Enterprise Security Tech

A high-severity vulnerability in the TDengine time-series database can allow an unauthenticated remote attacker to crash a server with a single malformed packet, according to research disclosed by Ridge Security. The flaw, tracked as CVE-2026-42542, affects TDengine versions 3.4.0.0 through 3.4.1.5 and is fixed in version 3.4.1.6. It stems from an integer underflow in the database's handling of a length field in its custom binary RPC protocol on TCP port 6030. No credentials,

A newly documented Windows malware loader uses the encrypted Tox peer-to-peer messaging network for command and control, making it less dependent on domains that defenders can seize or block. Varonis Threat Labs discovered AvisLoader on an exposed staging server alongside a ClickFix lure, supporting tools and a web-based command center. The loader was also advertised for sale on a cybercrime forum, according to the researchers. The observed delivery chain used a fake document

NVIDIA has introduced the Open Agent Safety Platform, an open software platform and reference architecture intended to secure autonomous AI systems from testing through deployment. The initiative is designed to connect controls across the agent runtime, underlying compute infrastructure and physical systems that execute agent-directed tasks. More than 100 companies are participating, according to NVIDIA and launch partner SentinelOne, including Netskope and 1Password. NVIDIA'

Generative AI removed nearly all the friction from writing code. Work that took days now takes minutes. That's a real gain. But the processes we use to confirm that code actually works, and works safely, haven't moved at anywhere near the same speed.

Team Cymru researchers uncovered more than 80,000 LLM relay servers that can conceal the location and identity of users accessing frontier AI models.

DataDome says malicious bot traffic rose 124% as agentic browsers and commodity proxy networks made automated attacks cheaper and more human-like.