Most Recent
1Password launches a way for AI agents to log in on your behalf without seeing your password
The new feature allows agents to log into a customer's personal accounts while still protecting the private credentials that secure those accounts.
The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat
Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching. Nobody reviewed its access. Nobody owns it. If an employee had that much reach with that little oversight, you would call it an insider risk. So why do we still call the agent a productivity tool?
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets anyone who can log in to the orchestrator, even with a read-only customer account, gain operator privileges, the top level of control over it. For
Canva releases its first image generation model
Canva is making its new image model available to all users, promising better, more customizable performance at lower costs.
OpenAI makes its Jev competitor widely available as decision model competition heats up
OpenAI is launching its decision model to the world. Can it compete with the original Jev?
Microsoft’s Mustafa Suleyman says its AI outperforms doctors on hard cases as he chases ‘medical superintelligence’
Microsoft’s new AI diagnostic system beat generalist doctors on hard cases, according to a study in Science. But most of the improvement seems to come from the AI models underneath, not from Microsoft’s system itself.
Former OpenAI science lead launches Warp Science to automate wet labs with robots
Wearing cameras and sensor gloves, the startup’s human chemists will train robots to perform various lab tasks.
eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable
eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private keys of eight of its intermediate CA certificates. eMudhra said it will replace affected customers' certificates with free ones from partners, though its
Samsung brings 14 refurbished Galaxy S24, S25 smartphones to Amazon in US, prices start at $489
Samsung has expanded its Certified Re-Newed programme to Amazon.com, offering 14 refurbished Galaxy S24 and S25 models starting at $489. The phones feature genuine Samsung parts, new batteries, 147 quality checks and a one-year limited manufacturer warranty.
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More
This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's a lot to deal with in just a few days. And the week isn't even over yet. But those big headlines are only half the story. Stolen passwords, exposed