Latest cybersecurity reporting from selected sources.

Government organizations are targeted by attackers who know agencies cannot afford disruption to public services

A new Silobreaker and SANS Institute paper examines the ‘Intelligence-Stakeholder Gap’ and what organizations must do to achieve business buy-in on threat intelligence

Study Finds Standard Safety Tests Miss Most Agentic AI ThreatsResearchers from Stanford, MIT, Carnegie Mellon and others found that most production AI agents are vulnerable to attacks that unfold across multi-step actions. The study warns that memory, tool access and agent coordination create failure modes traditional chatbot safety testing cannot see.

Analysis of Seized LockBit Data Suggests Victims Who Pay Enjoy More Media CoverageBad news for any organization that's ever paid a ransom in a bid to avoid their breach coming to light, or for a promise from attackers to delete stolen data, with a study of seized LockBit data finding that victims who paid a ransom were more likely to see the attack get detailed in the media.

Robust Security Reviews of AI-Generated Code Required, Warns StudyGenies might grant magic wishes, but they inevitably come with consequences. Enter artificial intelligence coding assistants, which many developers say help them write code more quickly. New research shows that this productivity comes with a security cost, and must be mitigated.

Experts Aim to Probe How AI Models Reason, and Why It MattersAI researchers from OpenAI, Google DeepMind and Anthropic and others have urged deeper study into chain-of-thought monitoring, a technique to track how reasoning models arrive at answers. Their joint paper warns that transparency may erode if not prioritized.

CISO Jon France on Talent Shortage, Skills Gap in ISC2's 2024 Workforce StudyISC2’s 2024 Cybersecurity Workforce Study warns of a stagnant workforce, a growing skills gap and a shortage of 4.8 million cybersecurity professionals worldwide. Despite increasing demand, many organizations struggle to fill critical roles, hindered by budget constraints and skills shortages.

OpenAI, Meta and 8 Other Chatbots Use Disinformation Network as SourcePopular artificial intelligence chatbots are rife with Russian disinformation, warns NewsGuard, the rating system for news and information websites. The chatbots failed to recognize that sites such as "The Boston Times" or "The Houston Post" are Russian propaganda fronts.

A recent study by Wing Security found that 63% of businesses may have former employees with access to organizational data, and that automating SaaS Security can help mitigate offboarding risks.  Employee offboarding is typically seen as a routine administrative task, but it can pose substantial security risks, if not handled correctly. Failing to quickly and thoroughly remove access for

Interpol study warns that many threats are expected to increase