Security Week

1. Sysdig Adds Runtime Security and Governance for AI Agents

   Sysdig’s platform uses runtime visibility to track AI agent actions and block risky behavior before it reaches production systems.

   The post Sysdig Adds Runtime Security and Governance for AI Agents appeared first on SecurityWeek.

2. Barracuda ESG Authentication Bypass Flaw Opens Path to Root

   An authentication bypass and a command injection flaw can be chained for root access on Barracuda’s Email Security Gateway appliances.

   The post Barracuda ESG Authentication Bypass Flaw Opens Path to Root appeared first on SecurityWeek.

3. Agentic Data Security Firm Sentra Raises $150 Million

   The company will invest in agentic data security capabilities and expand its go-to-market organization.

   The post Agentic Data Security Firm Sentra Raises $150 Million appeared first on SecurityWeek.

4. AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks

   Hackers have been harvesting AI access tokens and have been using AI-assisted offensive tools to automate attacks.

   The post AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks appeared first on SecurityWeek.

5. Canadian Extradited to US Over Cryptomining Hacks on University Supercomputers

   A federal grand jury indicted two Canadian men for hijacking university supercomputers to secretly mine Electroneum cryptocurrency.

   The post Canadian Extradited to US Over Cryptomining Hacks on University Supercomputers appeared first on SecurityWeek.

6. Malicious cPGuard Updates Served in OpsShield Supply Chain Attack

   Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions.

   The post Malicious cPGuard Updates Served in OpsShield Supply Chain Attack appeared first on SecurityWeek.

7. Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical

   The browser update resolves dozens of memory safety bugs and incorrect/missing authorization issues.

   The post Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical appeared first on SecurityWeek.

8. Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist

   Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.

   The post Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist appeared first on SecurityWeek.

9. North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack

   In recent months, North Korea has accelerated its weapons tests in a likely bid to increase its leverage in potential diplomacy with the US.

   The post North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack appeared first on SecurityWeek.

10. Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million

    A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff.

    The post Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million appeared first on SecurityWeek.