BreachFeed

Security news

Everything BreachFeed is tracking across the industry, as it publishes.

Trending this week

Spotlight

Twilio status·Outage
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmubx29ww2u1mhnu2l84oiryo

Delayed Intelligent Alerts Notifications and Stale Alert History in Console

Minor impact · Investigating — We are currently experiencing an issue affecting Intelligent Alerts. Alert notifications for messaging metric anomalies may be delivered later than expected. Alert history displayed in the Console may also not reflect recent activity. Our team is actively investigating. We will provide an update in 1 hour as more information becomes available.

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpa003yhku2c27q3vhu

UK Cyber Shield, Japanese telco attack, China AI model limits

The UK's Cyber Pledge and Cyber Shield Millions exposed in Japanese telco attack China looking to curb overseas model access Get the show notes here: Thanks to our episode sponsor, Vanta Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot. The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk, and drafting fixes for you. Vanta is the platform used by over sixteen thousand…

Compuquip·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmttm0odu018mhmu2wsb7atb3

How Managed SOC Providers Use Agentic Workflows to Improve MTTD and MTTR

Faster detection and response are two of the clearest promises in the move toward an agentic SOC, but speed on its own is not the point. What matters is whether managed SOC providers can reduce the time it takes to qualify, investigate, escalate, and act without making the workflow harder to trust. In this blog, we look at how agentic workflows can improve MTTD and MTTR, and what that actually means in day-to-day managed security operations.

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpa003zhku2frn01m05

India tax RAT, prompt injection crypto scam, France pushes quantum-safe

Suspected China-Nexus hackers use fake Indian tax filing utility to deploy DcRAT Prompt injection attacks trick AI Agents into making crypto payments France to stop certifying products without quantum-safe encryption Get the show notes here: https://cisoseries.com/cybersecurity-news-india-tax-rat-prompt-injection-crypto-scam-france-pushes-quantum-safe/ Thanks to our episode sponsor, Vanta Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot. The good…

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpa0040hku2th3vrh6f

First AI ransomware, AdaptHealth suffers cyberattack, UK cyber plan delayed

JadePuffer ransomware used AI agent to automate entire attack AdaptHealth suffers cyberattack UK's National Cyber Action Plan launch delayed by political leadership crisis Get the show notes here: https://cisoseries.com/cybersecurity-news-first-ai-ransomware-adapthealth-suffers-cyberattack-uk-cyber-plan-delayed/ Thanks to our episode sponsor, Vanta Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot. The good news: The Vanta Agent works like a GRC…

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpa0041hku2gqfh1q2q

The Department of Know: PeopleSoft exploit, Ford brings back gray beards, LLM vetting

This week's Department of Know is hosted by Rich Stroffolino, with guests David Cross, CISO, Atlassian; Kathleen Mullin, Director, SABSA Institute; Montez Fitzpatrick, CISO, Navvis; and Howard Holton, former CEO, GigaOm. Get the show notes here: https://cisoseries.com/the-department-of-know-peoplesoft-exploit-ford-brings-back-gray-beards-llm-vetting/ Huge thanks to our sponsor, Silent Push Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the…

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpa0042hku244xpd3rp

Consumer security worries, Vought supervises spy budgets, Fortibleed exposes Fortinet

Card data theft remains top concern for U.S. consumers OMB chief to oversee spy agency budgets Fortibleed leads to ransomware attacks and 430,000 Fortinet firewalls exposed Get the show notes here: https://cisoseries.com/cybersecurity-news-consumer-security-worries-vought-supervises-spy-budgets-fortibleed-exposes-fortinet/ Huge thanks to our sponsor, Silent Push Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the chase ensues. Silent Push…

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpa0043hku2ldibl9fl

Hide My Email bug shows real addresses, Fable 5 gets the greenlight, Microsoft Teams hits back on AI bots

Hide My Email bug shows real addresses Fable 5 gets the greenlight DHS confirms hackers breached HSIN Get the show notes here: https://cisoseries.com/cybersecurity-news-hide-my-email-shows-real-addresses-fable-5-gets-greenlight-microsoft-teams-hits-back-on-bots/ Huge thanks to our sponsor, Silent Push Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the chase ensues. Silent Push closes this gap with its Preemptive Cyber Defense platform.…

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpa0044hku2o4zsj6lb

Bash hits AI, DHS announces ANCHOR-CI, Aikido buys Root

Bash can spell trouble GNU for AI agents DHS to unveil critical infrastructure council Aikido buys Root Get the show notes here: https://cisoseries.com/cybersecurity-news-bash-hits-ai-dhs-announces-anchor-ci-aikido-buys-root/ Huge thanks to our sponsor, Silent Push Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the chase ensues. Silent Push closes this gap with its Preemptive Cyber Defense platform. Silent Push tracks adversary…

Compuquip·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmttm0odu018nhmu2syq60tda

Building Trust in Autonomous Security Operations: Transparency, Control, and Auditability

Trust is one of the biggest barriers to adoption in autonomous security operations, and it is rarely solved by messaging alone. It is earned when the workflow proves it can operate with speed, visibility, and accountability at the same time. In this blog, we look at what actually builds trust in autonomous security operations, why human validation still matters, and what IT leaders should expect before giving AI-driven workflows more responsibility.

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpa0045hku22jjagx6v

US seizes illegal World Cup domains, WhatsApp offers usernames for phone privacy, $10M reward for Russia-based cyber campaign

US seizes illegal World Cup domains WhatsApp offers usernames for phone number privacy $10M reward for Russia-based cyber campaign Get the show notes here: https://cisoseries.com/cybersecurity-news-us-seizes-illegal-world-cup-domains-whatsapp-offers-usernames-for-phone-privacy-10m-reward-for-cyber-campaign/ Huge thanks to our sponsor, Silent Push Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the chase ensues. Silent Push closes this gap…

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpa0046hku25zx1e08k

CISA's Cisco deadline, China's Mythos competitor, Amazon Q flaw

CISA sets urgent deadline to fix exploited Cisco flaw Chinese cybersecurity company claims it has a better-than-Mythos bug finder Amazon Q flaw enables cloud credential theft Get the show notes here: https://cisoseries.com/cybersecurity-news-cisas-cisco-deadline-chinas-mythos-competitor-amazon-q-flaw/ Huge thanks to our sponsor, Silent Push Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the chase ensues. Silent Push closes this gap with…

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpa0047hku2sicnj5eo

ShinyHunters hits MSG, Cal Water confirms no damage, CISA SASE guide

ShinyHunters hits Madison Square Garden Cal Water finds no evidence of OT activity New CISA guide helps agencies adopt SASE for Zero Trust Get the show notes here: https://cisoseries.com/cybersecurity-news-shinyhunters-hits-msg-cal-water-confirms-no-damage-cisa-sase-guide/ Huge thanks to our episode sponsor, Guardsquare Attackers are treating your mobile app like an open book. Sixty-three percent of security leaders recently detected app tampering, cloning, or unauthorized modifications. When…

Compuquip·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmttm0odu018ohmu25gewk5gx

What an AI SOC Triage Agent Should Actually Do in Real Security Operations

AI SOC triage agents are getting a lot of attention, but the market is still ahead of the standard many buyers are using to evaluate them. In this blog, we look at what a triage agent should actually do inside real security operations, where it should create measurable value, and where it should stop short of replacing analyst judgment. The goal is not a faster interface. It is better triage, better case quality, and less wasted analyst effort.

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpa0048hku2q6n0pyui

Copilot AI attacks cybercrime tools, hackers exploit Cisco zero-day, China's 360 vs Mythos

Copilot AI knocks down cybercrime tools Hackers exploit Cisco zero-day China's 360 says it matches Anthropic's Mythos Get the show notes here: https://cisoseries.com/cybersecurity-news-copilot-ai-attacks-cybercrime-tools-hackers-exploit-cisco-zero-day-chinas-360-vs-mythos/ Huge thanks to our episode sponsor, Guardsquare AI is speeding up development, but at what cost? While ninety-six percent of teams now use AI tools, eighty-one percent report that AI-generated code has introduced new…

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpa0049hku2cxycz256

Feds seize scam infrastructure, Dragos unveils AI for OT security, Scattered Spider hackers plead guilty

Feds seize alleged cyber-scam infrastructure Dragos unveils AI for OT security Scattered Spider hackers plead guilty Get the show notes here: https://cisoseries.com/cybersecurity-news-feds-seize-scam-infrastructure-dragos-unveils-ai-for-ot-security-scattered-spider-hackers-plead-guilty/ Huge thanks to our episode sponsor, Guardsquare Is your mobile app truly protected? Relying on the OS isn't enough. A global study of thirteen-hundred security and developer leaders found that ninety-six percent…

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpa004ahku237r7ojr9

OpenAI takes on Mythos, Klue hits security shops, Five Eyes has eyes on AI

OpenAI takes on Anthropic's Mythos Klue hack hits security shops Five Eyes has eyes on AI models Get the show notes here: https://cisoseries.com/cybersecurity-news-openai-takes-on-mythos-klue-hits-security-shops-five-eyes-has-eyes-on-ai/ Huge thanks to our episode sponsor, Guardsquare Your backend is only as secure as your frontend. Research shows that client-side compromise is now a primary driver of API risk. With sixty-three percent of leaders detecting mobile app tampering or cloning last…

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpa004bhku212lrpbte

Brazil phone alert hack, Prinz Eugen ransomware, Congress deepfake bill

Hackers suspected in Brazil cell phone alert Prinz Eugen ransomware prioritizes recent files for encryption Congress presents bill to protect people from AI-generated deepfakes Get the show notes here: https://cisoseries.com/cybersecurity-news-brazil-phone-alert-hack-prinz-eugen-ransomware-congress-deepfake-bill/ Huge thanks to our episode sponsor, Guardsquare Mobile app security isn't just a tech issue; it's a revenue issue. A recent global study found that seventy-two percent of organizations…

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpd004chku2klzkjec9

The Department of Know: SearchLeak, Check Point zero-day, and pulling the plug on Fable

This week's Department of Know is hosted by Rich Stroffolino, with guests Arif Hameed, CISO, C&R Software; Adam Palmer, CISO, First Hawaiian Bank; Jon Collins, Field CTO, GigaOm; and Jack Leidecker, EVP, CSO, Gainsight. Huge thanks to our sponsor, ThreatLocker Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud adoption. Behind AI. Behind automation. And behind every major technology…

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpd004dhku2hzhtdvyr

Police clean WordPress sites, Klue OAuth breach, Warner's CISA warnings

Police clean ups SocGholish-infected sites tied to Evil Corp Klue OAuth breach linked to Icarus Salesforce data theft attacks Warner warns of CISA cuts, staffing gaps in letter to acting chief Get the show notes here: https://cisoseries.com/cybersecurity-news-police-clean-wordpress-sites-klue-oauth-breach-warners-cisa-warnings/ Huge thanks to our sponsor, ThreatLocker Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk?…

Cyber Security Headlines·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu5rjzpd004ehku2ahe1lhy9

Anthropic tells G7 to cooperate, Fortinet VPN leak exposes credentials, Crypto Clipper abuses reviews

Anthropic tells G7 to cooperate Fortinet VPN leak exposes credentials Crypto Clipper abuses reviews, narrators, and comments Get the show notes here: https://cisoseries.com/cybersecurity-news-anthropic-tells-g7-to-cooperate-fortinet-vpn-leak-exposes-credentials-crypto-clipper-abuses-reviews/ Huge thanks to our sponsor, ThreatLocker Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud…

Compuquip·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmttm0odu018phmu2f622vv8e

How Agentic SOC Workflows Reduce Noise and Accelerate Triage

Reducing alert noise is one of the clearest promises in the move toward an agentic SOC. But better triage is not just about pushing alerts through faster. In this blog, we look at how agentic SOC workflows reduce noise, improve triage quality, and create a more usable path from signal to decision.