440 casos · pág. 8/22
In a World Economic Forum article, Etay Maor of Cato Networks argues that traditional cybersecurity frameworks must evolve to address three forms of AI misuse: humans using AI to lower the expertise needed for exploits, fraud and cybercrime; AI models escaping their intended environments; and AI agents pursuing objectives that differ from…
Tenable Holdings announced that Japanese retail group H₂O Retailing has deployed the Tenable One Exposure Management Platform across its multi-cloud and hybrid infrastructure. The group operates Hankyu Hanshin Department Stores, Izumiya, Hankyu Oasis and Kansai Super. It previously relied on annual, outsourced vulnerability assessments fo…
Advantech signed a Memorandum of Understanding with DEKRA to help industrial equipment and Edge AI customers meet the EU Cyber Resilience Act (CRA) and international standards such as IEC 62443 from the product design stage. The partnership covers technical and feasibility assessments, documentation review, certification preparation, vuln…
A post on ISASecure by Rafael Barreto Jijón, managing director of OT-Knight, argues that asset owners should merge functional safety and OT cybersecurity into a single lifecycle. He notes that safety instrumented systems (SIS) protect against process hazards but are also targets for cyber-physical attacks, citing the 2017 TRITON/TRISIS in…
Tactien Group, an independent aviation advisory firm for critical infrastructure, announced CAST (Counter-UXS Assessment & System Testing), a software platform for planning, running and scoring counter-drone evaluations in customers' own environments. Utilities, refineries, data centers and military installations often buy counter-UAS det…
A $6,438,578.20 settlement has been agreed to resolve the "Other Labs Track" of consolidated litigation over the American Medical Collection Agency (AMCA) breach. The defendants are AMCA clients Sonic Healthcare U.S.A., Aurora Diagnostics LLC, Clinical Pathology Laboratories, Inc. and Austin Pathology Associates. AMCA, a subsidiary of Ret…
The 2026 Ponemon Healthcare Cybersecurity Report, commissioned by Proofpoint, finds that cyberattacks on healthcare organizations are rising, costing more and increasingly harming patient care. The survey covered 705 IT and security practitioners. 97% of organizations suffered at least one attack in the past 12 months, averaging 51 attack…
California has settled with 23andMe for $6 million over the 2023 credential-stuffing breach. The breach exposed personal and genetic data of about 6.9 million people, including 855,000 California residents. The settlement follows a July 2026 $18 million settlement with a coalition of 42 state attorneys general, which California did not jo…
Canada's proposed C-22 bill, first put forward in 2025 and since partly revised, would require tech companies, including foreign ones, to introduce "technical capabilities" for law enforcement data access. It would also require retention of user metadata. Signal has said it would exit the Canadian market, and Psiphon VPN says it will leav…
Privacy firm Redact found that around 80 WhatsApp help and FAQ pages exposed hidden text instructions written for a Meta large language model support chatbot. The text, about 100 blocks in total, sat in the page source under a code block headed "HelpContentGalaxyLLMInclude". Some instructions told the chatbot not to recommend contacting a…
A Chainguard survey released at its Assemble London event on October 14 found that 66% of security leaders at companies with $1bn or more in revenue admit leaving high or critical vulnerabilities unpatched "at least sometimes". Among companies with under $250m in revenue, the figure was 27%. Larger firms cite business trade-offs: disrupti…
Dashlane's third annual Passkey Power 20 report found that passkey use is growing but still trails passwords. The report covers millions of aggregated, anonymized authentications between July 2025 and June 2026. Authentications by Dashlane users nearly doubled year on year to 2.5 million per month, and 57% of users now store at least one …
US cybersecurity job postings fell 26.4% year-over-year between January and September 2026, according to a CyberSN analysis of JobSpikr data. The 235,786 roles posted are the lowest total in the four years CyberSN has run the analysis, against 273,498 in 2023, 244,911 in 2024 and 320,210 in 2025. Leadership roles fell sharply: CISO postin…
A Moody's report published on October 19 finds that known exploited vulnerabilities take a median of 87 days to be patched, leaving half unremediated three months after disclosure. Vulnerabilities with no known exploitation evidence take longer, at a median of 107 days. The report warns that AI-powered vulnerability discovery is driving a…
The Cisco Splunk 2026 State of Observability report, published on October 20, finds that organizations are deploying AI agents faster than they can build monitoring procedures and security controls. This leaves them exposed to security threats, hallucinations and related problems. Of the 2050 ITOps and engineering respondents, 38% said th…
Research by IANS and Artico Search, published on October 20, found that a head of AI security role exists in 65% of large organizations with annual revenue of $10bn or more. Of these, 18% made it a dedicated position and 47% combined it with another leadership role. Adoption is much lower in mid-size firms (9% at $1-$10bn revenue) and sma…
Hudson Rock announced it is a launch data partner in the Ardence Data Network, which powers TRM Labs' new AI investigation platform Ardence. The platform is aimed at government investigators, cyber threat analysts and compliance teams at more than 600 agencies and institutions in 75 countries. It combines intelligence from more than 60 pa…
The Hudson Rock 2026 Infostealer Index benchmarks 34 threat intelligence vendors against nine criteria on a 100-point scale. The article is a summary by InfoStealers, which Hudson Rock operates, so the ranking is not independent. It frames infostealer malware as a dominant threat and cites a "massive AI supply chain hack of 2026" as an ex…
Infoblox published a vendor blog showing how its Model Context Protocol (MCP) Server lets AI assistants correlate Tenable vulnerability findings with Infoblox DNS, DHCP and IPAM data. In a lab, the author connected Claude Code to both platforms and ran three analyst-style workflows. These were risk-ranked asset triage, identity gap analys…
Infoblox introduces Agentic Denial of Service (ADoS), a class of disruption in which AI agents overwhelm systems with excessive requests, actions or computations, or in which an adversary turns a defender's own automation against it. It is not "DDoS with AI": it denies the business effective use of its AI agents, the infrastructure they d…
