10 casos · pág. 1/1
Oracle released its October 2026 Critical Patch Update on October 20, the final quarterly update of the year. It fixes 1209 unique CVEs in 1295 security updates across 33 product families. 112 of the patches (8.6%) are rated critical and cover 95 CVEs. The article does not mention exploitation in the wild. Technical Details - Severity bre…
The Australian Signals Directorate (ASD) announced in June 2026 that it will replace the Essential Eight with an outcomes-based Essentials series. The series covers enterprise IT first, then cloud, OT and possibly agentic AI. This is a policy and compliance change, not a threat incident. It moves organizations from periodic, point-in-time…
Tenable published a vendor blog describing the "harness" behind Tenable Hexa AI, the agentic engine of the Tenable One Exposure Management Platform. The harness is a runtime control layer that treats LLM agents as untrusted insiders and enforces boundaries outside the model. The article covers failures seen in development, the "no standin…
Tenable and OpenAI announced the CyberAgents Exchange AI Inspector (Exchange Inspector), a security review process for submissions to the open-source CyberAgents Exchange registry of AI agents, skills, MCP servers and multi-agent playbooks. The Inspector combines Tenable One AI Exposure scanning, OpenAI frontier models (Daybreak Blue and …
Tenable has detailed the Exchange Inspector, a three-stage vetting process for community-contributed AI agents, skills, MCP servers and playbooks listed on the open-source CyberAgents Exchange. The process was developed through Tenable's participation in the OpenAI Daybreak Defense Network. Three listings have passed so far: two from Tena…
On September 15, 2026, Oracle released its Critical Security Patch Update (CSPU) for September 2026, with 673 security updates covering 672 unique CVEs across 17 product families. Of these, 104 issues (15.5%) are rated critical, 503 high, 59 medium and 7 low. Oracle E-Business Suite received the most patches (159, 23.6%), followed by Orac…
Tenable published a blog post, the first in its Cybersecurity Awareness Month series, on the security risks of workplace applications that non-technical employees ("citizen coders") build with generative AI tools. Such apps often bypass QA, testing and IT/security oversight, and become shadow AI assets with vulnerabilities, misconfigurati…
Tenable's Cybersecurity Awareness Month blog summarizes government guidance on defending critical infrastructure against nation-state and AI-assisted attacks. Per a joint US government advisory (published in April, updated in July), Iran-affiliated APT groups have attacked US water, energy and government facilities since Operation Epic Fu…
Tenable announced that Tenable One Cloud Exposure now brings Microsoft Entra Agent ID agentic AI identities into its unified asset and identity inventory. The post argues that treating AI agents as ordinary non-human identities (NHIs) is risky, because agents make non-deterministic, runtime decisions through LLMs, which makes baselining t…
Microsoft's October 2026 Patch Tuesday addresses 1,407 CVEs across 301 products and components, the largest release on record for the second consecutive month. 69 are rated critical, 1,337 important and 1 low. Two zero-days are fixed: CVE-2026-96951, a Windows Shell security feature bypass exploited in the wild, and CVE-2026-108398, a .NE…
