News
Ghost breaches: How AI-mediated narratives have become a new threat vector
1+ day, 9+ hour ago (416+ words) By Mary Catherine Sullivan and Brett Callow [Ed. note: The authors are withholding full specifics about the incidents because full disclosure could cause harm, yet Cyber Scoop confirmed with the authors that the incidents did in fact take place]. A…...
NIST narrows scope of CVE analysis to keep up with rising tide of vulnerabilities
2+ day, 3+ hour ago (636+ words) The federal agency tasked with analyzing security vulnerabilities is overwhelmed as it and other authorities struggle to keep pace with a flood of defects that grows every year. The National Institute of Standards and Technology announced Wednesday that it has…...
Open AI expands Trusted Access for Cyber program with new GPT 5. 4 Cyber model
2+ day, 9+ hour ago (249+ words) Open AI said it is expanding its Trusted Access for Cyber program to "thousands of individuals and organizations," who will use the company's technology to root out bugs and vulnerabilities in their products. The program will also incorporate" GPT 5. 4 Cyber,…...
Microsoft drops its second-largest monthly batch of defects on record
3+ day, 2+ hour ago (647+ words) By my count, this is the second-largest monthly release in Microsoft's history," Dustin Childs, head of threat awareness at Trend Micro's Zero Day Initiative, wrote in a blog post Tuesday. Microsoft didn't explain why its monthly batch of patches grew…...
Space Force official touts AI's impact on cyber compliance
3+ day, 3+ hour ago (493+ words) Seth Whitworth, who is both acting Associate Deputy Chief of Space Operations for Cyber and Data and acting chief information security officer, said he believes AI tools are shifting the way defenders review cyber risk, both for individual systems and…...
Here's how cyber heavyweights in the US and UK are dealing with Claude Mythos
3+ day, 21+ hour ago (793+ words) A joint report from the Cloud Security Alliance (CSA), the SANS Institute and the Open Worldwide Application Security Project (OWASP) concludes that in the near term, organizations are "likely to be overwhelmed" by threat actors using AI to find and…...
Open AI's Mac apps needs an update thanks to the Axios hack
4+ day, 2+ hour ago (392+ words) Open AI updated its security certificates and is requiring all mac OS users to update to the latest versions after determining its products, along with many others, were impacted by a widespread supply-chain attack that briefly infected a popular open-source…...
What does industry think of the White House's cybersecurity strategy?
1+ week, 9+ hour ago (174+ words) Cyber Scoop Bob Ackerman (founder of Allegiance Cyber and a partner at Data Tribe) joins Safe Mode to talk about where the new national cybersecurity strategy is trying to push the industry'especially around more open, coordinated "active disruption" with government…...
Why is the timeline to quantum-proof everything constantly shrinking?
1+ week, 1+ day ago (734+ words) When Google announced last month it was moving up its own internal timeline for migrating to quantum-resistant forms of encryption, it started a broader conversation in the cybersecurity and cryptography communities: Just what was pushing one of the largest tech…...
Tech giants launch AI-powered "Project Glasswing" to identify critical software vulnerabilities
1+ week, 3+ day ago (224+ words) Major technology companies have joined forces in an effort to use advanced artificial intelligence to identify and address security flaws in the world's most critical software systems, marking a significant shift in how the industry approaches cybersecurity threats. Anthropic will…...