-verification technology show the risks of life-altering errors. It’s moving forward anyway. First seen on wired.com Jump to article: www.wired.com/story/facial-age-estimate-uk-asylum-seekers/
-
The safe VMS choice may be the one creating more risk
Tags: riskFirst seen on scworld.com Jump to article: www.scworld.com/perspective/the-safe-vms-choice-may-be-the-one-creating-more-risk
-
Agentjacking: Researchers Show How One Fake Bug Report Can Hijack AI Coding Agents
Tenet researchers reveal how fake Sentry bug reports can trick AI coding agents into running code, exposing a new Agentjacking risk for developers today. First seen on hackread.com Jump to article: hackread.com/agentjacking-fake-bug-report-hijack-ai-coding-agents/
-
Cyberspace Locked in a Nation-State Contest, Says NCSC CEO
Richard Horne Seeks to Reframe Discussion of Cyber Exposure. Britain’s top cybersecurity official sought Wednesday to reframe digital defense as a contest against a constantly shifting opponent rather than a risk to be managed, calling today’s spate of breaches and hacking incidents the opening salvos of a future war. First seen on govinfosecurity.com Jump to…
-
FortiBleed Attack Exposes Fortinet Firewall Credentials in 194 Countries
Researchers say FortiBleed used stolen and tested credentials to access exposed Fortinet firewalls, putting major organizations and public agencies at risk now. First seen on hackread.com Jump to article: hackread.com/fortibleed-attack-fortinet-firewalls-credentials/
-
What CISA’s new remediation directive means for CISOs
CISA’s updated directive for federal agencies compresses mandatory patching timelines to just three days for high-risk flaws, urging practitioners to ‘patch smarter, not harder.’ First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366644336/What-CISAs-new-remediation-directive-means-for-CISOs
-
Zur Hauptferienzeit steigt das Risiko erfolgreicher Cyberangriffe
Tourismus und Gastgewerbe besonders attraktiv: Sophos macht auf ein erhöhtes Risiko erfolgreicher Cyberangriffe in den Sommermonaten aufmerksam. Cyberkriminelle sind zwar das ganze Jahr über aktiv, doch gerade die Urlaubssaison schafft häufig günstige Bedingungen für ihre Angriffe: Sicherheitsteams arbeiten mit reduzierter Besetzung, Vertretungsregelungen greifen, Mitarbeitende arbeiten mobil oder außerhalb der gewohnten Unternehmensumgebung. Dadurch entstehen zusätzliche Chancen…
-
Heimdal Survey: Executives Four Times More Confident About AI Risk Than the Teams Managing It
London, United Kingdom, June 17th, 2026, CyberNewswire New research from cybersecurity company Heimdal finds 29% of US executives say AI risk is under control, against 7% of the practitioners running it day-to-day. Across 1,000 IT professionals in the UK and US, AI adoption has outpaced security controls by roughly two to one. Heimdal today published…
-
Heimdal Survey: Executives Four Times More Confident About AI Risk Than the Teams Managing It
London, United Kingdom, 17th June 2026, CyberNewswire First seen on hackread.com Jump to article: hackread.com/heimdal-survey-executives-four-times-more-confident-about-ai-risk-than-the-teams-managing-it/
-
Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization
Tags: riskFor security teams, the findings never stop, but confidence in knowing which ones matter is becoming harder to maintain.The problem is no longer visibility. It’s validation. Security teams must decide which findings warrant action while operating under constant pressure and incomplete information. Increasingly, the challenge is not discovering potential risks. It is determining which risks…
-
2026 World Cup billed as ‘largest entertainment attack surface in history’
With the tournament underway across North America, Palo Alto Networks warns that temporary supplier ecosystems, vulnerable municipal infrastructure and geopolitical tensions are creating risks for enterprises and fans First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366644594/2026-World-Cup-billed-as-largest-entertainment-attack-surface-in-history
-
Microsoft AntiSSRF open-source library helps block server-side request forgery
AntiSSRF is an open-source code library from Microsoft that validates URLs and network connections to reduce server-side request forgery (SSRF) risks in web applications. It … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/17/microsoft-antissrf-open-source-library/
-
AI amplifies cyber risk in professional sports, Darktrace report finds
First seen on scworld.com Jump to article: www.scworld.com/brief/ai-amplifies-cyber-risk-in-professional-sports-darktrace-report-finds
-
AI amplifies cyber risk in professional sports, Darktrace report finds
First seen on scworld.com Jump to article: www.scworld.com/brief/ai-amplifies-cyber-risk-in-professional-sports-darktrace-report-finds
-
The Invisible Majority: Why Board Risk Reporting Misses Machine Identity Exposure
First seen on scworld.com Jump to article: www.scworld.com/analysis/the-invisible-majority-why-board-risk-reporting-misses-machine-identity-exposure
-
Restore Fable and Mythos Access, Cybersecurity Leaders Urge
Experts Say White House Export Ban Risks Adoption Boost for China’s AI Alternatives. New export controls on artificial intelligence startup Anthropic’s Fable 5 and Mythos large language models, over their vulnerability-discovery capabilities, must be lifted, not least because Chinese models will soon offer equal capabilities, cybersecurity experts warned the Trump administration. First seen on govinfosecurity.com…
-
HTTP/2 Bomb Attacks Put Telcos, Healthcare Orgs at Risk
The denial-of-service (DoS) exploit takes advantage of two features in HTTP/2 that were designed to save Internet bandwith, not power massive amplification attacks. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/http-2-bomb-attacks-telcos-healthcare
-
Infinite Campus Incident Exposes Data From 137,000 School Staff Accounts
A breach at Infinite Campus exposed data from 137,000 school staff accounts, highlighting SaaS security risks in education. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/infinite-campus-incident-exposes-data-from-137000-school-staff-accounts/
-
Cyber Resilience Summit Dallas Prioritizes Risk Management
CISOs Discussed Governance, Security Operations and Cyber Risk. From boardroom persuasion to AI-powered SOCs, ISMG’s Cyber Resilience Summit Dallas gave senior security and risk leaders a playbook for the age of inevitable disruption, with sessions spanning zero trust, human risk reduction, threat preemption and governance as a foundation of resilience. First seen on govinfosecurity.com Jump…
-
Schatten-KI wird zum messbaren Risiko
Zwei Drittel der Büromitarbeitenden nutzen nicht autorisierte KI-Tools am Arbeitsplatz. 75 % der Büroangestellten würden für bessere KI-Weiterbildungsmöglichkeiten einen Arbeitsplatzwechsel in Betracht ziehen; in Unternehmen mit über 1 Mrd. US-Dollar Umsatz sind es 80 %. PagerDuty hat eine internationale Umfrage veröffentlicht, die eine wachsende Diskrepanz zwischen der KI-Nutzung durch Mitarbeitende und der unternehmensinternen Governance… First…
-
Amnesty calls for ban on AI risk-profiling systems
Amnesty International says AI-driven risk profiling systems are discriminatory and may lead to misleading results that violate international human rights law First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366644494/Amnesty-calls-for-ban-on-AI-risk-profiling-systems
-
SailPoint to acquire Entro as AI agent identity risks grow
First seen on scworld.com Jump to article: www.scworld.com/brief/sailpoint-to-acquire-entro-as-ai-agent-identity-risks-grow
-
Geopolitics Is Now a Cybersecurity Problem
UCL’s Melanie Garson on Anti-Fragility, Supply Chain Risk and AI Adoption. Geopolitical exposure has quietly moved to the front of the security agenda, and most organizations are only now realizing how little they understand about where their risks originate, says Melanie Garson, associate professor of international security at UCL. First seen on govinfosecurity.com Jump to…
-
Adriatic Port Cyber-Attack by Anubis Sparks Warning Over Maritime Security Risks
How the Anubis ransomware group stole and leaked an Italian Adriatic port authority’s data First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/anubis-ransomware-adriatic-port/
-
Adriatic Port Cyber-Attack by Anubis Sparks Warning Over Maritime Security Risks
How the Anubis ransomware group stole and leaked an Italian Adriatic port authority’s data First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/anubis-ransomware-adriatic-port/
-
Schluss mit Patches im menschlichen Tempo PeerPeer-Verteilung schließt die Sicherheitslücke, bevor Angreifer zuschlagen
Die Lücke bei der Behebung wird größer. Die Analyse von mehr als einer Milliarde CISA-Datensätzen zu ‘Known Exploited Vulnerabilities” (KEV) offenbart eine ernüchternde Realität für Sicherheitsverantwortliche: Unternehmen schließen deutlich mehr Tickets als noch vor wenigen Jahren, doch die Lücke zwischen der Identifizierung von Risiken und deren Beseitigung wird immer größer. 88 Prozent der ausgenutzten Schwachstellen…
-
Angriffsziel Rechenzentrum Schwachstellen in Equipment bergen hohes Risiko
Die Sicherheitsforscher von Team82, der Forschungsabteilung des Spezialisten für die Sicherheit von cyberphysischen Systemen (CPS) Claroty, haben Schwachstellen in zwei verschiedenen Gerätetypen entdeckt, die vor allem in Rechenzentren zum Einsatz kommen: unterbrechungsfreie Stromversorgungen (USV) und Steuerungen für Heizung, Lüftung und Klimatisierung (HLK). Cyberkriminelle und staatlich unterstützte Angreifer können diese Sicherheitslücken ausnutzen und kostspielige Ausfallzeiten verursachen.…
-
1Password Buys Apono to Expand AI Access Governance
Buying New York Startup Adds Just-in-Time Authorization and Governance Controls. 1Password acquired access governance startup Apono to combine credential security, just-in-time authorization and intent-based access controls into a unified platform designed to govern humans, machines and AI agents while reducing risks tied to static permissions. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/1password-buys-apono-to-expand-ai-access-governance-a-31963
-
Jenkins RCE Flaw Exploited by Attackers in the Wild
A remote code execution (RCE) vulnerability in Jenkins, tracked as CVE-2026-53435, is now actively exploited in the wild. The flaw, stemming from insecure deserialization during Jenkins’ config.xml processing, allows unauthenticated or low-privileged attackers to execute arbitrary code on vulnerable instances, posing a severe risk to organizations that rely on the popular CI/CD automation server. Jenkins RCE Flaw…
-
Jenkins RCE Flaw Exploited by Attackers in the Wild
A remote code execution (RCE) vulnerability in Jenkins, tracked as CVE-2026-53435, is now actively exploited in the wild. The flaw, stemming from insecure deserialization during Jenkins’ config.xml processing, allows unauthenticated or low-privileged attackers to execute arbitrary code on vulnerable instances, posing a severe risk to organizations that rely on the popular CI/CD automation server. Jenkins RCE Flaw…