Canada Needs Nationalized, Public AI Canada has a choice to make about its artificial intelligence future. The Carney administration is investing $2-billion over five years in its Sovereign AI Compute …
AI Security Roundup
Daily AI security roundup covering malware, vulnerabilities, defensive research, cloud risk, and incident response signals from trusted technical sources.
** Ravie Lakshmanan ** Mar 11, 2026 DevSecOps / AI Security A threat actor known as UNC6426 leveraged keys stolen following the supply chain compromise of the nx npm package last year to completely …
Microsoft on Tuesday released patches for a set of 84 new security vulnerabilities affecting various software components, including two that have been listed as publicly known. Of these, eight are …
A new vulnerability (CVE-2026-0866) has been published : Zombie Zip . It’s a method to create a malformed ZIP file that will bypass detection by most anti-virus engines. The malformed ZIP file …
ai-security
EN
Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets
Cybersecurity researchers have discovered five malicious Rust crates that masquerade as time-related utilities to transmit .env file data to the threat actors. The Rust packages, published to …
ai-security
EN
ISC Stormcast For Wednesday, March 11th, 2026 https://isc.sans.edu/podcastdetail/9844, (Wed, Mar 11th)
ISC Stormcast For Wednesday, March 11th, 2026 https://isc.sans.edu/podcastdetail/9844
Microsoft Corp. today pushed security updates to fix at least 77 vulnerabilities in its Windows operating systems and other software. There are no pressing “zero-day” flaws this month (compared to …
Microsoft Patch Tuesday March 2026 Published 2026-03-10. Last Updated 2026-03-10 17:33:47 UTC by Johannes Ullrich (Version: 1) 0 comment(s) Microsoft today released patches for 93 vulnerabilities, …
Cybersecurity researchers have discovered a new malware called KadNap that’s primarily targeting Asus routers to enlist them into a botnet for proxying malicious traffic. The malware, first …
** Ravie Lakshmanan ** Mar 10, 2026 Network Security / Vulnerability Cybersecurity researchers are calling attention to a new campaign where threat actors are abusing FortiGate Next-Generation …
** Ravie Lakshmanan ** Mar 10, 2026 Database Security / Vulnerability Cybersecurity researchers have disclosed nine cross-tenant vulnerabilities in Google Looker Studio that could have permitted …
You can’t control when the next critical vulnerability drops. You can control how much of your environment is exposed when it does. The problem is that most teams have more internet-facing …
** The Hacker News ** Mar 10, 2026 Artificial Intelligence / Threat Detection Artificial Intelligence (AI) is no longer just a tool we talk to; it is a tool that does things for us. These are called …
** Ravie Lakshmanan ** Mar 10, 2026 Cyber Espionage / Threat Intelligence The Russian state-sponsored hacking group tracked as APT28 has been observed using a pair of implants dubbed BEARDSHELL and …
Jailbreaking the F-35 Fighter Jet Countries around the world are becoming increasingly concerned about their dependencies on the US. If you’ve purchase US-made F-35 fighter jets, you are dependent on …
** Ravie Lakshmanan ** Mar 10, 2026 Cloud Security / API Security Salesforce has warned of an increase in threat actor activity that’s aimed at exploiting misconfigurations in publicly …
ai-security
EN
CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited
** Ravie Lakshmanan ** Mar 10, 2026 Vulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added three security flaws to its Known Exploited …
ai-security
EN
ISC Stormcast For Tuesday, March 10th, 2026 https://isc.sans.edu/podcastdetail/9842, (Tue, Mar 10th)
ISC Stormcast For Tuesday, March 10th, 2026 https://isc.sans.edu/podcastdetail/9842
ai-security
EN
ISC Stormcast For Monday, March 9th, 2026 https://isc.sans.edu/podcastdetail/9840, (Mon, Mar 9th)
ISC Stormcast For Monday, March 9th, 2026 https://isc.sans.edu/podcastdetail/9840
ai-security
EN
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure
** Ravie Lakshmanan ** Mar 09, 2026 Threat Intelligence / Web Security High-value organizations located in South, Southeast, and East Asia have been targeted by a Chinese threat actor as part of a …
New Attack Against Wi-Fi It’s called AirSnitch : Unlike previous Wi-Fi attacks, AirSnitch exploits core features in Layers 1 and 2 and the failure to bind and synchronize a client across these and …
Last week, two related RFCs were published: RFC 9848 : Bootstrapping TLS Encrypted ClientHello with DNS Service Bindings RFC 9849 : TLS Encrypted Client Hello These TLS extensions have been discussed …
ai-security
EN
Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data Theft
Two Google Chrome extensions have turned malicious after what appears to be a case of ownership transfer , offering attackers a way to push malware to downstream customers, inject arbitrary code, and …
** The Hacker News ** Mar 09, 2026 Endpoint Security / Security Operations Mid-market organizations are constantly striving to achieve security levels on a par with their enterprise peers. With …
ai-security
EN
⚡ Weekly Recap: Qualcomm 0-Day, iOS Exploit Chains, AirSnitch Attack & Vibe-Coded Malware
** Ravie Lakshmanan ** Mar 09, 2026 Cybersecurity / Hacking Another week in cybersecurity. Another week of “you’ve got to be kidding me.” Attackers were busy. Defenders were busy. …