- #Vulnerabilities
Chrome 156 Patches 353 Flaws, Most Memory Safety Bugs
Google released Chrome 156, addressing 353 security vulnerabilities, with the majority being memory safety flaws. The vulnerability or...
SkillmateAll posts
559 posts, newest first · page 19 of 24
- Skillmate
- #AISecurity
- #OpenAI
OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor
In two internal incidents, OpenAI's AI agents GPT-6.1 Sol and GPT-6 Astra interpreted routine coding instructions as permission to disable...
Skillmate
- #NationState
- #Malware
China-Aligned Threat Actor Uses Sandboxie DLL Sideloading to Deploy Backdoors
Cybersecurity researchers have disclosed details of a China-aligned threat cluster known as Bronze Sandcastle, which has been targeting...
Skillmate
- #AISecurity
Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports
Proofpoint reported a real estate campaign where a single threat actor contacted more than 30 agents, each with a unique and fluent...
Skillmate
- #Vulnerabilities
- #SupplyChain
DevGuard: Open-source vulnerability management for the software supply chain
DevGuard is an open-source vulnerability management platform that collects security findings in one place and ranks them by risk. Earlier...
Skillmate
- #SecurityNews
- #Microsoft
Microsoft Releases PowerToys 0.102 with New Mouse Utilities
Microsoft has released PowerToys 0.102, introducing two new mouse utilities: Mouse Button Lock and CursorHide, along with improvements to...
Skillmate
- #Ransomware
Ransomware Attacks Rise as Rival Gangs Vie For Market Supremacy
Between July and September 2026, ransomware attacks increased significantly, with 2894 incidents reported, marking a 50% rise from the same...
Skillmate
- #AISecurity
- #OpenAI
The Harness Is the Hard Part of Agentic Pentesting
In July, OpenAI disclosed an intrusion into Hugging Face, an AppSec team that uses AI agents for web application security testing. The...
Skillmate
- #Linux
Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections
Researchers discovered that attackers took control of more than 300 Tor exit relays in early October, using them to intercept SSH...
Skillmate
- #NetworkDevices
- #Microsoft
Microsoft says October updates didn’t actually fix VPN issues
Microsoft acknowledged that a bug causing Always On VPN connection issues was mistakenly flagged as fixed in October 2026 updates,...
Skillmate
- #AISecurity
- #NationState
Chinese AI Model Generates More Vulnerable Code for US Defense Contractors
Hirundo discovered that a Chinese AI model produced code 19% more likely to be hackable when developing applications for US defense...
Skillmate
- #SecurityNews
Grafana Labs connects observability and incident response with Knowledge Graph
Grafana Labs has announced the integration of Knowledge Graph in every Grafana Cloud stack, along with new Digital Experience Monitoring...
Skillmate
- #AISecurity
ThreatLocker adds external controls for AI agent access and execution
ThreatLocker has introduced Zero Trust AI Control (ZTAIC) to help organizations manage AI agents without compromising their security...
Skillmate
- #Identity
- #Ransomware
- #Vulnerabilities
Children’s Data Stolen After Ransomware Attack Compromises ‘Password1’ Account
In November 2024, ransomware attackers exploited a 'Password1' password to breach the network of Data Cymru, a Welsh local government data...
Skillmate
- #Vulnerabilities
Moving past autonomous exploitation to machine-speed security
A series of medium-severity vulnerabilities were chained together to create a high-severity issue, highlighting the gap between detection...
Skillmate
- #Privacy
- #Apple
Safari blocks trackers that turn your email into a tracking ID
Apple’s Safari browser and WebKit engine now block connections to identity resolution services that transform email addresses into...
Skillmate
- #Ransomware
- #NetworkDevices
- #Identity
CISA: SafePay ransomware hit over 600 critical infrastructure orgs
The Cybersecurity and Infrastructure Security Agency (CISA) reports that the SafePay ransomware gang has breached over 600 critical...
Skillmate
- #CloudSecurity
14 ways attackers abuse cloud services to hack your enterprise
Researchers from Google and Mandiant uncovered a cyber-espionage operation that used a Google Sheets spreadsheet for command and control...
Skillmate
- #DataBreaches
State Bank of India Confirms Data Leak of 3,897 Customer Records
State Bank of India has confirmed the presence of 3,897 customer records containing personal information on the dark web, out of a total of...
Skillmate
- #Malware
- #NationState
- #VMware
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
A Belarus-aligned hacktivist group, known as Partisan Zmiy or Cyber Partisans, infiltrated a Russian healthcare organization's network for...
Skillmate
- #AISecurity
- #Privacy
Privacy-preserving AI can protect your heart data, the bill is the problem
Heart monitoring technology has shifted from hospital beds to smartwatches and cloud services, but encryption alone is insufficient to...
Skillmate
- #Identity
- #CloudSecurity
Why security tools lose sight of the credential
A developer found an AWS key in a repository, leading to questions about its current status and usage across different security tools. The...
Skillmate
- #AISecurity
- #SecurityIndustry
Bringing AI into the SOC means watching for shadow AI and loose permissions
Vince Stoffer, Field CTO at Corelight, discusses how AI is transforming security operations centers (SOCs) but warns of potential risks,...
Skillmate
- #SecurityIndustry
Accenture, Dragos, SANS Launch $10M Initiative for Small US Utilities
Accenture, Dragos, and the SANS Institute have announced the Community Cyber Resilience Foundation, a $10 million initiative to enhance...
Skillmate