In the last 24 hours: Oracle’s October CPU ships 374 fixes (many unauth RCEs); Pwn2Own Ireland logs 34 new zero-days on Day 1; CISA flags Windows SMB Client and Kentico bugs as exploited; and a high-severity Rust async-tar flaw (“TARmageddon”) emerges. Plus, the U.N. readies a global cybercrime pact for signature.
Today: researchers break AMD SEV-SNP integrity (“RMPocalypse”), Windows 10 hits end-of-support while still powering a large share of endpoints, and Visa launches a protocol to validate AI shopping agents. The UK’s NCSC warns “highly significant” incidents are up 50% year over year.
Today’s briefing spotlights serious vulnerabilities in Google’s Gemini assistant, Microsoft’s new unified AI security stack, and a CAISI evaluation of DeepSeek’s security weaknesses. Broader context from WEF emphasizes how AI is increasingly integral to both offense and defense in cybersecurity.
A concise, fact-based update for security and risk professionals. This post follows the combined format: core technical stories first, then extended context for governance and broader AI risks. 🔐 Core Security Intelligence 1) SAP & OpenAI launch “OpenAI for Germany”… Read More ›
A concise, fact-based update for security and risk professionals. Today’s items focus on workload security, governance burdens, and zero-trust edge protections. 🔍 New Stories 1) Tigera Calico adds protections for AI workloads in Kubernetes clusters What’s new:Tigera announced new features… Read More ›