A landmark piece of legislation aimed at safeguarding the UK’s critical infrastructure has taken a significant step forward in Parliament. The UK Cyber Security and Resilience Bill (CSRB) has been amended to give ministers powers to block high-risk technology suppliers from serving critical sector organizations, following a recent cyberattack that left a small-scale energy facility … Read more
As AI agents become increasingly integral to our digital lives, their autonomous actions can pose a significant threat to network security if left unchecked. A new product, OpenLeash, aims to mitigate this risk by introducing a human oversight layer that ensures AI agents’ actions align with user intent. Developed by Max Brin, OpenLeash provides an … Read more
A new wave of attacks has been detected, leveraging seven exploited flaws identified by CISA. The US Cybersecurity and Infrastructure Security Agency (CISA) has added these vulnerabilities to its list of actively exploited issues, sparking concerns among security experts that attackers are gaining a foothold in networks. The exploitation is primarily occurring through the use … Read more
A Critical Vulnerability in CrowdStrike Falcon Exposed by Researcher’s Proof-of-Concept Exploit A researcher has unveiled a proof-of-concept (PoC) exploit for a previously unknown vulnerability in CrowdStrike Falcon, a popular cloud-delivered endpoint security platform. The flaw allows an attacker to escalate privileges from a standard user account to an administrator-level position on the system, essentially giving … Read more
A Critical Cleo Harmony Vulnerability Has Been Exploited, Leaving Organizations Exposed to Privilege Elevation and Lateral Movement Attacks Cleo Harmony users are facing a pressing security threat after a fresh authentication bypass vulnerability was discovered in the file transfer application. The vulnerability, tracked as CVE-2026-84115, allows remote attackers to manipulate JWT refresh tokens, granting them … Read more
Rockwell Automation Patches Dozens of Vulnerabilities Across Industrial Automation Products Industrial automation giant Rockwell Automation has issued patches or workarounds for over a dozen vulnerabilities discovered across its products. The company’s advisory highlights critical and high-severity issues that could compromise sensitive operations, making it essential for customers to take immediate action. The most concerning vulnerability, … Read more
The UK government has taken a significant step towards bolstering its national resilience against cyber threats by proposing amendments to the Cyber Security and Resilience Bill (CSRB). The bill, which is poised to become an Act of Parliament, aims to prevent high-risk technology suppliers from being used by critical infrastructure organizations. This move comes on … Read more
As AI agents become increasingly prevalent in our daily lives, they also bring with them a new set of risks and challenges. Autonomous systems can be incredibly powerful, but their ability to act without human oversight or control has raised concerns about accountability and security. A recent innovation aims to address this issue by introducing … Read more
Cyber attackers have been using a new tactic to compromise Microsoft Teams users, according to researchers from Palo Alto Networks. The “Spring Ring” operation has targeted at least 150 employees across multiple companies with voice phishing (vishing) attacks that aim to install remote monitoring and management tools on their machines. The campaign is significant because … Read more
Cybercriminals have launched a coordinated operation, dubbed “Spring Ring,” targeting Microsoft Teams users with sophisticated voice phishing (vishing) attacks. The campaign aims to compromise over 150 users across multiple companies, granting attackers remote access to sessions, spreading malware, and even taking control of infrastructure. Researchers from Palo Alto Networks observed the Spring Ring operation between … Read more