Tag: usa
-
Black Hat USA 2026: One GitHub Issue Could Compromise Major AI Coding Workflows
At Black Hat USA 2026, Novee found GitHub workflow flaws in Claude Code, Gemini CLI and Codex that enabled RCE, credential theft and agent control in pipelines. First seen on hackread.com Jump to article: hackread.com/black-hat-usa-2026-github-compromise-ai-coding/
-
Photos: Black Hat USA 2026 Arsenal
Tags: usaThis week Help Net Security is at the Mandalay Bay, where Arsenal is running alongside the Briefings. If you’ve never been, it’s the corner of Black Hat that feels … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/06/black-hat-usa-2026-arsenal-photos/
-
VanishID Previews AI Exploitability Management at Black Hat USA 2026
VanishID has unveiled AI Exploitability Management, a capability designed to measure what frontier AI could build from publicly exposed information about an organization’s people. The company is demonstrating the capability publicly for the first time at Black Hat USA 2026. VanishID said the system evaluates more than 40 AI-powered attack scenarios, including executive impersonation, real-time..…
-
Novee Brings Continuous AI Pentesting to Mobile Applications
Novee has expanded its AI penetration testing platform to mobile applications, extending continuous testing across mobile, web, APIs, desktop software and AI-enabled applications. The company announced the update ahead of Black Hat USA 2026. Novee said users can upload a mobile application package and receive results within hours, alongside findings from their other application assets……
-
Phoenix Security Launches Exploit Hunt to Validate Vulnerabilities With AI-Generated Exploits
Phoenix Security has launched Exploit Hunt, an AI red-team capability that works from a live threat model and reports a vulnerability only after generating and validating a runnable proof-of-concept exploit. Announced Aug. 5 and timed to Black Hat USA 2026, Exploit Hunt is available now in Phoenix Purple. It can run continuously, on every pull..…
-
Intel 471 Adds MCP Connector and Native AI Analyst to Verity471
Intel 471 has added two AI capabilities to its Verity471 cyber intelligence platform: MCP471, a connector for Model Context Protocol workflows, and Agent471, a native AI analyst. The capabilities are being demonstrated at Black Hat USA 2026 from Aug. 4 to 6. Intel 471 said the additions are designed to bring pre-attack intelligence and threat-hunting..…
-
Stairwell Launches Backstory to Map Malware Blast Radius Beyond the First Alert
Stairwell has launched Backstory, an agentic investigation platform designed to trace related malware variants, identify affected systems and map an incident’s full blast radius. The platform was announced July 29 as Stairwell prepared to showcase it at Black Hat USA 2026. Backstory is built to answer what happened, where an incident spread and what needs..…
-
XM Cyber Releases Open-Source Tools for Hunting macOS and Oracle Cloud Exposures
XM Cyber has announced new open-source exposure-hunting tools for macOS endpoints and Oracle Cloud Infrastructure. The release, issued from Black Hat USA and DEF CON, says the tools are intended to help security teams uncover and validate complex attack paths. The macOS tool examines weaknesses that can allow an attacker to move from an initial..…
-
Cycode Opens Early Access to Agentic Workflows for Application Security
Cycode is making Agentic Workflows available in early access, giving AI agents the ability to detect, prioritize and fix application-development risks as they appear. The company is demonstrating the capability at Black Hat USA 2026 in Las Vegas. Agentic Workflows operate across the application development lifecycle. Security teams define the triggers, actions and confidence thresholds,..…
-
Miggo Adds DefenseDepth Mitigation to Close Patch Gaps in Minutes
Miggo Security has announced Defense-in-Depth Mitigation, a capability that coordinates protections at the network edge and inside an application while a permanent patch is being prepared. The release was issued from Black Hat USA and says Miggo is presenting the capability in Las Vegas during the event. The approach gives security teams multiple mitigation points..…
-
Realm Security Debuts Detection Integrity and Unmetered Data Haven Search
Realm Security is introducing two capabilities ahead of Black Hat USA 2026: Detection Integrity and search inside its Data Haven retention layer. The company said the tools are intended to help security teams reduce SIEM data volume without losing visibility into the detections that depend on that data. Detection Integrity reads the detections running in..…
-
Command Zero Adds Living Investigations to Its Security Operations Platform
Tags: usaCommand Zero is adding Throughline, a “living investigation” capability that connects related alerts into one evolving case and revisits its verdict as new evidence arrives. The company previewed the capability ahead of Black Hat USA 2026. When a new alert matches an existing case, Throughline joins it to the investigation, reopens the case if necessary,..…
-
Cobalt Launches Autonomous Pentest for Continuous Application Testing
Cobalt is launching Cobalt Autonomous Pentest, a service designed to bring continuous offensive security testing to an organization’s full application portfolio. The product debuts at Black Hat USA 2026 and is scheduled for general availability in August. The offering combines AI-driven testing with direction from Cobalt penetration testers. Its model-agnostic engine handles chain prediction, prioritization..…
-
BlackCloak Expands Impersonation Protection to Executives’ Trusted Circles
BlackCloak is expanding its Impersonation Protection service with a “circle of trust” feature designed to help executives verify communications from the people closest to them. The company announced the capability ahead of Black Hat USA 2026 in Las Vegas. Impersonation Protection lets members authenticate phone calls, video meetings, emails, WhatsApp and Slack messages, texts, and..…
-
7AI Launches Federated SIEM and Build Tools Ahead of Black Hat USA 2026
7AI has launched 7AI Federated SIEM and 7AI Build, two capabilities designed to give security teams a distributed foundation for AI-assisted operations. The company said both will be showcased at Black Hat USA 2026. 7AI Federated SIEM connects to security data across existing SIEMs, data lakes and cloud platforms. It lets teams query, investigate and..…
-
Salt Security Launches Industry-First AWS WAF Managed Ruleset for AI Agents and API Protection
Salt Security has unveiled what it says is the industry’s first AWS WAF managed ruleset designed specifically to protect both APIs and AI agents, extending native AWS Web Application Firewall (WAF) capabilities to address emerging threats driven by agentic AI. Announced at Black Hat USA 2026, the new Salt Managed Rules for AWS WAF are…
-
Commvault Adds Google Threat Intelligence to Threat Scan Recovery Workflows
Commvault is adding Google Threat Intelligence data and scanning capabilities to Threat Scan workflows, a move aimed at helping organizations identify compromised recovery points and choose clean data after a cyberattack. Announced during Black Hat USA 2026, the integration combines Commvault Threat Scan with intelligence from Google’s Mandiant, VirusTotal and Google threat teams. Customers will..…
-
Menlo Security Extends MARS to Protect AI Assistants and Coding Agents
Menlo Security has expanded Menlo Agent Runtime Security, or MARS, with controls aimed at protecting AI assistants and coding agents from prompt injection, malware and data loss as they browse the web, use applications and process files. The company is highlighting the update at Black Hat USA 2026. MARS is a cloud-based capability in Menlo’s..…
-
Elastic Expands Attack Discovery to Push Security Teams Toward ‘Alert Zero’
Elastic (NYSE: ESTC) announced major advances to its agentic security operations platform ahead of Black Hat USA 2026, centered on getting security teams closer to what the company calls >>Alert Zero,<< the point where an alert queue has been worked down to the attacks that actually matter. The centerpiece is an expanded version of Attack..…
-
Optiv Debuts Agentic Security Operations, Overhauling Its Managed Detection Service
Optiv unveiled Optiv Agentic Security Operations on Wednesday at Black Hat USA 2026, a major expansion of its managed security services and a substantial overhaul of the offering formerly known as Optiv MDR. The new service combines Google Security Operations technology, already central to the prior offering, with deeply integrated cloud and AI security capabilities..…
-
From Inspection to Authorization: Securing Networks for AI Agents
Tags: access, ai, api, business, ceo, cloud, communications, control, crowdstrike, cryptography, data, encryption, endpoint, finance, firewall, identity, infrastructure, login, network, office, risk, saas, service, usa, vpn<div cla An Industry Perspective By Rajiv Pimplaskar, CEO, Dispersive Holdings, Inc. Agentic AI changes the network security problem from inspection to authorization. As more traffic is generated by agents, models, and workloads operating at machine speed, the network has to make trust decisions continuously, evaluate policy in real time, revoke access automatically, and keep…
-
Top product launches at Black Hat USA 2026
Tags: usaBlack Hat USA 2026 is underway in Las Vegas, and vendors are using the moment to unveil what they hope will define the next year of defense. Here are the announcements drawing … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/05/black-hat-usa-2026-product-launches/
-
Menlo Security Extends Platform Reach to AI Agents
Menlo Security today at the Black Hat USA conference extended its cloud platform to secure artificial intelligence (AI) agents at runtime by sanitizing the web pages and files they read to neutralize prompt injection attacks and block data exfiltration. Company CEO Bill Robbins said the Menlo Agent Runtime Security (MARS) platform created to isolate browsers..…
-
BigID Adds Agentic Access Controls and Intent Monitoring for AI Agents
BigID has introduced two capabilities aimed at governing what AI agents can access and checking whether their actions match the tasks they were assigned. Announced Aug. 4 in a release tied to Black Hat USA 2026, Agentic Access Control and Intent-Based Activity Monitoring are designed to address the gap between an agent’s permissions and its..…
-
15 TP-Link Omada Flaws Exploit Zero-Touch Provisioning to Hijack Devices and Infiltrate Networks
Security researchers have disclosed 15 vulnerabilities in TP-Link’s Omada zero-touch provisioning (ZTP) ecosystem, which can be exploited to hijack devices, compromise controllers, expose credentials, and create access points into internal networks. The research, titled >>Zero Day Provisioning,<< was presented at Black Hat USA 2026 and focuses on weaknesses in the trust relationships that enable Omada…
-
Bank of America impersonators weaponize ScreenConnect, then make it hard to remove
A phishing campaign impersonating Bank of America (BoA) is underway, trying to trick Windows users into installing ScreenConnect remote access software and then making it … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/05/fake-bank-of-america-email-account-guard/
-
Fake Bank of America Phishing Scam Installs Remote Access Malware
Cybercriminals are using a fake Bank of America phishing campaign to trick users into downloading a malicious script that installs ScreenConnect, enabling remote access and persistence on compromised systems First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/fake-bank-of-america-phishing-scam/
-
Snyk Brings Evo Continuous Offensive Security to General Availability at Black Hat
Snyk brought Evo Continuous Offensive Security to general availability at Black Hat USA 2026, adding an autonomous, AI-powered penetration testing capability that runs continuously rather than on a once- or twice-a-year schedule. The company said Evo COS is designed to find architectural flaws and business-logic vulnerabilities that traditional scanners can miss. It uses application context..…
-
Fake Bank of America Phishing Emails Found Delivering Disguised ScreenConnect RAT via UAC Bypass
Researchers at Huntress have identified an active phishing campaign impersonating Bank of America that culminates in the covert installation of a remote monitoring and management (RMM) tool, giving attackers persistent, hard-to-detect access to victims’ Windows machines. The campaign was flagged after a message landed in one of Huntress’s spamtrap accounts on 28 July, sent from…