Top Stories by Impact
When configuration becomes a vulnerability: Exploitable misconfigurations in AI apps
14 May 2026 · 14:20 UTC
Exposed UIs, weak authentication, and risky defaults could turn cloud-native AI apps on Kubernetes into potential targets by threat actors. Learn how exploitable misconfigurations…
Read full article →Kazuar: Anatomy of a nation-state botnet
14 May 2026 · 15:00 UTC
Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant development for years and continues to evolve in support of es…
Read full article →Kazuar: Anatomy of a nation-state botnet
14 May 2026 · 15:00 UTC
Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant development for years and continues to evolve in support of es…
Read full article →Cybersecurity
AI & Technology
Vendor Security
Microsoft Security
When configuration becomes a vulnerability: Exploitable misconfigurations in AI apps
Critical14 May 2026 · 14:20 UTC
Exposed UIs, weak authentication, and risky defaults could turn cloud-native AI apps on Kubernetes into potential targets by threat actors. Learn how exploitable misconfigurations lead to RCE and data leaks. The post Whe…
Read full article →Kazuar: Anatomy of a nation-state botnet
High14 May 2026 · 15:00 UTC
Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant development for years and continues to evolve in support of espionage-focused operations. Over time, K…
Read full article →Defense in depth for autonomous AI agents
14 May 2026 · 16:00 UTC
As AI agents gain autonomy, defense in depth must evolve, with application-layer design, identity, and human oversight at the center. The post Defense in depth for autonomous AI agents appeared first on Microsoft Securit…
Read full article →Microsoft Threat Intel
Kazuar: Anatomy of a nation-state botnet
High14 May 2026 · 15:00 UTC
Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant development for years and continues to evolve in support of espionage-focused operations. Over time, K…
Read full article →OpenAI News
How business operations teams use Codex
Yesterday · 00:00 UTC
See how business operations teams can use Codex to create initiative briefs, strategy updates, leadership decision packets, progress updates, and more from real work inputs.
Read full article →OpenAI and Malta partner to bring ChatGPT Plus to all citizens
Today · 00:00 UTC
OpenAI and Malta partner to expand AI access, offering ChatGPT Plus and training to help citizens build practical AI skills and use AI responsibly.
Read full article →Databricks brings GPT-5.5 to enterprise agent workflows
Yesterday · 00:00 UTC
Databricks uses GPT-5.5 for enterprise agent workflows after the model set a new state of the art on the OfficeQA Pro benchmark.
Read full article →AWS Security
The AWS AI Security Framework: Securing AI with the right controls, at the right layers, at the right phases
Yesterday · 17:38 UTC
TL;DR for busy executives The AWS AI Security Framework helps security leaders move fast and stay secure with AI. Security compounds from day 1 as workloads evolve from prototype to production to scale. Assess first. Req…
Read full article →Regional routing for AWS access portals: Implementing custom vanity domains for IAM Identity Center
14 May 2026 · 20:42 UTC
AWS IAM Identity Center provides a web-based access portal that gives your workforce a single place to view their AWS accounts and applications. With the recent launch of IAM Identity Center multi-Region replication, cus…
Read full article →Automating post-quantum cryptography readiness using AWS Config
14 May 2026 · 16:18 UTC
Migrating your TLS endpoints to Post-quantum cryptography (PQC) starts with understanding your current TLS endpoint inventory and posture. This post introduces the PQC Readiness Scanner — an automated tool that inventori…
Read full article →Palo Alto Unit 42
Gremlin Stealer's Evolved Tactics: Hiding in Plain Sight With Resource Files
Yesterday · 10:00 UTC
Unit 42 analyzes the evolution of Gremlin stealer. This variant uses advanced obfuscation, crypto clipping and session hijacking to compromise data. The post Gremlin Stealer's Evolved Tactics: Hiding in Plain Sight With…
Read full article →