Arkose Labs adds session policies and Agent ID to Agent Trust Manager 
FBI and CISA warn of attacks on industrial refrigeration systems 
Storm-2603 SharePoint intrusion used an in-memory IIS implant 
Cisco and WatchGuard Patch Flaws as SonicWall GMS Issues Remain Unfixed 
CERT-In warns Indian fintechs of escalating AI-assisted attacks 
Truffle Security launches program to revoke 1.4 million exposed secrets
Truffle Security has launched a free initiative called the Secrets Revocation Program to help the issuers of API keys revoke...
Vercel adds device-bound sessions and opens AI security review to public beta
Vercel is rolling out Device Bound Session Credentials (DBSC) to help protect user sessions from replay after browser-cookie theft, while...
Unit 42 outlines espionage, extortion and AI-enabled threat activity
Unit 42’s November 2, 2026 threat intelligence overview describes three activity areas for security teams to monitor: cyberespionage, financially motivated...
Cyberhaven introduces controls for tracking AI agents’ use of company data
Cyberhaven has introduced Agentic Data Security (ADS), a product module intended to help organizations monitor and control how AI agents...
Fake OpenAI, SpaceX and Anthropic invitations target Microsoft and Google accounts
Fake invitations to events associated with OpenAI, SpaceX and Anthropic are being used to draw employees into phishing attacks, according...
Agencies urge organizations to assess vendor readiness for post-quantum cryptography
A joint guidance effort from the U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Australian Signals Directorate’s Australian Cyber Security...
Rising security budgets leave gaps in AI oversight, DNSFilter survey finds
Many organizations are increasing cybersecurity spending, but stronger budgets have not resolved uncertainty about how artificial intelligence tools are being...
Northstar Security Emerges with $7M to Tackle ‘Toxic’ Risk Combinations via AI Agents
Security startup Northstar Security has officially exited stealth mode, announcing a $7 million seed funding round led by Wing Venture...
CISA Expands Known Exploited Vulnerabilities Catalog with Ivanti Connect Secure Flaws
Critical Updates for Ivanti Connect SecureThe Cybersecurity and Infrastructure Security Agency (CISA) has officially updated its Known Exploited Vulnerabilities (KEV)...
Investigating Dual-Path AD CS Intrusions: From Social Engineering to Certificate Abuse
Modern identity-based attacks are increasingly leveraging a sophisticated combination of social engineering and technical exploitation of Active Directory Certificate Services...