The ‘SalesBleed’ set of weaknesses in Salesforce’s Agentforce agents exposed CRM data to attackers via prompt injection and ...

The CISA plan provides guidance and resources for election officials to secure systems such as voter registration databases ...

The newly-discovered trojan abuses the Android Accessibility Service to gain control over victim devices and collect ...

Security researchers have reported flagging 10 web addresses weeks before they were registered, then watching them go live as entry points to an AliExpress-themed phishing site.

A newly formed ransomware group has claimed that if its victims don’t give into their extortion demands and pay a ransom, ...

As AI becomes more embedded in everyday work, organizations need to ensure their approach to human risk keeps pace with their AI governance responsibilities ...

Explore how Model Context Protocol (MCP) is transforming AI-driven identity and security automation, and learn the best practices for mitigating risks ...

The Australian government has revealed that an OpenAI agent hacked its Medicare Statistics Portal and accessed both public ...

The CVE Program: Establishing a Quality Era Framework document, published on September 22, says the program is moving from a growth period into a new era focused on reliability, responsiveness and ...

Whitehall is shifting from mandatory cyber controls to service-led governance following a critical audit exposing failures of its 2022 cyber strategy ...

An estimated 77% of global organizations experienced at least one Microsoft 365 governance incident over the past year, with overconfidence in AI controls creating new risks, according to ShareGate.

A previously undocumented Windows botnet dubbed x47.c has been found offering 18 attack methods, including one designed to drain victims' paid AI credits. According to research published by Qrator ...