The notion that artificial intelligence (AI) systems can “go rogue” has become a rallying cry in the tech industry, with many experts warning of an existential threat from frontier models. However, security professionals are pushing back against this narrative, arguing that it’s not only inaccurate but also obscures the real security issues at play. The … Read more
Critical Vulnerability in Government and Banking Middleware Exposes Users to Remote Code Execution Attacks A critical vulnerability has been discovered in SConnect, a hardware authentication program used by over a million users worldwide to access sensitive government and financial systems. The flaw, which allows attackers to perform remote code execution (RCE) attacks in mere seconds, … Read more
Cybersecurity vendors are facing a tough choice when it comes to responding to zero-day vulnerabilities: how much information to share with customers about potential attacks, and whether to recommend taking systems offline. Two recent incidents involving Kiteworks and Citrix highlight the challenges of balancing transparency and caution in the face of emerging threats. On September … Read more
Cybersecurity teams are being put to the test as attackers increasingly rely on sophisticated techniques to breach defenses. A new platform, RemoteThreat, aims to help organizations stay ahead of these threats by simulating real-world attacks and testing their defenses in a more realistic way. RemoteThreat was founded by Chris Thompson and Shawn Jones, two cybersecurity … Read more
Critical Vulnerability Exposed in GitLab’s AI Gateway Service, Users Urged to Patch Immediately A critical vulnerability has been discovered in GitLab’s AI Gateway service, a feature that allows users to access AI-native capabilities within the platform. The flaw, tracked as CVE-2026-90970, could enable attackers with basic privileges and Duo Agent Platform access to execute arbitrary … Read more
As we approach the end of 2026, organizations are facing a daunting challenge: proving the value of their artificial intelligence (AI) investments. With trillions of dollars spent on AI deployments over the past year, companies must now demonstrate not only that their AI systems are secure but also that they’re generating tangible returns on investment … Read more
A Critical Vulnerability in Government and Banking Middleware Exposes Ultra-Sensitive Systems to Remote Code Execution Attacks Researchers at Bay Area Labs have discovered a critical vulnerability in SConnect, a hardware authentication middleware used by millions of users worldwide to access sensitive government and financial systems. The vulnerability allows attackers to perform drive-by remote code execution … Read more
Cybersecurity Incidents Highlight Challenges of Zero-Day Response A recent series of high-profile cybersecurity incidents has highlighted the difficulties that vendors face when responding to zero-day attacks. Two separate cases involving Citrix and Kiteworks have sparked debate within the security community about the best course of action in such situations. Citrix, a leading provider of application … Read more
A new cybersecurity threat landscape is emerging, driven by rapidly advancing artificial intelligence (AI) capabilities of attackers. To stay ahead of this curve, a startup called RemoteThreat has developed an integrated offensive cyber operations platform that uses AI to assist teams in enterprises and government organizations during simulated attacks. The goal: to help security teams … Read more
Critical Vulnerability in GitLab’s AI Gateway Service Exposes Users to Remote Code Execution Attacks A critical vulnerability has been discovered in GitLab’s AI Gateway service, a feature that provides access to artificial intelligence-powered tools within the company’s suite of services. The issue, tracked as CVE-2026-90970, allows attackers with basic privileges and Duo Agent Platform access … Read more