Enterprise Security Tech

Britive's Gemini Enterprise agent can revoke sessions and disable compromised human or non-human identities with human approval.

Ping Identity found a sharp trust drop when AI moves from recommendations to transactions, underscoring the need for explicit authorization.

Edgescan Atomic uses agentic AI for on-demand penetration testing while enforcing scope, approvals and auditability through a control harness.

A high-severity vulnerability in the TDengine time-series database can allow an unauthenticated remote attacker to crash a server with a single malformed packet, according to research disclosed by Ridge Security. The flaw, tracked as CVE-2026-42542, affects TDengine versions 3.4.0.0 through 3.4.1.5 and is fixed in version 3.4.1.6. It stems from an integer underflow in the database's handling of a length field in its custom binary RPC protocol on TCP port 6030. No credentials,

A newly documented Windows malware loader uses the encrypted Tox peer-to-peer messaging network for command and control, making it less dependent on domains that defenders can seize or block. Varonis Threat Labs discovered AvisLoader on an exposed staging server alongside a ClickFix lure, supporting tools and a web-based command center. The loader was also advertised for sale on a cybercrime forum, according to the researchers. The observed delivery chain used a fake document

NVIDIA has introduced the Open Agent Safety Platform, an open software platform and reference architecture intended to secure autonomous AI systems from testing through deployment. The initiative is designed to connect controls across the agent runtime, underlying compute infrastructure and physical systems that execute agent-directed tasks. More than 100 companies are participating, according to NVIDIA and launch partner SentinelOne, including Netskope and 1Password. NVIDIA'