Agentic remediation automates the mobilization phase of CTEM to eliminate vulnerability backlogs and achieve Shift Zero by enabling autonomous, low-risk fixes under human supervision.
Trigona ransomware operators are using a custom-built command-line exfiltration utility to steal data faster and avoid triggering security solutions that flag publicly available tools like Rclone and MegaSync.
Version 2026.4.0 of the Bitwarden CLI NPM package was found to contain malicious code capable of stealing credentials and secrets from victim machines, with links to recent attacks on Checkmarx and the Shai-Hulud worm campaigns.
CrowdStrike has addressed a critical unauthenticated path traversal bug in its LogScale product, while Tenable patched a high-severity flaw in its Nessus scanner that could allow arbitrary file deletion and code execution with System privileges.
A White House memo from chief science adviser Michael Kratsios accuses Chinese entities of industrial-scale campaigns to extract capabilities from U.S. AI models, while a bipartisan House bill seeks sanctions against foreign actors engaged in model extraction attacks.
CISA has updated Emergency Directive 25-03 to warn that patching vulnerable Cisco firewall devices does not remove the Firestarter backdoor, which infected at least one US federal agency through zero-day exploitation.
NATO's Locked Shields 2026 wrapped up on Friday, bringing together more than 4,000 cybersecurity professionals from 41 countries to defend critical infrastructure against simulated live-fire cyberattacks.
Itron, Inc., a Washington-based utility technology firm serving 7,700 customers across 100 countries, has disclosed that an unauthorized third party breached certain internal systems on April 13, 2026.
As agentic AI systems capable of autonomous action take center stage at RSA Conference 2026, cybersecurity experts argue the most effective defense strategy is straightforward: if it can act, treat it like an identity.
Over 10,500 Zimbra Collaboration Suite servers exposed to the internet are still unpatched against CVE-2025-48700, an actively exploited cross-site scripting flaw. CISA has added the vulnerability to its Known Exploited Vulnerabilities catalog and ordered federal agencies to patch within three days.