Microsoft’s AI Red Team has identified seven previously undocumented failure modes in agentic AI systems after a year of intensive testing. These vulnerabilities—spanning prompt injection variants, tool manipulation, and autonomous decision-making flaws—represent systemic risks in AI agents that int
ISO 42001:2023, the world’s first AI management system standard, fundamentally changes how organizations must approach cloud-based AI data risk. This certification framework mandates comprehensive risk assessment, data governance, and accountability measures specifically designed for AI systems. Org
A sophisticated email compromise targeting a stock exchange executive’s Microsoft Outlook account remained undetected for five months, with attackers establishing persistent access to exfiltrate credentials and sensitive communications. The breach leveraged compromised credentials and stealthy inbox
A critical privilege escalation vulnerability (ZDI-26-328) has been discovered in ASUS Business Manager Service, allowing local attackers to elevate privileges to SYSTEM level through improper client-side authentication. The flaw affects enterprise deployments of ASUS management software and could e
DentaQuest, a major dental benefits administrator, disclosed a significant data breach affecting approximately 2.6 million individuals. The incident compromised sensitive personal and health information, including names, addresses, dates of birth, Social Security numbers, and dental treatment record
Brazilian food delivery giant iFood confirmed a data breach affecting approximately 1.2 million users, exposing personal information including names, phone numbers, email addresses, and partial payment data. The incident represents one of the largest data exposures in Brazil’s food delivery sector,
CISA has added a critical Remote Code Execution (RCE) vulnerability in the Magento Cache Warmer module to its Known Exploited Vulnerabilities (KEV) catalog. Tracked as CVE-2024-34102, this critical flaw allows unauthenticated attackers to execute arbitrary code on vulnerable e-commerce platforms. Fe
Cisco has released security patches for CVE-2026-20230, a critical SQL injection vulnerability in Unified Communications Manager (UCM) with a CVSS score of 9.8. The flaw allows unauthenticated remote attackers to execute arbitrary SQL queries and potentially gain complete system control. With proof-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Mirasvit’s Full Page Cache Warmer extension for Magento to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, identified as CVE-2024-34102, allows unauthenticated attackers to execute arb
The United Nations World Food Programme (WFP) has confirmed a significant data breach affecting approximately 600,000 Palestinian households in Gaza. The incident exposed sensitive beneficiary information including names, identification numbers, and family details of individuals relying on humanitar