Enterprise Security Tech

A Security has released ARENA, an open source framework designed to measure what autonomous AI agents can accomplish during offensive cybersecurity operations. Available under the MIT license, ARENA combines a security capability framework, vulnerable application generator, and evaluation system. Its goal is to help organizations compare complete AI security platforms instead of relying on model rankings or vendor-reported results. The release follows Booz Allen’s Cyber Weapo

Healthcare technology provider Veradigm has disclosed a data breach in which attackers used credentials stolen from a third-party vendor to access and copy sensitive patient information. The Chicago-based company, formerly known as Allscripts Healthcare Solutions, said the incident affected a limited number of customers and did not disrupt its operations. Veradigm supplies electronic health record, e-prescribing, patient engagement, practice management, and revenue cycle soft

This guest article was contributed by Alastair Parr, CTO at Spur Organizations have made significant progress in strengthening authentication and securing workforce and customer access. Identity verification, multifactor authentication, device intelligence, behavioral analytics, fraud scoring, bot management, and conditional access policies have all made it harder for attackers to gain access using stolen credentials alone. Identity remains a valuable target, though, and atta

A newly released proof-of-concept exploit suggests Microsoft’s September 2026 security update may not have fully resolved ShieldBreak, a Windows Defender vulnerability that can allow attackers to access sensitive files with SYSTEM privileges. Security researcher Nightmare Eclipse published the new exploit, called ShieldCrash, on GitHub only days after Microsoft issued its ShieldBreak fix. According to the researcher, the proof of concept can read arbitrary files with the high

Cybercriminals are disguising sophisticated malware campaigns as routine recruiting outreach, using fake job descriptions and interview documents to compromise Windows computers with a single click. New research from Cyderes’ Howler Cell threat intelligence team details two separate nine-stage attack chains that exploit the trust surrounding online recruitment. Although the campaigns appear to involve different operators, both use fileless malware, hidden persistence and secu

Meta’s $18 billion settlement with 48 U.S. states could force social media platforms to rethink how they identify underage users without turning age verification into another source of privacy risk. The agreement resolves allegations that Facebook and Instagram harmed young users and violated children’s privacy protections. Beyond its record financial cost, the settlement requires Meta to introduce an age assurance framework with specific accuracy, testing and privacy standar