The acquisition strengthens Cisco’s push into identity-centric security for AI and machine access. The post Cisco Moves to Acquire Astrix Security to Tackle Non-Human Identity Risks appeared first on SecurityWeek .
The cybersecurity firm’s investigation has not found any impact on its source code release or distribution process. The post Trellix Source Code Repository Breached appeared first on SecurityWeek .
Google, Microsoft, Amazon Web Services, Nvidia, OpenAI, Reflection and SpaceX will provide resources to help augment warfighter decision-making in complex operational environments,” the Defense Department said. The post US Military Reaches Deals With 7 Tech Companies to Use Their AI on Classified Systems appeared first on SecurityWeek .
This report from Palo Alto Networks Unit 42 emphasizes that relying solely on endpoint detection and response (EDR) tools creates security blind spots that attackers exploit. Modern attacks often span multiple IT zones, including cloud services, identity and access management, operational technology, and IoT, making comprehensive telemetry ingestion and correlation essential. The report identifies scenarios where endpoint-only monitoring fails, such as cloud-to-endpoint pivots, covert command and control using identity theft, and threats from unmanaged rogue assets. Unit 42 advocates for a unified, AI-driven security operations center (SOC) platform that consolidates logs and alerts from all IT zones to improve detection and response. This approach reduces alert fatigue and enhances visibility, enabling faster and more effective threat mitigation. The report does not describe a specific vulnerability or exploit but highlights strategic detection challenges and recommendations for modern enterprise security.
The new kit aims to address risks related to poisoned models, regulatory issues, supply chain integrity, and incident response. The post Cisco Releases Open Source Tool for AI Model Provenance appeared first on SecurityWeek .
Unit 42 has identified high-risk AI browser extensions that masquerade as productivity tools but actually steal user data, intercept prompts, and exfiltrate passwords. These malicious extensions pose a significant privacy and security risk to users by accessing sensitive information within the browser. No specific affected versions or patches are currently documented. The threat is categorized as high severity due to the potential for data theft and unauthorized access.
This update succeeds&#;x26;#;xc2;&#;x26;#;xa0;TeamPCP Supply Chain Campaign Update 007, published April 8, 2026, which left the campaign in credential-monetization mode following the Cisco source code theft via Trivy-linked credentials, Google GTIG&#;x26;#;39;s formal designation of the operators as UNC6780 (with their credential stealer named SANDCLOCK), and the lapsed CISA KEV remediation deadline for CVE-2026-33634 with no standalone federal advisory. The Sportradar publication deadline flagged in Update 007 (approximately April 10 to 11) lapsed without a public CipherForce dump, and CipherForce&#;x26;#;39;s leak infrastructure has remained offline. Twelve days after Update 007, the technical compromise picture changed sharply across the W17 window (April 20 through April 26).
For the latest discoveries in cyber research for the week of 27th April, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Vercel, a frontend cloud platform, has disclosed a security incident linked to a compromise at Context.ai, where stolen OAuth tokens enabled unauthorized access through a connected app. The company reported access to employee […] The post 27th April – Threat Intelligence Report appeared first on Check Point Research .