Strategies, Expert Insights from the 2026 Verizon DBIR 2026-05-21 at 16:16 By The overarching theme of this year’s report is “keeping a strong foundation in the face of change.” This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source
Strategies, Expert Insights from the 2026 Verizon DBIR Read More »
Cisco Patches Critical Vulnerability in Secure Workload 2026-05-21 at 15:24 By Ionut Arghire Insufficient validation and authentication in the Secure Workload’s REST APIs provide remote attackers with Site Admin privileges. The post Cisco Patches Critical Vulnerability in Secure Workload appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Cisco Patches Critical Vulnerability in Secure Workload Read More »
Ocean Emerges From Stealth With $28M for Agentic Email Security Platform 2026-05-21 at 15:24 By SecurityWeek News The company has developed a platform that uses specialized AI agents to inspect every incoming message. The post Ocean Emerges From Stealth With $28M for Agentic Email Security Platform appeared first on SecurityWeek. This article is an excerpt
Ocean Emerges From Stealth With $28M for Agentic Email Security Platform Read More »
Microsoft Warns of Two Actively Exploited Defender Vulnerabilities 2026-05-21 at 15:24 By Microsoft has disclosed that a privilege escalation and a denial-of-service flaw in Defender has come under active exploitation in the wild. The former, tracked as CVE-2026-41091, is rated 7.8 on the CVSS scoring system. Successful exploitation of the flaw could allow an attacker
Microsoft Warns of Two Actively Exploited Defender Vulnerabilities Read More »
Microsoft Defender vulnerabilities exploited in the wild (CVE-2026-41091, CVE-2026-45498) 2026-05-21 at 14:22 By Zeljka Zorz Attackers are exploiting two Microsoft Defender vulnerabilities (CVE-2026-41091 and CVE-2026-45498), Microsoft acknowledged and CISA confirmed by adding them to its Known Exploited Vulnerabilities catalog. The vulnerabilities CVE-2026-41091 allows for local privilege elevation (LPE), and is caused by the Microsoft Malware
Apple Rejected 2 Million App Store Submissions in 2025 for Security and Fraud Prevention 2026-05-21 at 14:22 By Ionut Arghire The company blocked over 1.1 billion accounts and $2.2 billion in potentially fraudulent transactions. The post Apple Rejected 2 Million App Store Submissions in 2025 for Security and Fraud Prevention appeared first on SecurityWeek. This
Apple Rejected 2 Million App Store Submissions in 2025 for Security and Fraud Prevention Read More »
Drupal Patches Highly Critical Vulnerability Exposing Websites to Hacking 2026-05-21 at 14:22 By Eduard Kovacs CVE-2026-9082 can be exploited without authentication for information disclosure, privilege escalation, and remote code execution. The post Drupal Patches Highly Critical Vulnerability Exposing Websites to Hacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Drupal Patches Highly Critical Vulnerability Exposing Websites to Hacking Read More »
When Identity is the Attack Path 2026-05-21 at 14:22 By Consider a cached access key on a single Windows machine. It got there the way most cached credentials do – a user logged in, and the key stored itself automatically. Standard AWS behavior. No one misconfigured anything or violated a policy. Yet that single key,
When Identity is the Attack Path Read More »
Socket Raises $60 Million at $1 Billion Valuation 2026-05-21 at 13:50 By Ionut Arghire The company will invest in its firewall, certified patches, protection extensions, new products, and team expansion. The post Socket Raises $60 Million at $1 Billion Valuation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Socket Raises $60 Million at $1 Billion Valuation Read More »
The Maximalism Trap: When More Becomes Too Much 2026-05-21 at 13:14 By Alisha Smith Why more tools, more alerts, and more data aren’t making you any safer This article is an excerpt from SECURITY.COM View Original Source
The Maximalism Trap: When More Becomes Too Much Read More »
One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign 2026-05-21 at 13:14 By A solo Russian-speaking threat actor ran a 5-year Telegram channel and, starting September 2025, used AI to automate its content, credential theft, and a cryptocurrency fraud scheme targeting American audiences. This article is an excerpt
Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days 2026-05-21 at 13:14 By Ionut Arghire The bugs could be exploited to elevate privileges to System or create a denial-of-service (DoS) condition. The post Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days Read More »
Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI 2026-05-21 at 13:14 By Eduard Kovacs More than 200 vulnerabilities patched in recent Chrome releases are marked as ‘reported by Google’. The post Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View
Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI Read More »
Virtru centers file collaboration around data-level protection 2026-05-21 at 11:40 By Industry News Virtru unveiled Virtru Collaborate, a new offering that eliminates that tradeoff, a FedRAMP authorized space where sensitive files are encrypted and protected by the Trusted Data Format (TDF), and where that protection travels seamlessly with the data as teams work together across
Virtru centers file collaboration around data-level protection Read More »
ASAPP expands adversarial testing for enterprise AI systems 2026-05-21 at 11:40 By Industry News ASAPP has launches Continuous Red Teaming, a new capability that integrates adversarial AI testing directly into ASAPP’s model evaluation framework. The new capability is built on Promptfoo, an AI security platform that helps enterprises detect and address vulnerabilities in AI systems
ASAPP expands adversarial testing for enterprise AI systems Read More »
Tenable Hexa AI automates remediation across attack surfaces 2026-05-21 at 11:40 By Industry News Tenable has announced the general availability of Tenable Hexa AI, the agentic AI engine of the Tenable One Exposure Management Platform. Tenable Hexa AI is an advanced agentic AI for cybersecurity solution, equipped with advanced multi-step reasoning and Model Context Protocol
Tenable Hexa AI automates remediation across attack surfaces Read More »
Riverbed introduces new Aternity tools for autonomous IT operations 2026-05-21 at 11:40 By Industry News Riverbed has announced new capabilities for Aternity designed to support autonomous IT operations for digital experience management. The updates help digital workplace teams move toward prevention-focused operations through broader visibility, context-aware intelligence, and governance controls that support automated workflows. Organizations
Riverbed introduces new Aternity tools for autonomous IT operations Read More »
Forward launches Predict to test network changes before deployment 2026-05-21 at 11:40 By Industry News Forward has unveiled Forward Predict, a new capability that allows organizations to evaluate the impact of network changes before deployment. By testing proposed changes against a digital twin of the production network, Forward Predict helps identify potential issues before they
Forward launches Predict to test network changes before deployment Read More »
Supply Chain Security Crisis: Too Many Vulnerabilities, Too Little Visibility 2026-05-21 at 11:40 By Kevin Townsend New vulnerabilities are being discovered too fast, the time-to-exploitation is too short, and our visibility into them is largely lacking. The post Supply Chain Security Crisis: Too Many Vulnerabilities, Too Little Visibility appeared first on SecurityWeek. This article is
Supply Chain Security Crisis: Too Many Vulnerabilities, Too Little Visibility Read More »
9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros 2026-05-21 at 11:40 By Cybersecurity researchers have disclosed details of a vulnerability in the Linux kernel that remained undetected for nine years. The vulnerability, tracked as CVE-2026-46333 (CVSS score: 5.5), is a case of improper privilege management that could permit an unprivileged local user
9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros Read More »