Advertisement
Orange Business: Enhancing Enterprise Voice with AI and Trust
Orange Business introduces a new enterprise voice solution integrating AI and a 'Zero Trust' approach to enhance security and user experience for multinational…
Google Gmail Client-Side Encryption for Android and iOS — Deployment Guide
Google expands Gmail client-side encryption (CSE) to Android and iOS, giving enterprise users full control over encryption keys for mobile email communications.
Federal Evaluators Flag Microsoft Cloud Security Documentation
U.S. federal evaluators expressed a 'lack of confidence' in Microsoft's cloud security posture due to insufficient documentation, despite approval.
CrowdStrike and Anthropic Partner to Secure Mythos AI Frontier Models
CrowdStrike joins Anthropic Mythos as a founding member to advance AI security, focusing on protecting models from adversarial attacks and enhancing defense.
Exchange Online Mailbox Access Issues Persist for Outlook Users
Microsoft Exchange Online users on Outlook mobile and macOS are experiencing intermittent mailbox access issues for weeks; investigation ongoing.
Google Vertex AI Security: Mitigating AI Agent Weaponization
Google patches security flaws in Vertex AI after Unit 42 researchers demonstrated how to weaponize AI agents for unauthorized data access and exfiltration.
Google Drive Ransomware Protection Enabled by Default for Workspace
Google Workspace now enables AI-powered ransomware detection by default for paying users to identify and mitigate cloud-based encryption threats automatically.
Google Vertex AI Over-Privilege: Data Theft & Cloud Intrusion Risk
Palo Alto Networks researchers found over-privileged AI agents in Google Vertex AI could be exploited for data exfiltration and access to restricted cloud infrastructure.
Vertex AI Permission Flaw Exposes Google Cloud Data — Mitigation Guide
Researchers uncover a security blind spot in Google Cloud Vertex AI, allowing attackers to weaponize AI agents for unauthorized data access and compromise.
EC Investigates Breach After IntelBroker Claims AWS Account Hack
The European Commission is investigating a security breach of its AWS infrastructure after threat actor IntelBroker claimed to have stolen user database records.
_imageBROKER.com_Alamy.jpg?width=1280&auto=webp&quality=80&disable=upscale)
CSA Launches CSAI: New Standards for Autonomous AI Agent Security
The Cloud Security Alliance (CSA) has launched the CSAI foundation to address security gaps in autonomous AI agents through new standards and certifications.
OpenAI ChatGPT Library: Data Privacy and Cloud Security Analysis
OpenAI launches ChatGPT Library for persistent file storage. Explore technical risks, enterprise privacy controls, and data exfiltration mitigations.
Varonis Atlas: Securing AI Data Exposure via DSPM Strategies
Varonis Atlas addresses the security risks of AI agents by providing visibility and control over sensitive data exposure in AI environments and LLM tools.
AWS Bedrock AI Agent Security: Analysis of Eight Attack Vectors
Research identifies eight critical attack vectors in AWS Bedrock, focusing on risks to integrated enterprise data and automated Lambda function execution.
CrowdStrike Falcon AI Integrity: Securing Autonomous AI Agents
CrowdStrike introduces new capabilities within the Falcon platform to identify shadow AI and ensure the integrity of autonomous AI agents across the enterprise.
Exchange Online Service Change: Solving Outlook for Mac Access Issues
Microsoft addresses a service disruption in Exchange Online caused by virtual account updates affecting Outlook for Mac and mobile device connectivity.
Native Launches Multicloud Security Control Plane for Policy Enforcement
Native introduces a security control plane that translates and enforces consistent policies across AWS, Azure, GCP, and Oracle using provider-native APIs.
Quantum-Safe HTTPS: Improving Web Latency with NIST PQC Standards
Leading web providers are testing quantum-safe HTTPS protocols that reduce certificate sizes by 90%, improving latency while securing data against Q-day.
Secure Microsoft Intune Systems Against Wipe Attacks - CISA Warning
CISA urges organizations to secure Microsoft Intune following a breach at Stryker where attackers used the management tool to wipe corporate systems.
Modernizing National Security: CrowdStrike Falcon GovCloud IL5 Expansion
CrowdStrike expands security for the Department of Defense and critical infrastructure with IL5 authorization and specialized protection for air-gapped systems.
Claudy Day: Prompt Injection and XSS Flaws Target Claude AI Users
Researchers uncover 'Claudy Day', a trio of vulnerabilities in Anthropic's Claude AI that allow data theft through malicious Google search results.
Native Exits Stealth with $42M to Tackle Cloud Infrastructure Risks
Cloud security startup Native raises $42M to improve infrastructure resilience. Phil Venables joins the board to guide its cloud-native security strategy.
Amazon Bedrock and SGLang AI Flaws Enable RCE and Data Exfiltration
Researchers reveal DNS-based exfiltration and RCE vulnerabilities in Amazon Bedrock and SGLang AI frameworks, highlighting critical sandbox escape risks.
Tracebit Raises $20M to Scale Cloud-Native Deception Technology
Tracebit secures $20M in Series A funding to expand its cloud-native deception platform, helping SOC teams detect lateral movement and credential theft.