Artificial Intelligence

AI agents gain access to financial workflows amid growing governance gaps

A Pathlock report found that 53% of organizations cannot fully verify what AI agents do across business systems, even as they gain authority over finance, HR, procurement, and supply chain workflows.

Critical Ruflo flaw lets attackers hijack AI agents through exposed MCP bridge

Researchers say an unauthenticated vulnerability enables code execution, credential theft, AI memory poisoning, and persistent compromise.

Russian hackers turn Exchange flaw into ‘half-click’ mailbox takeover

The OWAReaper implant can establish server-side mailbox permissions that remain after credentials are changed and affected devices are rebuilt.

A Scattered Spider member was indicted. Microsoft’s GDID went to trial.

Investigators’ use of a little-known Windows device identifier to take down an alleged cybercriminal has raised privacy and transparency concerns about Microsoft telemetry.

Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities

CISA unveils a six-step blueprint for isolating critical infrastructure during cyberattacks

A new guide from CISA and allied cybersecurity agencies says organizations should build dedicated isolation points into operational technology to contain attacks and continue delivering essential services.

Mythos takes its first shot at post-quantum cryptography

Anthropic’s Mythos AI model has helped discover two new cryptanalytic attacks, one against the NIST post-quantum digital signature candidate Hawk, and one against a weakened version of AES; neither threatens deployed technology.