News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI (opens The Hacker News in a new tab)
AI agents are moving into production faster than security teams can govern them. They are connecting to apps, handling data, calling APIs, and acting across business systems—often without the same controls applied to human users. According to Okta’s Global CISO Insights 2026 report, only 47% of...
-
Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent (opens The Hacker News in a new tab)
Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. "The implant installs the framework unchanged, then overwrites its SOUL.md...
-
London races ahead of the rest of the UK in effective AI adoption (opens IT Pro in a new tab)
While most firms in the region say AI is bringing greater efficiency and stronger innovation, only a quarter of those outside have made it part of their core processes and decision-making
-
NVIDIA wants AI agent safety enforced in silicon, not left to the agent (opens Help Net Security in a new tab)
NVIDIA has introduced an open software platform and a hardware-based reference design intended to keep AI agents within the limits set by the organizations that use them. The Open Agent Safety Platform includes OpenShell, software that controls what an agent can access, and Sentry, a watchdog in...
-
OpenAI Pauses Training Its Most Powerful Models After Rogue Agents Target Government (opens Wired in a new tab)
Sam Altman says the company “have not been as fast as we would have liked” at dealing with security breaches, after news of further incidents over the summer forces another temporary halt.
-
Ireland's DPC reports a 'significant' increase in AI-related engagements (opens IT Pro in a new tab)
The data protection authority said it's secured significant improvements in compliance and expects to see more cases involving agentic AI
-
“Drunk” AI is terrible at keeping secrets (opens Help Net Security in a new tab)
AI models taught to write like drunk people became easier to jailbreak and more likely to leak secrets shared in confidence. That is the finding of UNSW Sydney researchers Anudeex Shetty, Aditya Joshi and Salil Kanhere, published in their paper “In Vino Veritas and Vulnerabilities.” “The key...
-
DC Health Agency Exposes 400,000 Beneficiary Records (opens Security Week in a new tab)
The Medicaid IDs and other information of Medicaid and DC Healthcare Alliance beneficiaries were exposed. The post DC Health Agency Exposes 400,000 Beneficiary Records appeared first on SecurityWeek.
-
Space Lasers Are About to Get Their First Real Test Generating Energy (opens Wired in a new tab)
Startup Star Catcher is launching a system that, if successful, would be the first time energy has been beamed between two separate spacecraft.
-
Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign (opens Security Week in a new tab)
The extortion group has modified its exploit in new attacks targeting the PeopleSoft vulnerability CVE-2026-35273. The post Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign appeared first on SecurityWeek.
-
Maarten Verschuere on Why AI Adoption Will Fail Without Workforce Readiness (opens CTO Magazine in a new tab)
Technology Inclusion and Workforce Participation: This series explores how organizations are working to broaden participation in technology roles and decision-making. Rather than focusing on initiatives alone, it examines outcomes, how inclusion, access, and representation influence innovation...
-
New Mexico Jury Finds Facebook Liable for Deceiving Users About Privacy Protections (opens Security Week in a new tab)
A New Mexico jury has found Facebook liable for deceiving users about privacy protections on the platform. The post New Mexico Jury Finds Facebook Liable for Deceiving Users About Privacy Protections appeared first on SecurityWeek.
-
Best Apple Watch: Series 12, Ultra 4, and SE 3 (2026) (opens Wired in a new tab)
From the latest Ultra to last year’s SE, these are the Apple Watches worth considering.
-
I've Tested Over 100 Home Security Cameras. Here's Which to Buy (opens Wired in a new tab)
Keep an eye on home wherever you are with the best security cameras, including indoor and outdoor, subscription services, AI smarts, and local recording options.
-
Nvidia Unveils AI Agent Safety Platform With Hardware-Based Watchdog (opens Security Week in a new tab)
The platform combines open source software and a reference system design to keep AI agents within set boundaries. The post Nvidia Unveils AI Agent Safety Platform With Hardware-Based Watchdog appeared first on SecurityWeek.
-
NetScaler admins told to patch critical zero-days in ADC and Gateway now (opens CSO Online in a new tab)
Citrix NetScaler ADC and NetScaler Gateway users should take their systems offline and patch them immediately, they were told over the weekend, as news emerged of two critical unauthenticated remote code execution zero-day vulnerabilities in the products under active attack. “Monday will be too...
-
NetScaler admins told to patch critical zero-days in ADC and Gateway now (opens CSO Online in a new tab)
Citrix NetScaler ADC and NetScaler Gateway users should take their systems offline and patch them immediately, they were told over the weekend, as news emerged of two critical unauthenticated remote code execution zero-day vulnerabilities in the products under active attack. “Monday will be too...
-
AI Agents Are About to Flood the Workforce. No One’s Ready for It (opens Wired in a new tab)
Your next coworker might well be an AI agent—and will require a whole new model of workplace interactions.
-
Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772) (opens Help Net Security in a new tab)
Citrix has patched eight critical and high-severity vulnerabilities in NetScaler ADC and NetScaler Gateway, two of which (CVE-2026-88771, CVE-2026-88772) have been exploited in zero-day attacks to plant webshells on compromised devices. Rumors about their existence and active exploitation popped up...
-
MCP Is Creating Major Governance Gaps, Researchers Warn (opens Infosecurity Magazine in a new tab)
Ox Security found security shortcomings in analysis of over 15,000 MCP servers