SCM feed for Latest
The essential resource for cybersecurity professionals, delivering in-depth, unbiased news, analysis and perspective to keep the community informed, educated and enlightened about the market.
- Posts
- 103 from 29 May 2026 to 30 Oct 2026
- Posting
- weekly (103 in the last year)
- Kind
- magazine
- Feed
- https://www.scworld.com/feed/topic/latest
2026 98
- AI-generated code security shows first significant improvement in a year
- Anthropic files for initial public offering amid broader tech market volatility
- Sophisticated malware targets government-specific windows systems in Asia
- GCHQ faces scrutiny over lost storage drives and data handling failures
- Organizations face security risks from excessive AI autonomy
- Moldova investigates massive cyberattack on national identity infrastructure
- Fake cryptocurrency trading app steals funds from Solana wallets
- Mrfoofoo, Binance, Polymarket, Silent Train, robosurance, privacy, and Josh Marpet - SWN #629
- Identifying election domain threats before they become attacks
- Drupal Commerce Core access bypass flaw exploited in attacks
- A clean code review does not mean a safe runtime
- Indonesia seeks storage upgrades to bolster national identity infrastructure
- County election websites show persistent security vulnerabilities
- Valve steam platform vulnerabilities enable zero-click remote code execution
- Federal Election Commission systems go offline during cyberattack
- Security researchers warn of camera management software exploitation
- CISA adds Linux kernel and Broadcom VMware ESX flaws to known exploited vulnerabilities catalog
- Enterprise networking market growth faces component supply challenges
- Security researcher gains network access via legacy server vulnerability
- Unauthorized AI relay service poses security risks to enterprise users
- SecurityScorecard releases benchmark for testing AI in vendor risk management
- Vulnpocalypse Continues Until Defense Improves – PSW #950
- A revoked certificate is not a blocked connection
- Cisco SD-WAN Catalyst Controller attacks linked to Volt Typhoon’s Silent Train network
- From AI Agents to Critical Infrastructure: Closing the Cyber Resilience Gap
- How AI forces data security back to the endpoint
- After the breach: Uncovering the full scope of the attack
- Federal Election Commission systems taken offline following cyberattack
- Upwind Security raises $400 million to scale cloud and AI security platform
- Discord to index discoverable server discussions for web search
- Cisco releases open source project quarry to monitor AI agent behavior
- FCC commissioner outlines timeline for US Cyber Trust Mark rollout
- Security researchers identify bluetooth vulnerabilities in warehouse barcode scanners
- Malicious AI desktop applications distribute Yoba malware
- Army selects Amazon Web Services and World Wide Technology for Project Griffin
- Federal agencies face growing fraud threats requiring better data visibility
- Node2Shell flaw in Brotli added to CISA exploited vulnerabilities list
- Why cyber due diligence should be part of every vendor risk review
- Passports and Visas: A practical identity model for AI agent security
- CyberSN Jobs Report as CIOs and CISOs are Unaccountable and Unprepared for AI - BSW #471
- Engie confirms customer data breach via marketing platform
- Police and fire services in England and Wales face significant cyber risks
- China-linked Warlock ransomware group targets global infrastructure
- Japanese ISP GMO Internet suffers major data breach and ransomware demand
- University of Copenhagen reports data breach affecting over 500,000 individuals
- The shadow AI epidemic: Uncovering hidden AI agents and components on the endpoint
- Agents, Train Robberies, Jazz, Microsoft, Elvis Gyrates, Aaran Leyland, and More - SWN #628
- OpenAI calls for industry to raise its cyber defenses
- Steve Zurier
- Closure codes are chosen to close the case
- How to evaluate OT detection and response platforms
- Risk advisory: AI security programs fail when they do not control the system
- GITEX Global 2026 to showcase advancements in artificial intelligence and cybersecurity
- Former NSO Group head advocates for sovereign AI to reduce reliance on US firms
- Cisco introduces privileged infrastructure access to secure network management
- Enterprises accelerate public key infrastructure modernization for quantum readiness
- The intelligence problem AI can’t solve
- Securing Modern Financial Systems in the Age of AI - Rashid Feroze - ASW #406
- DreamHost resets user passwords following service disruption
- Dutch police arrest two men over AI-powered bank fraud scheme
- Sweden bans ChatGPT and Claude for government use
- UK Biobank prepares to reopen research platform following major data breach
- PHP2Shell exploitation confirmed, but mass attacks remain elusive
- The lagging indicator problem: why we measure security burnout after it has already cost us
- De-identification is an access control wearing a data-transformation label
- Centralised inspection: why the hub exists and what it costs
- Security groups, network ACLs and policy: what each one can actually express
- Validating an assumption that spans a vendor you do not operate
- AI ‘solved’ the wrong half of the vulnerability management lifecycle
- New AI tool identifies property locations from interior photos
- Okta advances AI agent governance and identity security
- Oracle experts discuss strategies for securing agentic AI against emerging threats
- Recent PHP vulnerabilities spark global cybersecurity concerns
- Security affairs malware newsletter highlights global threat landscape
- Bright Security launches STAR Fuzzer to automate application security testing
- Building a parallel Internet, security buzzwords that should be retired, and the news - Barrett Lyon - ESW #482
- Security firm disables vulnerable Popcorn Time updater
- Security researcher identifies potential privilege escalation in Tailscale SSH
- Federal judge rules OPM access for DOGE personnel was unlawful
- The importance of usage intelligence for artificial intelligence companies
- Tor, PhP2Shell, Deepfakes, eMudhra, LiteLLM, Meta, Josh Marpet, and More – SWN #627
- AI pentesting tool Artex used in recent ConnectWise compromise
- After memory poisoning, an AI agent needs more than a restart
- Why we don’t need an AI ‘kill switch’
- Moving images: How a runtime bill of materials provides total dependency visibility
- PHP2Hell – Joshua Wright – PSW #949
- PHP2Shell attacks surge worldwide as governments rush to patch
- In continuous operation: How Simpson Strong-Tie safely AI red-teams AI-powered applications
- CISA advises orgs to patch PHP2Shell bugs immediately
- SC Media Editorial Intelligence, reviewed by Habibullah
- Siemens Software Center flaw exploited in ClickFix DLL-sideloading attack
- Attackers compromise Microsoft 365 credential via ConnectWise Cloud Backup
- BeyondTrust zero-day exploited by China-linked group Armory Castle
- How to get enterprise-grade security without an enterprise-sized team
- The AI you can’t see: Bringing third-party shadow AI into the risk picture
- Transforming MDR: How AI challenges and strengthens protection services
- Changing the game: How AI forces organizations to revisit assumptions about recovery and resilience
- Identity-based attacks: how they work and how to defend against them
Undated 5
- The Network Isn’t What You Think It Is: Securing an Environment Built for Machines
- Threat intelligence futures: AI-powered intel, cross-sector sharing
- The shift from SDLC to ADLC: How the human role is changing in software development
- Back to the beginning: Why AI’s impact on data security makes the endpoint the battlefield once again
- Crown jewels: The better way to protect your privileged accounts