Patching stories
Security teams are leaving known flaws exposed, with most responses still ending in tickets or handoffs rather than confirmed fixes.
Security teams are being warned to keep humans and strict controls in place as AI agents can miss context and leak sensitive code.
Defenders could gain a faster edge against AI-driven attacks as Google Cloud ties Gemini, Wiz, CodeMender and Mandiant into one platform.
Access to ChatGPT and GPT-5.6 is being tightened for some accounts as OpenAI moves to hardware-backed passkeys amid rising phishing risk.
Attackers can now weaponise newly disclosed flaws in hours, leaving businesses exposed unless security teams move to real-time oversight.
The real risk lies in unpatched flaws, as attackers increasingly exploit fixes already available but not yet installed.
Defenders face added pressure as the update covers two actively exploited flaws and a SharePoint bug that could enable remote code execution.
Legacy systems and slow patching are leaving banks exposed, with financial services hit by more than double the average cyberattacks per device.
Most fixable flaws in live AI cloud systems are still exposed, with Orca finding 99.9% remain unpatched across major platforms.
Downtime from slow devices and failed apps is prompting larger firms to unify endpoint, security and experience tools, IDC says.
Weak default safeguards and uneven sandboxing could leave developers exposed to command execution before workspace trust is granted.
Enterprises can now patch older open source software without disruptive upgrades, as IBM and Red Hat target stubborn vulnerability backlogs.
Sensitive physics and engineering research at US and Canadian universities may have been exposed after hackers used Roundcube flaws to enter mail servers.
Critical infrastructure and healthcare lag peers on basic cyber controls, leaving essential services more exposed than financial firms and technology groups.
Banks are seeing attackers favour stealthy access over ransomware, with a UK-specific exploit hitting nearly half of monitored sensors.
Banks face a shrinking window to harden legacy systems as cheap AI tools make vulnerability hunting and repeat attacks far easier for criminals.
IT teams can now manage Windows and Mac devices from one platform, with new tools aimed at closing patch gaps and speeding enrolment.
The plan could speed defences across government and vital sectors, but experts warn weak basics and policy gaps may blunt its impact.
Security teams may be able to cut false alarms as Picus says its new platform proves whether a vulnerability can actually be exploited.
It targets defence and government teams needing to handle sensitive data in disconnected environments without direct internet access.
