Latest

Security Operations

Linux Defenders Face Patch and Exploit Race

Tiffany Wang  •  May 12, 2026

Back-to-back kernel vulnerabilities in Linux has defenders scrambling to apply defenses in the age of quick turnaround time for hackers to exploit nascent flaws. "Dirty Frag" and "Copy Fail" kernel privilege escalation vulnerabilities became public knowledge within two weeks of each other.

Artificial Intelligence & Machine Learning

Why Cyber Insurance Faces New AI Liability Risks

Marianne Kolbasuk McGee  •  May 12, 2026

Healthcare organizations face growing pressure to reassess cyber insurance policies as cyberattacks disrupt patient care and AI tools introduce new liability risks. Josephine Wolff of Tufts University discusses how exclusions, compliance demands and AI-related uncertainty shape insurance decisions.

Endpoint Security

US FCC Lets Consumer Routers Receive Updates Through 2028

Greg Sirico  •  May 12, 2026

The U.S. Federal Communications Commission extended through Jan. 1, 2029, a waiver allowing foreign-made routers already approved for use in the United States to continue receiving updates. The agency earlier this year instituted a ban on foreign-made consumer routers, citing national security concerns.

Artificial Intelligence & Machine Learning

Microsoft CEO Takes the Stand in Musk's OpenAI Trial

Jennifer Lawinski  •  May 12, 2026

Microsoft CEO Satya Nadella testified in the Musk v. Altman trial that Elon Musk never raised concerns about Microsoft's $13 billion OpenAI investment or the nonprofit-to-for-profit conversion. Nadella called the 2023 board crisis that ousted CEO Sam Altman "amateur city."

Frame Security Debuts With $50M for Human-Centric Protection

Michael Novinson  •  May 12, 2026

Frame Security, founded by former Wiz product and sales leader Tal Shlomo, emerged from stealth with $50 million to build AI-generated cyber training and simulations designed to prepare employees for phishing, deepfakes, voice cloning and other personalized social engineering attacks.

Artificial Intelligence & Machine Learning

OpenAI Unlocks Cybersecurity Model for Europe

David Meyer  •  May 12, 2026

OpenAI is stepping up to do what arch-rival Anthropic still won't. The AI firm will give European authorities and companies access to its new vulnerability-finding AI model, so they can beef up their cybersecurity.

Artificial Intelligence & Machine Learning

AI-Built Zero-Day Nearly Powered Mass Attack

Rashmi Ramesh  •  May 12, 2026

A cybercriminal group came close to launching a mass attack earlier this year, armed with a software exploit that an AI model had built from scratch, said Google researchers. Google said it worked with the affected vendor to patch the flaw before an attack could be launched.

Fraud Management & Cybercrime

Hackers Hid Inside Major UK Water Utility for Nearly 2 Years

Chris Riotta  •  May 11, 2026

A British regulator said a major water sector organization failed to use establish cybersecurity safeguards to secure sensitive data, allowing hackers to use a phishing campaign to gain persistence, steal records and expose more than 630,000 sensitive records.

Fraud Management & Cybercrime

Tables Turned: Gentlemen Ransomware Group Suffers Data Leak

Mathew J. Schwartz  •  May 11, 2026

Ransomware group The Gentlemen, a relative newcomer to the cybercrime scene, suffered a leak of its internal communications, revealing previously non-public victims, a variety of tactics, techniques and tools, and a relentless focus on popping backup and storage infrastructure.

Artificial Intelligence & Machine Learning

AI Researchers Target SIEM Migration Bottleneck

Rashmi Ramesh  •  May 11, 2026

Researchers developed an AI framework that converts threat detection rules between major SIEM platforms including Splunk, Microsoft Sentinel and QRadar. The system uses LLMs and automated validation steps to preserve detection logic during migrations that often require months of manual work.

Cybercrime

Cops Shutter Rebooted German Language Cybercrime Market

Mathew J. Schwartz  •  May 11, 2026

Spanish police have arrested a German national suspected of a string of cybercrime offenses, including remotely administering from the sunny island of Mallorca a relaunched version of "Crimenetwork," a German-language cybercrime market for stolen data, forged documents and drugs.

►

Managed Detection & Response (MDR)

Hackers Don't Sleep. Neither Should Your Defense

Geetha Nandikotkur  •  May 11, 2026

Attackers now use AI to compress months of reconnaissance into hours, forcing enterprises to rethink cyber defense strategies, says Sunil Sharma of Sophos. He discusses why AI-augmented MDR, faster response times and human-led threat hunting are becoming essential for cyber resilience.