Agentic remediation automates the mobilization phase of CTEM to eliminate vulnerability backlogs and achieve Shift Zero by enabling autonomous, low-risk fixes under human supervision.
France's national secure documents agency ANTS has confirmed a cyberattack detected on April 15, 2026, as a threat actor on hacker forums claims to be selling up to 19 million stolen citizen records.
Tyler Robert Buchanan, 24, of Dundee, Scotland, pleaded guilty to federal conspiracy and identity theft charges tied to a sweeping phishing and SIM-swapping campaign that netted more than $8 million in stolen cryptocurrency.
British national Tyler Robert Buchanan, 24, has pleaded guilty to wire fraud conspiracy and aggravated identity theft for his role in a 2022 SMS phishing campaign that targeted major tech firms and stole millions in cryptocurrency.
CISA expanded its Known Exploited Vulnerabilities catalog by eight flaws on Monday, including three newly flagged issues in Cisco Catalyst SD-WAN Manager, Kentico Xperience, and Zimbra Collaboration Suite.
Italy's data protection authority has fined Poste Italiane SpA and its digital payments subsidiary Postepay SpA a combined €12.5 million ($14.7 million) for unlawfully processing millions of users' personal data through invasive mobile app monitoring.
Check Point researchers uncovered a SystemBC proxy malware botnet of more than 1,570 hosts linked to an affiliate of the Gentlemen ransomware-as-a-service operation, with victims concentrated in corporate and organizational environments across multiple countries.
A Roblox cheat-seeking employee at Context.ai inadvertently installed Lumma Stealer in February, setting off a chain reaction that ultimately exposed Vercel customer credentials through compromised OAuth tokens and Google Workspace access.
The FTC is ramping up enforcement against AI-powered harms including nonconsensual deepfakes and voice cloning scams, with new legal authority under the Take It Down Act set to activate in May.
Pillar Security researchers discovered a vulnerability in Google's Antigravity AI developer tool that combined prompt injection with file-creation capabilities to bypass secure mode and grant attackers remote code execution.