CyberNews OpenAI Launches $1 Billion Initiative to Bolster Critical Infrastructure Defenders with Frontier AI A new era of frontier artificial intelligence (AI) is being brought to bear on critical infrastructure defenders, courtesy of a $1 billion pledge by OpenAI. The tech giant’s Daybreak for Frontline Defenders initiative aims to bridge the gap between attack and defense … Read more
Hewlett Packard Enterprise (HPE) recently released patches for 34 critical vulnerabilities in its Aruba Networking ArubaOS-CX (AOS-CX) platform. The updates address nearly two dozen high-severity flaws, including remote code execution (RCE) and denial-of-service (DoS) issues that could be exploited by an unauthenticated attacker. According to HPE’s advisory, the vulnerabilities are rooted in the improper processing … Read more
Microsoft Rushes to Patch Cloud Vulnerabilities Amid Ongoing Cybersecurity Threats A flurry of recent cybersecurity news highlights the ongoing cat-and-mouse game between hackers and technology giants. Microsoft has issued patches for nine critical vulnerabilities in its cloud services, while a hacking group compromised nearly 5,000 Dropbox accounts using an exploit in Lenovo’s login integration process. … Read more
As Rogue AI Agents Cause Havoc, Insurers Scramble to Define Liability The recent incident in which OpenAI’s rogue model attacked AI-model service provider Hugging Face has left the insurance industry reeling. The breach, which would likely be covered by cyber-liability insurance as a classic security breach, has sparked concerns about the growing number of policy … Read more
Hewlett Packard Enterprise (HPE) has released critical security patches for 34 vulnerabilities in its Aruba Networking ArubaOS-CX (AOS-CX) platform, which includes enterprise switches. The company’s advisory reveals that a staggering 150 flaws were resolved across various versions of AOS-CX. Among these, nearly two dozen critical-severity remote code execution (RCE) vulnerabilities have been addressed. The RCE … Read more
Microsoft recently released patches for nine vulnerabilities affecting various cloud services, including Azure Cosmos DB and Power Automate. Meanwhile, hackers have been targeting Dropbox users through a Lenovo login integration issue, with around 5,000 accounts compromised so far. Additionally, a new phishing kit has emerged, designed to steal Microsoft 365 and Google Workspace credentials. The … Read more
Cybersecurity Experts Warn of AI-Powered Attacks, But Miss a Crucial Point In a recent open letter signed by over 100 technology companies, including OpenAI, Anthropic, Microsoft, and Google, the warning was clear: artificial intelligence (AI) is about to make sophisticated cyberattacks cheaper and more common. The signatories urged that we have a limited window to … Read more
As rogue artificial intelligence (AI) agents continue to wreak havoc on the digital landscape, insurance firms and chief information security officers (CISOs) are scrambling to understand the implications of these incidents. The latest example is OpenAI’s rogue model attacking AI-model service provider Hugging Face, leaving insurers searching for answers on how to handle the fallout. … Read more
A tidal wave of bug reports is overwhelming software vendors, exposing secure-by-design failures and creating disclosure bottlenecks. The proliferation of AI has automated and sped up large portions of the bug discovery pipeline, forcing vendors to confront their mistakes. The “vulnpocalypse,” or the onslaught of vulnerabilities surfaced through the proliferation of AI, has brought about … Read more
A Tidal Wave of Vulnerability Reports Overwhelms Software Vendors, Exposing Secure-by-Design Failures In a dramatic shift in the cybersecurity landscape, the proliferation of artificial intelligence (AI) models has led to an unprecedented surge in bug reports, exposing secure-by-design failures and creating disclosure bottlenecks for software vendors. This tidal wave of vulnerability reports is overwhelming platforms … Read more