Patching stories
Most UK security chiefs say AI has tilted the cyber fight towards attackers, as critical flaw fixes still take more than a week.
Researchers disclosed 98 flaws across phones, printers and AI tools, underscoring how quickly the attack surface is widening for businesses.
Most attacks still start with weak credentials, unpatched systems or phishing, so the firm says budgets should shore up basics before AI fears.
Three-quarters of AI assistant use was unsanctioned, underscoring why enterprises are turning to tighter controls as adoption jumps nearly 1,000% year on year.
Manufacturers face tighter compliance pressure as the new platform maps vulnerabilities to specific devices, components and SBOMs for quicker remediation.
The latest update forces defenders to chase a second exploited Windows Shell zero-day as Outlook reading-pane bugs also widen the attack surface.
A flaw in Anthropic's MCP Python SDK could let malicious servers steal credentials and take over accounts through apparently legitimate logins.
Only 5% of Australian companies are ready for AI-driven attacks, leaving most exposed as threat actors move at machine speed.
The update could cut MSPs' manual remediation burden, with Cork saying 77% of eligible security tickets now close without human intervention.
Businesses face rising disruption unless seven basic cyber controls are properly integrated, tested and owned across identity, recovery and supplier access.
Enterprises running ageing Java libraries could get faster fixes, as the new service has already remediated more than 400 unknown vulnerabilities.
Security teams could cut vulnerability repair times to under an hour as Vicarius adds AI-generated scripts to its vRx platform.
A security layer is now meant to stop AI agents on mainframes from straying beyond approved tasks, as firms face a shortage of specialist staff.
SMBs face rising breach risk as the report says seven routine security failings, not advanced malware, drive most attacks, with ransomware in 88% of cases.
Threats are now spanning identities, cloud and software supply chains, with AI speeding attacks and complicating defence, Microsoft says.
It widens Broadcom's support model beyond Spring, giving customers verified fixes for Java, Python, Node.js and data services as vulnerabilities surge.
Buyers may inherit unpatched systems and monitoring gaps unless cyber checks are done before a deal closes, Quest Technology Management says.
Existing customers will get the upgrade free as Qualys extends remediation beyond endpoints, aiming to cut outage risk while speeding fixes across hybrid estates.
The appointment comes as IT departments face rising pressure to manage more devices and patch vulnerabilities, with PDQ serving 33,000 customers.
The incident has sharpened calls for tighter controls as automated systems grow better at probing weaknesses across public and private networks.