Accenture lost an FBI contract after a missed security patch exposed sensitive employee data, raising serious concerns over op security.

IBM has disclosed 25 vulnerabilities in Langflow OSS, affecting versions 1.0.0 through 1.12.2. Two of these are critical flaws that allow unauthenticated remote code execution.

Four Apache Struts vulnerabilities outlined in recent advisories expose affected applications to risks such as remote code execution, denial of service, and cross-user data disclosure.

Google has expanded Android Advanced Protection with six security enhancements targeting spyware investigations, malicious USB connections.

A former infrastructure engineer has been sentenced to 32 months in federal prison for damaging his employer’s computer network and demanding a ransom in Bitcoin.

Welcome to Day One of Pwn2Own Ireland 2026! Today, 21 entries took the Pwn2Own stage to target multiple categories - including multiple Samsung attempts and our first Pixel entry. Follow the action live! We’ll be posting real-time updates and results throughout…

A coalition is urging CISA to issue a binding operational directive focused on federal operational technology security as AI elevates cyber threats.

Cling, an IoT botnet that disguises operator commands as Google STUN replies, blending malicious communications into routine NAT traversal traffic.

US critical infrastructure faces an operational technology threat that extends beyond civilian service outages.

On October 5, the Federal Bureau of Investigation (FBI) terminated an Accenture employee's contract after a security breach exposed sensitive information belonging to thousands of workers, according to Reuters.

A Russian-speaking Gentlemen ransomware affiliate used the Model Context Protocol (MCP) to execute commands during live intrusions.

Meta and Microsoft are reducing employee reliance on Anthropic's Claude AI while promoting their own coding assistants, according to an October 5 report by The Information.

An Iranian state-aligned threat actor impersonated Dubai Airports recruiters to deliver weaponized coding assessments to software engineers.

Microsoft released emergency updates for Exchange Server to fix CVE-2026-96940, a flaw that can let attackers gain higher privileges.

AppViewX, the leading identity security company built for the AI-powered and post-quantum enterprise, today expanded capabilities for Agent Identity Security, a solution enabling enterprises to discover every agent, whether sanctioned or shadow; govern their…

Criminal IP by AI SPERA, a cyber threat intelligence platform delivering decision-ready intelligence and attack surface visibility to security teams worldwide, will participate in GovWare 2026 in Singapore.

Aembit, the identity control plane for AI agents, today announced support for securing personal agents’ access to enterprise environments, available immediately to existing customers at no additional cost.

Learn how CISOs can mitigate cybersecurity risks and increase resilience in the age of AI-powered vulnerability management.

You can subscribe to Cisco RSS feeds to have content delivered directly to your devices or browser.

Enterprises are rethinking their physical spaces to welcome AI while boosting human connection