Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
CISA has issued updated SBOM guidance with several dozen changes to SBOM fields to make them more comprehensive. However, some critics argue that the framework still lacks real risk-management improvements.
CISA has issued updated SBOM guidance with several dozen changes to SBOM fields to make them more comprehensive. However, some critics argue that the framework still lacks real risk-management improvements.
The Record reports CISA warns of a spike in attacks on water systems as Minnesota incidents are investigated. Attackers target water treatment facilities through exposed remote access and default credentials.
The Cybersecurity and Infrastructure Security Agency said in a public alert on Thursday that facilities should “remove publicly exposed PLCs and other operational technology.
BleepingComputer reports a hacker used DeepSeek AI to autonomously attack vulnerable servers without human intervention. The AI identified and exploited vulnerabilities in real-time demonstrating AI-powered offensive capabilities.
A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement.