Security

2 min read 196 views

a16z Raises Record $15 Billion Fund with American Dynamism and AI Defense Focus

Andreessen Horowitz raises $15 billion across new funds — its largest fundraise ever — with a significant allocation to "American Dynamism" investments backing AI, defense technology, and critical infrastructure startups aligned with U.S. national interests.

Mar 8

2 min read 256 views

March 2026 Patch Tuesday Preview: AI Security Vulnerabilities Take Center Stage

Security analysts preview March 2026's Patch Tuesday with a focus on AI-related vulnerabilities — including flaws in Windows Copilot integration, Azure AI services, and the growing attack surface created by enterprise AI deployments that outpace security team readiness.

Mar 7

2 min read 360 views

NIST Releases Updated Cybersecurity Framework 2.1 with AI System Guidance

NIST publishes Cybersecurity Framework 2.1 with new guidance for securing AI systems — covering model supply chain integrity, adversarial robustness testing, and monitoring AI systems for drift and emergent behaviors in production.

Mar 6

2 min read 424 views

APT41-Linked Silver Dragon Targets Governments with Cobalt Strike and Google Drive C2

Check Point researchers disclose Silver Dragon, a China-linked APT group tied to APT41, targeting government entities across Europe and Southeast Asia using Cobalt Strike beacons, DNS tunneling, and a novel .NET backdoor that communicates through Google Drive.

Mar 5

2 min read 510 views

CyberStrikeAI: Open-Source AI Attack Tool Compromises 600+ FortiGate Devices Across 55 Countries

Team Cymru and Amazon CTI reveal that CyberStrikeAI, an open-source AI-native offensive security tool, was used to compromise over 600 Fortinet FortiGate firewalls across 55 countries by exploiting exposed management ports and weak credentials at machine scale.

Mar 4

2 min read 235 views

Google Exposes "Coruna" iOS Exploit Kit: 23 Exploits Across Five Chains Targeting iPhones

Google's Threat Intelligence Group discloses Coruna (aka CryptoWaters), a powerful iOS exploit kit with 23 exploits across five full chains targeting iOS 13-17.2.1 — originally used by a surveillance vendor, now weaponized for cryptocurrency theft by Chinese-speaking cybercrime groups.

Mar 3

2 min read 442 views

CISA Adds VMware Aria Operations Flaw to Exploited Vulnerabilities Catalog

CISA adds CVE-2026-22719, a command injection flaw in Broadcom VMware Aria Operations rated CVSS 8.1, to the Known Exploited Vulnerabilities catalog — giving federal agencies until March 24 to patch after confirming active exploitation during product migration operations.

Mar 3

2 min read 281 views

Google Android March 2026 Patch Fixes 129 Vulnerabilities Including Exploited Zero-Day

Google's March 2026 Android security update addresses 129 vulnerabilities — the highest single-month count since April 2018 — including a Qualcomm Display component flaw confirmed under "limited, targeted exploitation" and a critical System RCE requiring no user interaction.

Mar 2

2 min read 331 views

FBI Warns of Surge in AI-Enhanced Business Email Compromise Targeting Cloud Platforms

The FBI issues an updated advisory warning that business email compromise attacks have evolved to exploit AI-generated voice and text impersonation alongside compromised Microsoft 365 and Google Workspace accounts, with losses exceeding $6 billion annually.

Feb 27

2 min read 268 views

Volvo Group North America Confirms Major Data Breach Exposing Customer Records

Volvo Group North America discloses a data breach affecting millions of customer records from its trucking and commercial vehicle operations, with exposed data including names, addresses, vehicle identification numbers, and service histories.

Feb 26

2 min read 354 views

Five Eyes Issue Emergency Alert Over Cisco SD-WAN Critical Vulnerability Rated CVSS 10.0

CISA, the UK's NCSC, and intelligence agencies from Australia, Canada, and New Zealand issue a coordinated emergency alert for CVE-2026-20127 — a maximum-severity authentication bypass in Cisco Catalyst SD-WAN affecting government and enterprise networks worldwide.

Feb 25

2 min read 239 views

CISA Warns of Actively Exploited FileZen Command Injection Vulnerability

CISA adds CVE-2026-25108 to the Known Exploited Vulnerabilities catalog after confirming active exploitation of an OS command injection flaw in Soliton Systems FileZen file-sharing appliances used by government agencies and enterprises.

Feb 24