44 articles found
Research
A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit,' slipped past AI code reviewers CodeRabbit and Bugbot, which never open image files at all, then convinced a coding agent to read a repo's .env and write every secret into the code as a list of numbers. [...]
Research
On the heels of her recent honors as a Member of the Order of the British Empire (MBE), we take a look back at the events that shaped Ellis' advocacy on behalf of security researchers.
_Pattara_Alamy.jpg?width=720&quality=80&disable=upscale)
Research
If you're handling AI agents like a service account or API token, consider yourself behind. AI agents need a fundamentally different approach.
Research
Getting accurate visibility into IT and OT systems will be compounded by multivendor environments, misaligned update life cycles, and interoperability gaps.
Research
Instead of eliminating jobs for early-career cyber pros, AI is creating new opportunities for candidates with strong human decision-making skills.
Research
Companies are still experimenting with automated AI systems to find security weaknesses, but fewer are relying on the technology.
Research
One critical vulnerability, among many discovered by a researcher, could have allowed anyone to walk in and take over a national government portal.
Research
The National Institute of Standards and Technology (NIST) scaled back the number of CVEs it selects for in-depth analysis, but the move has produced mixed results, according to researchers.
Research
Teams are dealing with a truly dangerous problem — automation that works, but that no one understands.
Research
In this "Heard it From a CISO" video, Silverfort CISO John Paul Cunningham explains that AI in cybersecurity workflows is creating opportunities rather than eliminating jobs — and there are more ways than ever to break into this essential field.
Research
Planning ahead to defend against cyber threats is the work that keeps events uneventful.
Research
Rapid growth turned routine firewall logs into a security and budget liability. One CISO used artificial intelligence to filter what data truly belongs in the SIEM.
Research
Researchers say the highly effective social engineering technique is no longer the exception for malware attacks — it's now the rule.
Research
Improved institutional safeguards and stricter regulations have pushed the burdens of protection and risk reduction on to Australian businesses.
Research
A threat group researchers call "Armored Likho" has gained access to government agencies and electrical power entities in Russia, Brazil, and Kazakhstan.
Research
Varonis reported the flaw to Google in late 2025 and it has been addressed, but it reminds defenders to take a fresh look at their AI Infrastructure security.
Research
The world's digital testing ground plans to help people use AI agents for government purposes.
Research
The Latin American nation's cybersecurity plan — still in the expansion phase — has to survive its own knockout round during the FIFA World Cup.
Research
A new survey shows security leaders have an inflated sense of safety regarding their collaboration tools and platforms.
Research
The fate of a Ukrainian tax software company shows how modern cyber warfare can claim casualties far beyond the battlefield, and how businesses across the ocean still need to protect themselves.