AI Security Roundup

I’m always looking for new ways of manipulating the data captured by my DShield sensor [ 1 ]. This time I used Gephi [ 2 ] and Graphiz [ 3 ] a popular and powerful tool for visualizing and …

ISC Stormcast For Thursday, January 8th, 2026 https://isc.sans.edu/podcastdetail/9758

The Wegman’s Supermarket Chain Is Probably Using Facial Recognition The New York City Wegman’s is collecting biometric information about customers. Tags: biometrics , face recognition , privacy , …

** Jan 08, 2026 ** Ravie Lakshmanan Privacy / Artificial Intelligence Artificial intelligence (AI) company OpenAI on Wednesday announced the launch of ChatGPT Health, a dedicated space that allows …

** Jan 08, 2026 ** Ravie Lakshmanan Vulnerability / Container Security Cybersecurity researchers have disclosed details of multiple critical-severity security flaws affecting Coolify , an open-source, …

AI & Humans: Making the Relationship Work Leaders of many organizations are urging their teams to adopt agentic AI to improve efficiency, but are finding it hard to achieve any benefit. Managers …

A Cyberattack Was Part of the US Assault on Venezuela We don’t have many details : President Donald Trump suggested Saturday that the U.S. used cyberattacks or other technical capabilities to cut …

** Jan 08, 2026 ** Ravie Lakshmanan Cybersecurity / Hacking News The internet never stays quiet. Every week, new hacks, scams, and security problems show up somewhere. This week’s stories show …

Chainguard, the trusted source for open source, has a unique view into how modern organizations actually consume open source software and where they run into risk and operational burdens. Across a …

** Jan 08, 2026 ** Ravie Lakshmanan Malware / Cloud Security Cybersecurity researchers have discovered three malicious npm packages that are designed to deliver a previously undocumented malware …

** Jan 08, 2026 ** Ravie Lakshmanan Network Security / Vulnerability Cisco has released updates to address a medium-severity security flaw in Identity Services Engine (ISE) and ISE Passive Identity …

** Jan 08, 2026 ** Ravie Lakshmanan Malware / Threat Intelligence A China-nexus threat actor known as UAT-7290 has been attributed to espionage-focused intrusions against entities in South Asia and …

** Jan 08, 2026 ** Ravie Lakshmanan Malware / Financial Crime Cybersecurity researchers have disclosed details of a new campaign that uses WhatsApp as a distribution vector for a Windows banking …

Recently, a new “breed” of IP-based KVM devices has been released. In the past, IP-based KVM devices required dedicated “server-grade” hardware using IPMI. They often cost …

Featuring: Cybersecurity is being reshaped by forces that extend beyond individual threats or tools. As organizations operate across cloud infrastructure, distributed endpoints, and complex supply …

ISC Stormcast For Tuesday, January 6th, 2026 https://isc.sans.edu/podcastdetail/9754

** Jan 05, 2026 ** Ravie Lakshmanan Hacking News / Cybersecurity The year opened without a reset. The same pressure carried over, and in some places it tightened. Systems people assume are boring or …

** Jan 06, 2026 ** The Hacker News SaaS Security / Enterprise Security The Invisible Half of the Identity Universe Identity used to live in one place - an LDAP directory, an HR system, a single IAM …

** Jan 05, 2026 ** Ravie Lakshmanan Cyber Espionage / Windows Security The Russia-aligned threat actor known as UAC-0184 has been observed targeting Ukrainian military and government entities by …

** Jan 06, 2026 ** Ravie Lakshmanan Vulnerability / DevOps A new critical security vulnerability has been disclosed in n8n, an open-source workflow automation platform, that could enable an …

** Jan 05, 2026 ** Ravie Lakshmanan IoT Security / Mobile Security The botnet known as Kimwolf has infected more than 2 million Android devices by tunneling through residential proxy networks, …

** Jan 06, 2026 ** Ravie Lakshmanan Vulnerability / Web Security Users of the " @adonisjs/bodyparser " npm package are being advised to update to the latest version following the disclosure …

Telegram Hosting World’s Largest Darknet Market Wired is reporting on Chinese darknet markets on Telegram. The ecosystem of marketplaces for Chinese-speaking crypto scammers hosted on the messaging …

** Jan 05, 2026 ** Ravie Lakshmanan Threat Intelligence / Windows Security Cybersecurity researchers have disclosed details of a new Python-based information stealer called VVS Stealer (also styled as …

ISC Stormcast For Monday, January 5th, 2026 https://isc.sans.edu/podcastdetail/9752