Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Cybersecurity firm F6 disclosed a large-scale fraud campaign operating since 2017 that clones websites of major Russian companies (fertilizer manufacturers, petrochemical companies, metallurgical plants, logistics operators, and banks) to steal advance payments from international firms. The fake websites, available in English, French, Arabic, and Russian, copy content from legitimate sites and use lookalike domain names.
The article discusses the impact of AI (specifically Anthropic's Mythos model) on vulnerability management, arguing that while AI compresses exploit timelines and accelerates attacker capabilities, the fundamental problem remains ineffective prioritization. Most security teams were not winning the prioritization battle before Mythos, and compressed timelines simply raise the cost of existing failures.
The article discusses the impact of AI (specifically Anthropic's Mythos model) on vulnerability management, arguing that while AI compresses exploit timelines and accelerates attacker capabilities, the fundamental problem remains ineffective prioritization. Most security teams were not winning the prioritization battle before Mythos, and compressed timelines simply raise the cost of existing failures.
CISA released updated 2026 guidance on minimum elements for Software Bill of Materials to strengthen software supply chain security. The new standards expand SBOM requirements for dependency tracking and vulnerability data.
CISA, along with other agencies, released the 2026 Minimum Elements for a Software Bill of Materials (SBOM), updating the 2021 NTIA document. The guidance incorporates stakeholder feedback and reflects current SBOM tools, serving as a key building block for software security and supply chain risk management.
CISA, the National Security Agency, the Federal Bureau of Investigation, and international partners released joint guidance, 2026 Minimum Elements for a Software Bill of Materials (SBOM), that updates and replaces the minimum elements for an SBOM published by the National Telecommunications...