EEP || Cyber Investing Trendjacking (7d)

Synology says threat actors are exploiting a vulnerability it patched in December 2024, targeting devices on outdated DSM to encrypt data and extort...

ServiceNow's October 29 advisory KB3228994 flags a critical sandbox escape in its AI Platform.

• The flaw: An authenticated admin can bypass the...

Health-ISAC reports ransomware against health organizations hit a record high in Q3 2026, with 317 events tracked.

• Care disruption: UNM's Level-1...

Netgear has issued patches for its supported models, but some affected devices have reached end of support, meaning no further updates.

• Patch...

Cisco's CVE-2026-76418 is an actively exploited zero-day that lets an unauthenticated remote attacker crash Secure Firewall ASA and FTD devices...

CISA added two Ivanti Connect Secure vulnerabilities to its KEV Catalog based on evidence of active exploitation. Use this as a prioritization...

ETSI's new TS 104 275 shifts deepfake defence from spotting fakes after creation to building safeguards into AI systems from the start.

• Lifecycle...

The SEC is examining AI companies' disclosures as investor worries grow over a possible AI bubble. Enforcement director David Woodcock says the...

GMO's response pairs a public bounty with customer-facing steps, but key impact questions remain open.

• Scope still unclear: GMO said up to 26,739...

CISA added CVE-2026-109618 and CVE-2026-109619 to its KEV catalog on Monday, though it did not say what prompted the update.

• Researchers report...

CISA has announced updated ScubaGear v2.0 and ScubaGoggles v1.1.0, which it describes as a major leap for the Secure Cloud Business Applications...

Coinbase denies suffering a breach on its own end, yet customer contact data was still exposed through analytics vendor Amplitude. The company says it...

Experian's group CTO, Rodrigues, argues that AI resilience is an infrastructure problem first.

• Weak foundations: He warns that logs can be...

This batch of funding spans distinct layers of AI security, not one product category.

• Agent access: Infisical raised $40 million at a $600 million...

• Patch target: NVIDIA's CVSS 10.0 missing-authentication fix for CVE-2026-65145 arrives in NeMo Agent Toolkit 1.9.0.
• Exposure: A remote,...

The speed at which AI can find and exploit a network weakness is pushing CISA's Sam Vasquez to call for an attacker-centered mindset in penetration...

Railway's incident shows attackers accessed CI systems and may have decrypted customer environment variables, targeting AI-provider keys.

• Blast...

Geogentia's new Perimeter service delivers alerts-only monitoring of online threats for schools, organizations, family offices and places of worship,...

CISA's new strategy shifts to risk-informed, consequence-based prioritization, directing resources at infrastructure whose loss would most harm public...

A long-running campaign has compromised 953 online stores, mostly Magento, with JavaScript loaders hidden in CMS blocks that evade scanners via...