4+ day, 7+ hour ago   (990+ words) A lost or stolen laptop is a data breach only if the disk wasn’t encrypted which is why full-disk encryption is both a baseline control and a near-universal compliance requirement. The operating systems already include strong encryption (BitLocker on Windows,…...

4+ day, 8+ hour ago   (526+ words) OpenAI has introduced a “Defense Factory” model for continuous, agent-driven vulnerability discovery and remediation, warning that traditional cyber defenses may not keep pace as AI agents can chain exploits and sustain long-running operations. The company’s approach responds to a rapidly…...

4+ day, 7+ hour ago   (1025+ words) Application control flips the endpoint security model from “block known bad” to “allow only known good” a deny-by-default posture that stops ransomware, living-off-the-land attacks, and unapproved software before they run. It is one of the most effective controls available, but also…...

4+ day, 8+ hour ago   (529+ words) A newly disclosed AI security threat dubbed Workflow Identity Hijacking could let attackers extract sensitive enterprise data by submitting ordinary requests through public-facing channels such as support inboxes, web forms, GitHub issues, or shared documents. Unlike prompt injection attacks, the…...

1+ week, 4+ hour ago   (1538+ words) Bottom line up front: if you already own a Check Point, Palo Alto, or Fortinet firewall, your sandbox decision is largely made buy the subscription and get verdicts pushed to enforcement automatically. If you need to understand malware rather than…...

1+ week, 4+ hour ago   (423+ words) Microsoft has announced plans to fully retire Manifest V2 (MV2) browser extension support in Microsoft Edge by early 2027, completing a transition to the more restrictive Manifest V3 (MV3) extension platform. The move is intended to improve browser security and performance by imposing stricter permission…...

1+ week, 5+ hour ago   (434+ words) Roundcube has released versions 1.6.19 and 1.7.4 to address 12 security vulnerabilities in its webmail platform, including a zero-click stored cross-site scripting flaw and a server-side request forgery bypass in its CSS proxy component. The updates, published on September 6, 2026, affect supported Roundcube 1.6.x…...

1+ week, 7+ hour ago   (351+ words) OpenAI has launched Daybreak for Frontline Defenders, a global cyber-defense initiative backed by a $1 billion commitment to expand access to its Daybreak AI capabilities for organizations protecting critical infrastructure. Daybreak access is designed for authorized defensive use. According to OpenAI,…...

1+ week, 2+ day ago   (489+ words) Chainguard has surpassed one billion container build manifests, doubling its output from 500 million in six months as it scales its AI-assisted, self-correcting software supply chain platform. The milestone also covers more than 3,000 unique container images and 675,000 image versions, reflecting the…...

1+ week, 2+ day ago   (360+ words) Tracked as CVE-2026-6471, the flaw was discovered by Cyera Research and affects PostgreSQL versions dating back to 9.4, released in 2014. PostgreSQL addressed the issue in its August 22, 2026 security release, ending a vulnerability window that spanned roughly 12 years. The bug exists in…...