For decades, cybersecurity defenses were built around structured interfaces such as APIs, identity systems, and network endpoints. Those surfaces were predictable, schema-bound, and constrained by deterministic rules. Security teams could define boundaries between valid and invalid behavior, then monitor for violations. Generative AI systems change that model. In these environments, instructions are expressed in natural language, assembled from multiple context layers, and interpreted non-deterministically. Prompts, retrieval context, system instructions, and tool outputs now influence whether software takes action. That shift matters because safety is no longer just a property of the model. It is a property of the entire architecture around it. Prompt Injection is a Systems Problem This is why prompt injection is better understood as a systems problem than a model problem. An unsafe outcome may not result from a single bad response. It may come from a chain of individually valid steps, each operating as designed, but combining into something harmful. The model may follow instructions correctly, while the overall workflow fails to enforce the right constraints. Traditional exploits break syntax or violate explicit rules to gain unauthorized access. Prompt-driven attacks work differently. They manipulate meaning, precedence, and trust relationships inside a system built to interpret ambiguous instructions. The goal is not to crash the application. It is to steer it toward a harmful but technically valid action. That makes architectural design central to security. A model with stronger guardrails can reduce risk, but it cannot compensate for excessive permissions, weak prompt governance, or poorly bounded tool access. If an agent can read sensitive data, call external services, and act on loosely scoped instructions, the surrounding system has already expanded the attack surface. Model safety helps. It does not solve the problem by itself. Risk Emerges Across Multi-Step Workflows The risk becomes clearer in multi-step AI workflows.
May 16, 2026 · via cybersecurity-insiders.com
It’s getting harder than ever for companies to manage the risks associated with cyber breaches. Danger lurks in every corner of the ecosystem, from insider threats and AI-powered phishing to zero-day vulnerabilities that malicious actors can exploit, and poorly-protected third parties that open the door to supply chain attacks. Meanwhile, enterprise assets, environments, and infrastructure are growing more extensive. It’s getting harder for security teams to remain aware of every aspect of the organization’s cyber footprint. What’s more, attackers are constantly changing their tactics, techniques, and procedures (TTPs), so it’s difficult for cyber risk teams to keep up. Even regulatory bodies that are out to help protect organizations from cyber attacks add to the challenges. They frequently change their requirements, forcing you to repeatedly review your compliance standing. In this article, we’ll discuss trending attack patterns that give security teams a headache in 2026, the evolving demands of cyber risk management, and the need to stay on top of cybersecurity controls so business leaders sleep at night. Identity-First Attacks Increase Exposure Risks Today’s malicious actors are moving beyond breaking into enterprise systems or infrastructure, and looking to compromise users, service accounts, or authentication systems through credential theft and session hijacking. Because modern environments are generally secured around identity permissions, a compromised identity allows attackers to “become the user” and move freely without triggering traditional perimeter defenses. MFA bypass techniques, push fatigue attacks, and SIM swapping are all hallmarks of identity-first attacks. This forces risk models to focus on access pathways, identity (including machine identities), and SaaS exposure, rather than just infrastructure and assets. Risk assessments must be comprehensive and extensive, mapping end-to-end access relationships throughout the ecosystem, re-evaluating permissions, and considering cascading compromise impact. Supply Chain Attacks Are Increasing Supply chain attacks are becoming more indirect, scalable, and difficult to
May 15, 2026 · via minutehack.com
Gibson Dunn Client Alert Included in Pratt’s Privacy & Cybersecurity Law Report
Article | May 15, 2026
Pratt’s Privacy & Cybersecurity Law Report
A Gibson Dunn client alert authored by Jina Choi, Winston Chan, Diana Feinstein, Benjamin Wagner, and Erin Williams, “Grand Jury Secrecy Reinforced: Ninth Circuit Bars FOIA Discovery of Subpoenaed Documents Produced Pursuant to Rule 6(e),” [PDF] was reprinted in the April 2026 issue of Pratt’s Privacy & Cybersecurity Law Report.
May 15, 2026 · via gibsondunn.com
For the past two decades, cybersecurity has largely been a story about protecting humans from machines blocking malware, filtering phishing emails, companies mitigating DDoS attacks, and patching software vulnerabilities before attackers exploit them. The adversary was clear. The surface was known. The playbook, while imperfect, was at least legible, but that story is now changing. The next major frontier in cybersecurity is not defending against AI. It is figuring out how to trust it. The Agent Is Already In the Building Autonomous AI agents are being deployed today reading inboxes, executing code, transferring funds, signing off on contracts, and making decisions that in any previous era would have required a human signature. The agentic economy is not on the horizon. It is already operating inside your perimeter. The speed of adoption is understandable, and the productivity case is compelling. A single AI agent can compress weeks of analyst work into hours. But here is the question most organizations are not yet asking: when an AI agent takes an action on your behalf, how do you actually know it is who it claims to be? A Trust Problem Hiding in Plain Sight In traditional network security, identity is foundational, and zero-trust architectures exist precisely because we learned that presence inside a network is not proof of legitimacy. We authenticate users, verify devices, enforce least-privilege access controls, log and audit everything. None of that infrastructure was built with AI agents in mind. Today, when an autonomous AI agent initiates a request to an API, a database, a financial system, or another agent, the receiving party typically has no reliable mechanism to verify its identity, confirm what it is authorized to do, check whether its instructions have been tampered with, or revoke its access in real time. The agent arrives as a stranger,
May 15, 2026 · via hackread.com
LONG BEACH, Calif. — The Port of Long Beach Friday unveiled a center designed to defend against cyberattacks in an effort to protect the facility and goods movement. The center features enhanced technology for around-the-clock cybersecurity monitoring and defense, port officials said. It also reinforces several data networks associated with the port's operations. Port officials said they often deal with cybersecurity issues, often blocking or stopping an attempted breach every three seconds. The new center will bolster the port's efforts in safeguarding the digital supply chain. Port of Long Beach CEO Noel Hacegaba announced the new center during an event alongside Long Beach Board of Harbor Commissioners President Frank Colonna and U.S Coast Guard Rear Adm. Jeffrey Novak. The showcase highlighted several partnerships among the port, local, state and federal agencies on cybersecurity. "The Cyber Defense Operations Center represents the Port of Long Beach's latest initiative to strengthen our cybersecurity capabilities," Hacegaba said in a statement. "Through the use of enhanced technology, this center allows us to sustain world-class cybersecurity defenses and protect critical data networks to keep cargo flowing and the economy moving as we develop the port of the future." Hacegaba also announced the port had its third-best April on record, with about 818,000 twenty-foot equivalent units being moved through the facility. Overall cargo volumes dropped by 5.7% in April 2026 compared to the same month last year, which was the port's busiest April in history. Long Beach dockworkers and terminal operators moved nearly 390,000 TEUs in imports last month, a decrease of about 7.1%, while exports increased by 26.7% to nearly 119,000 TEUs compared to April 2025. Empty containers decreased by 12.6% to 309,000 TEUs, according to officials. "In our industry, the only certainty is uncertainty, and because we are part of the global supply, we must
May 15, 2026 · via spectrumnews1.com
TraceX Labs is an AI-powered cybersecurity company developing advanced solutions for enterprise cyber defense against modern digital attacks. NEW YORK, TX, UNITED STATES, May 15, 2026 /EINPresswire.com/ — TraceX Labs, an emerging cybersecurity and artificial intelligence company, is developing advanced digital security technologies designed to protect organizations and individuals from rapidly evolving cyber threats through AI-powered threat intelligence, deepfake detection, geolocation intelligence, phishing prevention, and malware analysis platforms. As cyberattacks become increasingly sophisticated through artificial intelligence, automation, phishing campaigns, ransomware, and malicious infrastructure, TraceX Labs focuses on building intelligent cybersecurity solutions capable of proactive threat detection, real-time monitoring, and enterprise-grade digital defense. The company operates across multiple cybersecurity domains, including penetration testing, threat intelligence, digital forensics, dark web monitoring, malware analysis, red team operations, managed security services, and Open-Source Intelligence (OSINT) investigations. Enterprise Cybersecurity Services TraceX Labs provides comprehensive enterprise cybersecurity solutions tailored for modern digital threats and evolving attack landscapes. Its Dark Web Intelligence services monitor underground forums, marketplaces, and hacker communities to identify stolen credentials, leaked databases, and emerging threats targeting organizations. The company’s OSINT Investigations services provide advanced digital footprint analysis, social media monitoring, executive protection, and brand impersonation detection for organizations and high-profile individuals. Through Red Team Operations, TraceX Labs simulates real-world cyberattacks to identify vulnerabilities across enterprise networks, web applications, cloud infrastructure, and physical security environments before malicious actors exploit them. Its Malware Analysis division performs static and dynamic malware analysis, reverse engineering, sandbox execution, and IOC extraction to investigate ransomware, spyware, and advanced malicious software. The company also offers Threat Intelligence services that include proactive threat hunting, APT group tracking, vulnerability intelligence, strategic threat reporting, and customized intelligence feeds for organizations. TraceX Labs further provides Managed Security Services, including 24/7 Security Operations Center (SOC) monitoring, incident response, security device management, and compliance reporting. Additional
May 15, 2026 · via freep.com
About
Press
Copyright
Contact us
Creators
Advertise
Developers
Terms
Privacy
Policy & Safety
How YouTube works
Test new features
NFL Sunday Ticket
© 2026 Google LLC
May 15, 2026 · via youtube.com
Blog de Zscaler Reciba en su bandeja de entrada las últimas actualizaciones del blog de Zscaler An Analysis of Board-Level Cybersecurity Risk Oversight Key Points: - Audit First Approach: The majority—almost four in five—of S&P 500 companies oversee cybersecurity risk from the Audit committee. - Picture Still Fragmented Outside Audit: Fewer than one in ten companies oversee cyber risk from the Risk committee, though among financial services companies this rises to 39%. Fewer than one in 20 oversee cyber risk from the full board level. - Converging on Audit Committee Oversight: Since 2024, the number of companies overseeing cyber risk from the Audit committee has increased. Fewer companies now formally assign oversight to the full board or a technology/cybersecurity committee. - Potential Oversight Gap: When cyber oversight sits within the Audit committee, boards may be viewing a fast-moving, highly technical risk through a narrow lens as part of an already-crowded agenda. Research Findings: Zscaler analyzed Securities and Exchange Commission disclosures (primarily 10-K and proxy statement filings) from S&P 500 companies to understand cyber risk oversight at the board level. The research highlights how leading public companies on the S&P 500 index are increasingly converging their cyber risk governance around the Audit committee. As of March 1, 2026, 79% oversee cybersecurity risk via the Audit committee. Of the remainder, 8% perform oversight of cyber risk from the Risk committee, 6.2% from a technology/cybersecurity committee, and 3.8% from the full board level. A small number of other companies oversee the risk from Safety/Operations, Governance/Nominating or Compliance/Regulatory committees. Oversight Option | 2026 Result (%) | 2024 Result (%) | |---|---|---| Audit | 79% | 71.2% | Risk | 8% | 8% | Technology/Cyber | 6.2% | 7.2% | Full Board | 3.8% | 8.2% | Safety/Operations | 1.6% | 2% | Governance/Nominating |
May 15, 2026 · via zscaler.com
In today’s cybersecurity news… G7 countries release AI SBOM guidance Agencies from U.S., Canada, Japan, Germany, France, Italy, the United Kingdom, along with the European Union have now published the Software Bill of Materials for AI – Minimum Elements, focusing on AI. A SBOM is a “detailed, machine-readable manifest that catalogs every component, library, dependency, and module incorporated into a software product to provide full transparency into its composition.” This document aims to “help public and private sector organizations enhance transparency in their AI systems and supply chains,” making it easier to track vulnerabilities and reduce risks. Dell confirms its SupportAssist software causes Windows BSOD crashes The company has confirmed that its SupportAssist software is causing blue-screen of death crashes on some Windows systems. This follows a flood of user reports about random reboots that have been affecting Dell devices since Friday. Version 5.5.16.0 of the Dell SupportAssist Remediation service is responsible for this series of crashes, and the company says it is working towards a resolution. An easy workaround is to simply disable the Dell SupportAssist Remediation service or uninstall it. Dirty Frag 2: Electric Boogaloo. Its sequel arrives as Fragnesia Following up on a story we covered on Tuesday, it appears the Linux kernel vulnerability Dirty Frag which itself was a follow up of the Copy Fail bug, is now returning as Fragnesia, a Linux kernel local privilege escalation flaw. It “allows unprivileged users to gain root by corrupting page cache memory” and has its own CVE number (CVE-2026-46300). According to researcher Hyunwoo Kim, who discovered Dirty Frag, this “Fragnesia” bug emerged as “an unintended side effect of patches shipped to fix the original Dirty Frag vulnerabilities.” Ransomware campaigns increasingly turning to threats of physical violence According to a report from security firm Semperis, in as many as
May 15, 2026 · via cisoseries.com
Cloud security challenges commonly include misconfigurations, human errors, and weak identity and access management. These challenges can all lead to vulnerabilities that may result in data theft and loss. Your data moved to the cloud to help your business scale—but the attackers moved right along with it. The traditional office perimeter has slowly vanished, making cloud security challenges an increasing concern for businesses. For a growing organization, the shift to a cloud security solution provides incredible flexibility, but it also creates a complex web of identities and settings that are notoriously difficult to manage. If you aren't actively watching these configurations, you're essentially leaving your digital front door unlocked in a neighborhood that never sleeps. Below are the top cloud challenges facing organizations in 2026 and what you need to know to stay ahead of them. 1. Misconfigurations In the cloud, your security is defined by your settings rather than a physical perimeter. A misconfiguration is essentially a digital “whoopsies”—like leaving an Amazon S3 bucket set to public or forgetting to restrict a database. Since cloud tools are built for easy sharing, they often default to being open, leaving the heavy lifting of security to your team. It can only take one wrong click to turn a private folder into a public link. Threat actors don’t need to break in when this happens; they just walk through the unlocked door. For growing businesses, keeping track of every toggle in Microsoft 365 or Google Workspace is a lot to ask, but these tiny oversights are often what lead to the biggest leaks. 2. Human error Cloud settings can be confusing, and even the most seasoned teams make mistakes. The sheer volume of settings and features inside platforms like Microsoft 365 can trip up anyone. When you’re moving fast to support a
May 15, 2026 · via huntress.com
Happy Friday, Huskies! This week, Northeastern security officials responded to a cyberattack on the popular online learning platform Canvas that rattled academic institutions. Professors shared their research on emerging tech during presentations on CBH Institute Day. Meanwhile, members of the community got their gear on to celebrate Bike Week on the Boston campus. 05/12/26 – BOSTON, MA. – Northeastern professors Stephanie Noble, Laurel Gabard-Durnam, Hyunju Kim, and Joshua Curtiss give flash talks on emerging technology during the 2026 CBH Institute Day in ISEC on Tuesday, May 12, 2026. Photo by Alyssa Stone/Northeastern University05/12/26 – BOSTON, MA. – Northeastern professors Stephanie Noble, Laurel Gabard-Durnam, Hyunju Kim, and Joshua Curtiss give flash talks on emerging technology during the 2026 CBH Institute Day in ISEC on Tuesday, May 12, 2026. Photo by Alyssa Stone/Northeastern University05/12/26 – BOSTON, MA. – Northeastern professors Stephanie Noble, Laurel Gabard-Durnam, Hyunju Kim, and Joshua Curtiss give flash talks on emerging technology during the 2026 CBH Institute Day in ISEC on Tuesday, May 12, 2026. Photo by Alyssa Stone/Northeastern University05/12/26 – BOSTON, MA. – Northeastern professors Stephanie Noble, Laurel Gabard-Durnam, Hyunju Kim, and Joshua Curtiss give flash talks on emerging technology during the 2026 CBH Institute Day in ISEC on Tuesday, May 12, 2026. Photo by Alyssa Stone/Northeastern University05/12/26 – BOSTON, MA. – Northeastern professors Stephanie Noble, Laurel Gabard-Durnam, Hyunju Kim, and Joshua Curtiss give flash talks on emerging technology during the 2026 CBH Institute Day in ISEC on Tuesday, May 12, 2026. Photo by Alyssa Stone/Northeastern UniversityPhotos by Alyssa Stone/Northeastern University05/12/26 – BOSTON, MA. – Scenes during the 2026 CBH Institute Day held in ISEC on Tuesday, May 12, 2026on May 12, 2026. Photo by Matthew Modoono/Northeastern University05/12/26 – BOSTON, MA. – Liam O’Neile speaks about Yoga and Mindfulness Research at I-CBH, during the 2026 CBH Institute Day
May 15, 2026 · via news.northeastern.edu
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
- CVE-2026-42897 Microsoft Exchange Server Cross-Site Scripting Vulnerability
This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.
Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.
This product is provided subject to this Notification and this Privacy & Use policy.
May 15, 2026 · via cisa.gov
Hack-Proof Your Portfolio: The Bull Case for Cybersecurity ETFs As AI adoption accelerates and Big Tech ramps up spending on AI infrastructure, demand for cybersecurity solutions is expected to rise alongside it. Greater AI integration increases the need for robust digital protection, positioning cybersecurity as a critical pillar of the expanding AI investment cycle. In many ways, AI and cybersecurity are inseparable components of the modern digital economy as one cannot scale securely without the other. Moreover, cyber threats persist regardless of market conditions, making cybersecurity a relatively resilient investment theme across both bull and bear markets. The S&P Kensho Cyber Security Index, which tracks companies with significant exposure to cybersecurity-related activities, has gained 19.13% so far this quarter, 8.4% year to date and 10.52% in this month alone. The strong performance reflects growing investor interest and sustained capital flows into the cybersecurity space. With AI-related capital spending projected to surpass $1 trillion by 2027, the risk and sophistication of cyberattacks are expected to rise in parallel. As companies accelerate AI integration, hackers are increasingly leveraging AI to develop more advanced and scalable cyberattack strategies, making AI expansion and cybersecurity demand two sides of the same coin. This growing need for digital defense could create compelling long-term opportunities for investors seeking exposure to the sector. Accelerating Threat of AI-Driven Cybercrime According to Lee Klarich, the tech chief of Palo Alto Networks, companies are rapidly running out of time to strengthen their software defenses as cybercriminals increasingly use AI to identify and exploit vulnerabilities at scale, as quoted on a CNBC article. The cybersecurity firm now estimates that companies have just a three-to-five-month window to strengthen defenses before AI-driven cyberattacks become commonplace, reinforcing the urgency around cybersecurity preparedness. As per the abovementioned article, Klarich emphasized the need for a coordinated industry
May 15, 2026 · via tradingview.com
- Cyberattacks & Data Breaches - Vulnerabilities & Threats - Cybersecurity Operations - Сloud Security - Commentary Since 2006, Dark Reading has been at the forefront of covering cybersecurity, providing deep insights and analysis beyond the headlines. All those major news events? We were there. Shifts in technology trends? We wrote about them. Enjoy this special anniversary coverage celebrating where we've been and what's next. Cyber Pioneers Ponder Past as Prologue Robert "RSnake" Hansen, Katie Moussouris, Rich Mogull, Richard Stiennon, and Bruce Schneier reflect on how their favorite columns penned for Dark Reading over the past 20 years have stood the test of time. Cyber Pioneers Ponder Past as Prologue As part of Dark Reading's 20th Anniversary celebration, we asked some of our high-profile cybersecurity industry leaders who wrote blogs or columns for us over the years to look back and select their favorite piece, and then share their reflections on the topic today, through the lens of history. This was no small task. Multiple CMS and platform migrations over two decades at Dark Reading sadly meant that some of our content, including columnists' pieces, were lost to the Internet and left to the whims of Wayback Machine website screenshots. But our creative columnists were able to dig into the Dark Reading archives for their picks and share their thinking at the time, as well as examine how history has treated the topic. So kick back and enjoy these insightful retrospectives from Dark Reading contributing columnists and industry leaders Robert Hansen (aka RSnake), Katie Moussouris, Rich Mogull, Richard Stiennon, and Bruce Schneier. Click here for all of our DR20 content, which will be rolling out across the month of May. Keep checking back for new items! RSnake's Robot Research Comes Full Circle Source: @RSnake on X Robert (RSnake) Hansen, managing
May 15, 2026 · via darkreading.com
RIT Croatia introduces new program: Cybersecurity BS RIT Croatia introduces a new undergraduate study program, Cybersecurity BS, starting in the Fall semester of the 2026–2027 academic year at its Zagreb campus. Cybersecurity BS is an interdisciplinary program designed to educate a new generation of professionals capable of protecting digital systems, data, and infrastructure in an increasingly complex technological environment. The program combines strong technical foundations with an understanding of the ethical, legal, and social implications of cybersecurity, preparing students to make informed and responsible decisions. Cybersecurity BS graduates will understand how technology works, but also the broader impact of security decisions on organizations and society. RIT Croatia's Cybersecurity program is built on the academic foundations of the globally recognized RIT’s Cybersecurity BS program, ranked 18th in the US (U.S. News & World Report, 2025), and adapted to the European context in collaboration with the local industry partners. It also includes a strong focus on hands-on learning and real-world experience, with a mandatory cooperative education (co-op) component. Graduates of the program will be prepared for entry-level roles in cybersecurity across a wide range of industries, including technology, finance, public institutions, and consulting. The program will be delivered in English and will last four years. Upon successful completion, students will earn 240 ECTS credits, as well as both an American and a Croatian degree. Learn more about the Cybersecurity BS program For more information, please contact: admissions@croatia.rit.edu
May 15, 2026 · via rit.edu
CNN’s Kristen Holmes reports US officials traveling with President Donald Trump in China were warned of serious cybersecurity risks, with many using burner phones and avoiding personal devices. The security measures have limited communications on the ground. CNN’s Kristen Holmes reports US officials traveling with President Donald Trump in China were warned of serious cybersecurity risks, with many using burner phones and avoiding personal devices. The security measures have limited communications on the ground. CIA Director John Ratcliffe led a US delegation to Havana to meet with Cuban government officials on Thursday as the island grapples with a collapse of its energy sector amid spiraling relations with the US, according to the Cuban government. CNN's Patrick Oppmann reports from Havana. In Italy, a country once known for political instability, Britain is increasingly seen to be represented by its royal family more than its political leaders, as the country may again be on the verge of searching for a new prime minister. CNN's Max Foster reports. US Secretary of State Marco Rubio is in China, despite being sanctioned in 2020 when he was a senator. Users online have noticed a change in the Chinese translation of his name and are theorizing that this is a loophole to explain why he's been allowed in the country. CNN's Steven Jiang explains why this is unlikely. Calbee, a major Japanese snack maker, has announced a temporary switch to monochrome packaging for some of its potato chips. CNN’s Hanako Montgomery explains why the move has to do with the Iran war. Britain’s health secretary Wes Streeting has resigned saying he has “lost confidence” in Prime Minister Keir Starmer’s leadership. CNN’s Clare Sebastian reports from London. Iranians are watching President Donald Trump’s trip in China closely, where state media is “almost gloating,” CNN's Matthew Chance reports
May 15, 2026 · via cnn.com
EU cybersecurity law revision seen as loss-making move By Wang Keju | China Daily | Updated: 2026-05-15 09:23 Excluding Chinese suppliers under the European Union's proposed revision of the Cybersecurity Act will not deliver the security gains Brussels desires, but could instead weaken the bloc's digital competitiveness and crowd out innovation investment, experts have warned. The warning comes as the EU reviews its draft legislation, which would identify "countries posing cybersecurity concerns" and "high-risk suppliers" and exclude them from 18 sectors, including energy, transport, and information and communications technology. Earlier this month, the bloc restricted funding for renewable energy projects using inverters from suppliers in its list of "high-risk countries" such as China, in an attempt to tackle its so-called cybersecurity threats. According to a joint report released last week by the China Chamber of Commerce to the EU (CCCEU) and global advisory firm KPMG, the EU could face an estimated loss of as much as 367.8 billion euros ($430.54 billion) over the next five years if Brussels excludes Chinese suppliers. The cumulative economic losses for EU member states would be "equivalent to nearly two full years of the EU's annual budget", the report said, noting that Germany would bear the largest burden, with estimated losses of 170.8 billion euros, followed by France and Italy. "The criteria for identifying so-called 'high-risk suppliers' appear to be politically targeted," said CCCEU Chairman Liu Jiandong. "This approach politicizes commercial decision-making and runs counter to the EU's own principles of equality and non-discrimination." According to the report, there has been no substantiated evidence so far of "technical backdoors" or violations of EU cybersecurity rules by Chinese companies operating in the bloc, and the origin-based screening measures could violate WTO rules, breach bilateral investment treaties and trigger compensation claims. He Yongqian, a spokeswoman for the
May 15, 2026 · via global.chinadaily.com.cn
CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. - CVE-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Note: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlined in Emergency Directive 26-03: Mitigate Vulnerabilities in Cisco SD-WAN Systems and Supplemental Direction ED 26-03: Hunt and Hardening Guidance for Cisco SD-WAN Systems. Adhere to the applicable Binding Operational Directive (BOD) 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available. Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information. Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria. This product is provided subject to this Notification and this Privacy & Use policy.
May 15, 2026 · via cisa.gov
Important Guidance from UMass IT Regarding the Canvas Cybersecurity Incident Jeremy Pelegrin, chief information security officer for UMass Amherst Information Technology, sent the email below to the campus community on May 11 providing special cybersecurity guidance following an incident that impacted access to the learning management software Canvas. Pelegrin also discusses the university’s efforts to protect its digital systems and the changing cybersecurity landscape in higher education in this article published recently on the IT site. Dear Campus Community: UMass Amherst, along with thousands of schools and universities worldwide, was impacted by the cyber incident experienced by a third-party vendor, Instructure (the company that provides thousands of schools with Canvas learning management software). While UMass Amherst IT has taken additional steps to protect our campus systems, I am writing to urge all students, faculty, and staff to remain vigilant in the days and weeks ahead. Instructure, the publisher of Canvas, has notified UMass Amherst that data fields involved in this Canvas incident may include usernames, email addresses, course names, enrollment information, and messages. Instructure has also informed UMass Amherst that core learning data was not compromised (i.e., course content, submissions, credentials). Additionally, please note that UMass Amherst does not store dates of birth, government identifiers, or financial information on our instance of Canvas. After an incident like this, malicious actors may see an opportunity to launch phishing attacks targeting affected communities. I encourage everyone to exercise caution and be alert to suspicious messages, emails, or phone calls. What you can do to protect yourself and the university community: - Only log into Canvas directly via the trusted links at umass.edu/it/canvas and be wary of emails or messages asking you to log into Canvas through other means. - Be cautious of emails appearing to come from Canvas, Instructure, or UMass entities
May 15, 2026 · via umass.edu
Breaking cybersecurity news, news analysis, commentary, and other content from around the world, with an initial focus on the Middle East & Africa and the Asia Pacific Taiwan Incident Highlights Cybersecurity Gaps in Rail Systems A Taiwanese student experimenting with software-defined radio technology shut down three bullet trains for nearly an hour, leading to an anti-terrorism response. The communications and monitoring platforms for rail networks has come under scrutiny following the recent "hacking" of a Taiwanese railway operators' radio system, which led to the emergency stoppage of three high-speed bullet trains for nearly an hour. On April 5, a 23-year-old train enthusiast used a software-defined radio set up and hardware bought online to spoof a general alarm, or GA, alert to the operations center of Taiwan High Speed Rail (THSR). The company issued orders for emergency braking to the three high-speed trains in the vicinity of the signal, resulting in a 48-minute delay in service. While few details have been reported, the compromise may have been simple — a voice or text that announced an emergency situation, says Wouter Bokslag, a founding partner of Dutch cybersecurity consultancy Midnight Blue, which has studied vulnerabilities in emergency radio systems. THSR reportedly used the emergency radio protocol known as Terrestrial Trunked Radio (TETRA), which can be secure, if set up correctly and maintained assiduously, but is also easy to leave in an insecure configuration, he says. "These technologies — the core of it definitely is old stuff, but it's reliable," he says. "The TETRA Network, under certain conditions, can definitely be secure and could be a suitable solution here, but I suspect they were not running the strongest of configurations for their network." Rail systems have increasingly come under scrutiny by cybersecurity researchers and cyberattackers. For two days in August 2023, hackers in
May 15, 2026 · via darkreading.com