Antivirus and Security news

New Paper and Tool Help Security Teams Move Beyond Blind Reliance on CISA’s KEV Catalog

The KEV list is useful but largely misunderstood. KEVology explains what it is, and how best to use it. The post New Paper and Tool Help Security Teams Move Beyond Blind Reliance on CISA’s KEV Catalog appeared first on SecurityWeek. more…

European Commission Investigating Cyberattack

The signs of a cyberattack were identified on systems EU’s main executive body uses for mobile device management. The post European Commission Investigating Cyberattack appeared first on SecurityWeek. more…

How the EU’s trade ‘bazooka’ could hit the US tech sector

When the Trump Administration threatened tariffs last month against countries looking to block any plan to annex Greenland, European leaders debated responding with the region’s trade “bazooka” – a retaliation mechanism that could target US tech firms selling into the European Union. The anti-coercion instrument, introduced in 2023 and so far unused, is designed to deter […] more…

Organizations Urged to Replace Discontinued Edge Devices

Edge devices that are no longer supported have been targeted in attacks by state-sponsored hackers, the US says. The post Organizations Urged to Replace Discontinued Edge Devices appeared first on SecurityWeek. more…

Beyond Login Screens: Why Access Control Matters

As breach costs go up and attackers focus on common web features like dashboards, admin panels, customer portals, and APIs, weak access control quickly leads to lost data, broken trust, and costly incidents. The worst part is that many failures are not rare technical flaws but simple mistakes, such as missing permission checks, roles with […] more…

After years of warnings, Microsoft is finally pulling the plug on EWS

It’s for real this time: After nearly 20 years, there will soon be no more Exchange Web Services (EWS) in Microsoft Exchange Online. The API will be disabled by default on October 1, 2026, and will be completely shut down on April 1, 2027, with “no exceptions.” Organizations must have switched to Microsoft Graph by […] more…

UiPath acquires WorkFusion to automate KYC processes

UiPath has acquired agentic AI developer WorkFusion to expand and strengthen its portfolio of AI-powered industry solutions. The deal will add WorkFusion’s offerings to UiPath’s portfolio of products for the financial services and banking industries. By using WorkFusion’s pre-built library of AI agents, UiPath said, customers will be able save time on the most labor-intensive aspects of […] more…

Musk’s million data centers in space won’t fly, say experts

SpaceX CEO Elon Musk has announced plans to put a million data centers in space, a program he hopes will help meet the growing demand for existing facilities on earth driven by the increasing use of AI. Experts, however, have dismissed the idea of data centers in space as completely impractical. Thermal management is one […] more…

Scientists create smart synthetic skin that can hide images and change shape

Inspired by the shape-shifting skin of octopuses, Penn State researchers developed a smart hydrogel that can change appearance, texture, and shape on command. The material is programmed using a special printing technique that embeds digital instructions directly into the skin. Images and information can remain invisible until triggered by heat, liquids, or stretching. more…

Pretend Disk Format: PDFs harbor new dangers

A particularly insidious phishing campaign is disguising malware pretending to be ordinary PDF documents behind links to virtual hard disks. Because workers are used to receiving purchase orders or invoices in the PDF format, they are likely to open the malicious files unthinkingly, enabling the malware they contain — in this case AsyncRAT, a remote-access […] more…

A clever quantum trick brings practical quantum computers closer

Quantum computers struggle because their qubits are incredibly easy to disrupt, especially during calculations. A new experiment shows how to perform quantum operations while continuously fixing errors, rather than pausing protection to compute. The team used a method called lattice surgery to split a protected qubit into two entangled ones without losing control. This breakthrough […] more…

Flickr Security Incident Tied to Third-Party Email System

Potential breach at Flickr exposes usernames, email addresses, IP addresses, and activity data. The post Flickr Security Incident Tied to Third-Party Email System appeared first on SecurityWeek. more…

In Other News: Record DDoS, Epstein’s Hacker, ESET Product Vulnerabilities

Other noteworthy stories that might have slipped under the radar: AT&T and Verizon response to Salt Typhoon, AI agents solve security challenges, man arrested in Poland for DDos Attacks. The post In Other News: Record DDoS, Epstein’s Hacker, ESET Product Vulnerabilities appeared first on SecurityWeek. more…

Living off the AI: The Next Evolution of Attacker Tradecraft

Living off the AI isn’t a hypothetical but a natural continuation of the tradecraft we’ve all been defending against, now mapped onto assistants, agents, and MCP. The post Living off the AI: The Next Evolution of Attacker Tradecraft appeared first on SecurityWeek. more…

Anthropic says no to ads in Claude chats

Anthropic will not put ads in conversations with its AI assistant Claude. It wants ads nowhere near its AI-generated content. “Even ads that don’t directly influence an AI model’s responses and instead appear separately within the chat window would compromise what we want Claude to be: a clear space to think and work,” it announced […] more…

Airrived Emerges From Stealth With $6.1 Million in Funding

The startup aims to unify SOC, GRC, IAM, vulnerability management, IT, and business operations through its Agentic OS platform. The post Airrived Emerges From Stealth With $6.1 Million in Funding appeared first on SecurityWeek. more…

« Older posts