Cybersecurity firm CrowdStrike has identified a worm actively targeting AI toolchains to steal credentials, exfiltrate data, and destroy files, exploiting blind spots where malicious activity mimics l…
Venture capital firm a16z led the Seed round for Neo, a cybersecurity startup building agentic software control for endpoints where AI agents now operate alongside humans. Neo's founders, including fo…
AttackIQ co-founder and MITRE Center for Threat-Informed Defense co-founder Jon Baker introduced the Threat-INFORM maturity model at the FIRST Conference in Denver, arguing that security programs must…
Microsoft released over 630 patches in July 2025's Patch Tuesday, up from 137 a year ago, driven by security LLMs that help find vulnerabilities but also enable attackers to exploit them faster, promp…
Sophos launched Sophos Fusion, an AI-native defense system designed to counter AI-powered cyber attacks, integrating the recently acquired Secureworks for $859 million. The platform, rolling out from …
CrowdStrike president Mike Sentonas warns that AI systems capable of rapidly finding software bugs could unleash an exponential growth in zero-day vulnerabilities, overwhelming organizations that alre…
NVIDIA released OpenShell, an open-source (Apache 2.0) secure runtime for AI agents that enforces controls at the environment layer rather than the model or application layer, preventing agents from o…
IBM plunged 25% on Tuesday, its worst day since at least 1968, after reporting preliminary second-quarter revenue of $17.2 billion, roughly $660 million short of the $17.9 billion consensus, and adjus…
The UK government has warned that increasingly sophisticated artificial intelligence could help criminals and hostile actors launch cyber-attacks against essential infrastructure, including water supp…
IBM warned investors that corporate tech budgets are being reallocated toward AI infrastructure and cybersecurity, squeezing legacy hardware like IBM's mainframes and causing a 25% drop in IBM shares.…
IBM warned investors that customers are shifting technology budgets toward AI infrastructure and cybersecurity, hurting sales of its new Z mainframes and related software. The company said clients spe…
A McKinsey report found a 138% surge in phishing sites after ChatGPT's debut, as hackers use large language models to launch sophisticated attacks that threaten to erode AI-driven corporate profit gai…
CrowdStrike identified five new prompt injection techniques that exploit AI systems, including Trigger-Activated Rule Addition and Cognitive Token Suppression, posing risks to enterprises. The securit…
CrowdStrike identified five new prompt injection techniques that exploit AI systems by tricking large language models into accepting malicious instructions. The attacks include trigger-activated rule …
Palo Alto Networks, CrowdStrike, and Cisco are investing billions to solve AI credential sharing, a problem that 69% of enterprises say is slowing AI agent adoption. Palo Alto acquired CyberArk for $2…
Sophos found that AI coding agents Claude Code, Cursor, and OpenAI Codex triggered behavioral detection rules designed to catch ransomware operators, with 56.2% of blocks related to credential access …
Nemesis Security launched a Rust-based EDR called Blue and a pentesting tool called Red, designed to avoid the kernel-panic failures that caused the July 2024 CrowdStrike outage. Blue uses macOS Endpo…
The internet faces a new naming and trust problem with AI agents, mirroring the early DNS era. Security incidents, such as an AI agent rewriting its own security policy at a Fortune 50 company, highli…
Anthropic launched Project Glasswing on April 7, 2026, after its unreleased Claude Mythos Preview model autonomously chained a browser exploit and escaped an air-gapped sandbox. The gated consortium d…
Palo Alto Networks and CrowdStrike hit all-time highs as investors rotated out of semiconductors into AI-security stocks, driven by Zhipu AI's open-weight model rivaling Anthropic's restricted model a…