Several cybersecurity companies saw exploitation attempts of CVE-2026-109618 and CVE-2026-109619 before PHP released the patches. The post PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors appeared first on SecurityWeek. https://www.securityweek.com/php2shell-patches-land-as-first-exploitation-attempts-hi..
Categoria : Security
Security magazine tackles the issue of CISO burnout alongside Chris Bevil, global cyber resilience and AI leader at Commvault. https://www.securitymagazine.com/articles/102660-ciso-burnout-isnt-a-personal-problem-its-orga..
Deceptive prompts lure AI agents into decoys and dead ends, cutting attack success by up to 91% in tests and raising the cost of a successful attack 23-fold. The post ‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets appeared first on SecurityWeek. https://www.securityweek.com/context-bombs-cut-ai-attack-success-by-misleading-agents-with-fak..
Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents. The post High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7 appeared first on SecurityWeek. https://www.securityweek.com/high-severity-flaws-exploited-in-three-days-as-ransomware-dominates-..
Asymptote Labs raises $5.5M seed led by Tower Research Ventures to commercialize its Beacon AI agent runtime security platform. The post Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security appeared first on SecurityWeek. https://www.securityweek.com/asymptote-labs-lands-5-5-million-seed-for-ai-agent-runtime..
The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities. The post Memory Bugs Account for Most of Chrome’s 353 New Security Fixes appeared first on SecurityWeek. https://www.securityweek.com/memory-bugs-account-for-most-of-chromes-353-new-secur..
In two internal incidents, agents read routine coding instructions as permission to weaken monitoring, and one gave a false answer about it. The post OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor appeared first on SecurityWeek. https://www.securityweek.com/openai-agents-silenced-security-team-alerts-removed-misalignmen..
The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them. The post Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys appeared first on SecurityWeek. https://www.securityweek.com/browsers-block-emudhra-intermediate-cas-over-recoverable-pri..
The DHS said agencies should remove DeepSeek products as well as third-party products and services developed using DeepSeek from their IT systems. The post China Defends DeepSeek After US Ban of Its AI From Government Systems appeared first on SecurityWeek. https://www.securityweek.com/china-defends-deepseek-after-us-ban-of-its-ai-from-governmen..
Tasked with writing an application for a US defense contractor, the model made the code 19% more likely to be hackable. The post Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor appeared first on SecurityWeek. https://www.securityweek.com/chinese-ai-model-writes-more-hackable-code-when-told-its-for-us-c..
