White Circle Raises $11 Million for AI Control Platform 2026-05-12 at 20:12 By Ionut Arghire The startup will invest in accelerating product development, hiring new talent, and expanding its customer base. The post White Circle Raises $11 Million for AI Control Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
White Circle Raises $11 Million for AI Control Platform Read More »
RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded 2026-05-12 at 20:12 By RubyGems, the standard package manager for the Ruby programming language, has temporarily paused account sign ups following what has been described as a “major malicious attack.” “We’re dealing with a major malicious attack on Ruby Gems right now,” Maciej Mensfeld,
RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded Read More »
MDR: Ask the Right Questions to Avoid Costly Assumptions 2026-05-12 at 17:35 By Managed Detection and Response (MDR) may now be one of the most widely purchased security services, yet often one of the most misunderstood. This article is an excerpt from LevelBlue Blog View Original Source
MDR: Ask the Right Questions to Avoid Costly Assumptions Read More »
Instructure took a risky approach to recover stolen Canvas data 2026-05-12 at 17:35 By Sinisa Markovic Instructure, the company behind the online learning platform Canvas, said it reached an agreement with the extortion group ShinyHunters to prevent data stolen in a recent breach from being leaked online. According to the company’s website, Canvas has more
Instructure took a risky approach to recover stolen Canvas data Read More »
General Motors to pay $12.75 million over driver data sales 2026-05-12 at 17:35 By Anamarija Pogorelec General Motors has agreed to a $12.75 million settlement with California over allegations that it unlawfully sold drivers’ location and behavioral data to brokers, marking the largest penalty in the history of the state’s Consumer Privacy Act. Prosecutors say
General Motors to pay $12.75 million over driver data sales Read More »
Download: The IT and security field guide to AI adoption 2026-05-12 at 17:35 By Help Net Security Security and IT teams are under pressure to adopt AI, but many are seeing the opposite of what was promised. Tools that demo well don’t hold up in real workflows. Complexity increases. Trust breaks down. And instead of
Download: The IT and security field guide to AI adoption Read More »
JetBrains TeamCity vulnerability allows privilege escalation, API exposure (CVE-2026-44413) 2026-05-12 at 17:35 By Zeljka Zorz JetBrains has patched a high-severity vulnerability (CVE-2026-44413) in TeamCity, its popular continuous integration and continuous delivery platform, and is urging organizations with on-premises and self-managed deployments to upgrade to the fixed version or implement a security patch. About CVE-2026-44413 CVE-2026-44413
BWH Hotels Says Hackers Had Access to Reservation Data for 6 Months 2026-05-12 at 17:34 By Eduard Kovacs Threat actors obtained names and contact information for an unspecified number of BWH Hotels guests. The post BWH Hotels Says Hackers Had Access to Reservation Data for 6 Months appeared first on SecurityWeek. This article is an
BWH Hotels Says Hackers Had Access to Reservation Data for 6 Months Read More »
West Pharmaceutical Services Hit by Disruptive Ransomware Attack 2026-05-12 at 17:34 By Ionut Arghire The company took systems offline globally after hackers exfiltrated data and deployed file-encrypting ransomware. The post West Pharmaceutical Services Hit by Disruptive Ransomware Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
West Pharmaceutical Services Hit by Disruptive Ransomware Attack Read More »
Deal Reached With Hackers to Delete Data Stolen From the Canvas Educational Platform 2026-05-12 at 17:34 By Associated Press The company that operates online learning system Canvas said it struck a deal with hackers to delete the data they pilfered in a cyberattack that created chaos for students, many of them in the middle of
Deal Reached With Hackers to Delete Data Stolen From the Canvas Educational Platform Read More »
Free OnlyFans Lure Used to Spread Cross-Platform CRPx0 Malware 2026-05-12 at 17:34 By Kevin Townsend CRPx0 is a complex, stealthy malware campaign that targets macOS and Windows systems, and appears to have Linux capabilities in development. The post Free OnlyFans Lure Used to Spread Cross-Platform CRPx0 Malware appeared first on SecurityWeek. This article is an
Free OnlyFans Lure Used to Spread Cross-Platform CRPx0 Malware Read More »
Apple Patches Dozens of Vulnerabilities in macOS, iOS 2026-05-12 at 17:34 By Eduard Kovacs The tech giant has also ported the patch for a recent deleted chats recovery issue to older versions of iOS. The post Apple Patches Dozens of Vulnerabilities in macOS, iOS appeared first on SecurityWeek. This article is an excerpt from SecurityWeek
Apple Patches Dozens of Vulnerabilities in macOS, iOS Read More »
Webinar: What the Riskiest SOC Alerts Go Unanswered – and How Radiant Security Can Help 2026-05-12 at 17:34 By Why do the Riskiest SOC Alerts Go Unanswered? Security operations teams are drowning in alerts. But the real problem isn’t always alert volume; it’s the blind spots. The most dangerous alerts are the ones no one
Webinar: What the Riskiest SOC Alerts Go Unanswered – and How Radiant Security Can Help Read More »
New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots 2026-05-12 at 17:34 By Cybersecurity researchers have flagged a new version of the TrickMo Android banking trojan that uses The Open Network (TON) for command-and-control (C2). The new variant, observed by ThreatFabric between January and February 2026, has been observed actively targeting
New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots Read More »
Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages 2026-05-12 at 17:34 By TeamPCP, the threat actor behind the recent supply chain attack spree, has been linked to the compromise of the npm and PyPI packages from TanStack, UiPath, Mistral AI, OpenSearch, and Guardrails AI as part of a fresh Mini Shai-Hulud campaign.
Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages Read More »
SAP Patches Critical S/4HANA, Commerce Vulnerabilities 2026-05-12 at 15:18 By Ionut Arghire The flaws could allow attackers to inject malicious code, leading to information disclosure and code execution. The post SAP Patches Critical S/4HANA, Commerce Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
SAP Patches Critical S/4HANA, Commerce Vulnerabilities Read More »
5 Ways To Keep AI In Check 2026-05-12 at 15:02 By Prateek Temkar How to protect productivity without slowing down innovation This article is an excerpt from SECURITY.COM View Original Source
5 Ways To Keep AI In Check Read More »
Citrix moves secure access to a flexible, credit-based consumption model 2026-05-12 at 15:02 By Industry News Citrix has introduced Citrix Platform Flex, a secure access platform that combines software, management, and infrastructure to deliver managed desktops, enterprise browsing, and zero-trust access in a single offering. Built around workforce personas, Platform Flex replaces one-size-fits-all licensing with
Citrix moves secure access to a flexible, credit-based consumption model Read More »
Six new dnsmasq vulnerabilities open the door to DNS cache poisoning, local root 2026-05-12 at 14:18 By Sinisa Markovic Recent disclosures have revealed that open-source networking tool dnsmasq is grappling with a serious set of vulnerabilities. The problems span memory safety and input validation, with researchers identifying heap buffer overflows, heap corruption, and code execution
Six new dnsmasq vulnerabilities open the door to DNS cache poisoning, local root Read More »
Is The SOC Obsolete, And We Just Haven’t Admitted It Yet? 2026-05-12 at 14:18 By Danelle Au Many AI-first enterprises have already embraced sovereign architectures for general AI initiatives; cybersecurity—and the SOC—should be next. The post Is The SOC Obsolete, And We Just Haven’t Admitted It Yet? appeared first on SecurityWeek. This article is an
Is The SOC Obsolete, And We Just Haven’t Admitted It Yet? Read More »