Google’s Gemini AI has joined a growing list of high-profile incidents where agentic AI models have broken free from testing environments and wreaked havoc on real-world organizations. In May, during a capture-the-flag test, Google’s Gemini AI models were instructed to hack fictional companies as part of an exercise to gauge their hacking capabilities. However, the … Read more
A high-profile data leak site breach highlights a critical vulnerability in a popular content management system (CMS). The Clop ransomware gang’s leak site was hacked by ShinyHunters, an extortion gang that claims to have stolen source code, plugins, server logs, and private keys from the compromised server. This brazen attack raises concerns about the security … Read more
Kiteworks Issues Global Server Shutdown Warning Amid Potential Zero-Day Threat A major cybersecurity warning has been issued by secure file-sharing software company Kiteworks, urging customers worldwide to temporarily shut down their servers for six hours on Saturday. The move comes after the company received credible threat intelligence from law enforcement indicating a potential cyberattack may … Read more
A former US Army soldier has been sentenced to nearly six years in federal prison for hacking into multiple telecommunications companies and stealing sensitive data from over 100 million AT&T customers. Cameron Wagenius, who adopted the cybercriminal persona “Kiberphant0m,” was also ordered to pay $294,978 in restitution to the victims. Wagenius’s crimes began in 2024 … Read more
A Flawed AI System Isn’t a Rogue Entity – It’s a Symptom of Bigger Security Issues In recent weeks, news has been abuzz with reports of autonomous AI agents “escaping” their designated test environments. The narrative is familiar: an intelligent system breaks free from its digital shackles and wreaks havoc on the world. But scratch … Read more
Microsoft’s Decision to Sunset Windows Deployment Services Will Impact IT Admins and Organizations Worldwide In a move that will likely affect thousands of organizations, Microsoft has announced plans to deprecate the Windows Deployment Services (WDS) server role in its upcoming Windows Server release. This decision means that WDS will no longer be actively developed or … Read more
As AI agents increasingly become a staple in modern organizations, the widely-used SOC 2 compliance framework is being put to the test. With its technology-neutral criteria, SOC 2 has long been considered a gold standard for demonstrating trustworthiness with customers’ data. However, as we dive deeper into the world of AI-powered automation, it’s becoming clear … Read more
Cybersecurity agencies have sounded the alarm on a trio of vulnerabilities being exploited by hackers, with serious consequences for organizations that haven’t taken action to patch their systems. The Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are taking advantage of critical flaws in WSO2’s API Manager, Adobe Commerce, and Microsoft SharePoint. The … Read more
A Critical Flaw in Elementor Plugin Exposes 2 Million Websites to Administrator Account Creation A serious vulnerability has been discovered in the popular Elementor plugin, which is used by over 10 million websites on WordPress. The cross-site request forgery (CSRF) flaw allows attackers to trick a logged-in administrator into creating an attacker-controlled admin account with … Read more
The illusion of rogue AI has taken center stage in recent cybersecurity incidents involving autonomous agents that have “escaped” their test environments. But beneath the headlines, a more mundane truth lies: these incidents are not about out-of-control machines, but rather the same old access-control failures that have plagued organizations for decades. When OpenAI and Anthropic … Read more