How threat actors are really using AI
From Russian GRU operations to Chinese espionage campaigns, AI is transforming cyber warfare. But that change is a bit more nuanced
Analysis - Vulnerabilities
In-depth analysis of networking, cloud, and AI infrastructure trends
-
How generative AI is powering up the cloud for 80% of enterprises
Generative artificial intelligence is no longer a far-off concept but a present-day reality
-
How SASE remediates remote work access issues
Remote work is never going to go completely away
-
Juniper patches China-linked Junos OS breach
Google's Mandiant Incident Response Team found the breach last year
-
Why AWS, Azure, and GCP cloud-native firewalls 'suck'
CyberRatings' assessment focused on Amazon Web Services, Microsoft Azure, and Google Cloud Platform, and the results were strikingly poor. -
DevSecOps: Building security into each stage of development
Too often, security checks happen at the final stages of development – but it’s time for cybersecurity to shift left and flag vulnerabilities earlier. -
OT attacks surge: How to choose the right security vendors
Forrester identified Palo Alto Networks and Cisco as leaders in its latest operational technology security solutions report. -
Verizon Business CIO toasts network cybersecurity advantage
“We're selling security, and we have to ... drink our own champagne and prove that we're also having the best security posture internally," Wael Faheem said. -
Akamai doubles down on API security with Noname acquisition
Akamai plans to build a unified API security platform based on the Noname platform.
-
Is time (and third-party support) the key to surviving a VMware decision?
If so, Rimini Street might have an option.
-
FCC takes aim at Border Gateway Protocol security flaws with new proposal
BGP, the core routing protocol that enables the internet to function, it has inherent security vulnerabilities that can be exploited by bad actors to hijack routes, intercept traffic or -
Palo Alto Networks: AI-generated code leads to top 7 cloud security concerns
The report findings also underscored the tension between the need for rapid development and the imperative of maintaining security. -
Corporate hackers hire more help, target business supply chains
Cybercriminals "can afford to pay more people now. They have more sophisticated tools at hand," said Fortinet's Derek Manky. -
Verizon DBIR paints a bleak picture of data breach landscape
The report also showed the median loss associated with ransomware and extortion almost doubled. -
'Digital-first' CISOs must reach far beyond cybersecurity -- so what's stopping them?
More is expected of the modern CISO than keeping up with security threats and ensuring patches are made. It’s all about people and communications. -
Microsoft's cybersecurity culture 'inadequate,' Department of Homeland Security reports
In a scathing report, Microsoft was cited for a series of avoidable errors, failure to detect compromises and slow corrections to inaccurate public statements. -
How AI improves development processes for software engineers
By leveraging artificial intelligence, developers can focus more on creativity and strategy while ensuring a higher standard of quality and reliability. -
Google reports jump in zero-day exploits aimed at enterprises, offers 6 tips to stay safe
Google observed 97 zero-day vulnerabilities exploited in the wild in 2023, a 56% increase year over year. -
Cisco completes $28B Splunk deal, aims at AI and observability opportunities
Cisco plans to incorporate its Talos threat intelligence into Splunk and unify the two vendors' artificial intelligence assistants for security capabilities
-
Salt Security uncovers critical security flaws in ChatGPT plugins
The vendor found three distinct types of vulnerabilities in ChatGPT plugins that could allow access to users’ third-party accounts and sensitive data. -
Why it’s time to add some GUAC to open-source supply chain security
The graph for understanding artifact composition (GUAC) is celebrating a milestone today, joining the Linux Foundation's Open Source Security Foundation as an incubating project. -
Intel claims product security lead, takes shot at AMD on vulnerabilities
Intel claims AMD reported three times more platform firmware vulnerabilities last year. -
Dragos warns of rising ransomware, inaccurate vulnerability advisories
The vendor tracked 905 reported ransomware incidents impacting industrial organizations last year, a nearly 50% surge from 2022. -
Microsoft and OpenAI reveal how hackers use genAI, LLMs for cyberattacks
The two companies claim they have detected and disrupted attempts by five nation-state threat actors to use OpenAI services to enhance their attacks. -
What should be in your software bill of materials (SBOM)? Experts break down NSA guidance
The NSA warns that software developers must make their products “secure by design and by default," rather than treat each product as if it carries an implicit caveat emptor.