Enterprise Security Tech

Foreign threat actors breached two small, privately owned Colorado water utilities in late August and manipulated equipment used to control drinking-water systems, according to information the governor’s office provided to Axios. Each utility serves fewer than 200 people. Colorado officials said the problems were resolved, technical assistance was offered and other water providers were alerted. The state has not identified the attackers, and the FBI declined to comment on the

Enterprise AI agents can create a security problem without leaking data or executing malicious code. If an agent has no enforced stopping point, a single task can branch into hundreds of downstream calls and quietly push cloud spending far beyond its intended budget. New research from Forcepoint examines this risk through OWASP’s “unbounded consumption” category. The issue covers excessive inference, recursive tool use and other workloads that consume compute or paid API capa

CrowdSec says attackers used lingering access tied to a former employee to clone roughly 170 private repositories, exposing source code and cloud credentials.

Securonix researchers uncovered TASK#STOMP, a Windows PowerShell backdoor built for persistent document theft and remote access.

Rockwell Automation is testing advanced artificial intelligence to find and fix security weaknesses in the software and connected systems that underpin factories and other critical infrastructure. The industrial automation company has joined Anthropic’s Project Glasswing, an initiative that gives approved organizations controlled access to powerful Claude models for defensive cybersecurity research. Rockwell’s security teams will use Claude Mythos 5 to explore faster methods

Riverbed has introduced Network 360, a collection of AI-powered network observability tools designed to help IT operations teams diagnose performance problems, uncover their underlying causes and identify potential disruptions before employees notice them. The launch brings Riverbed’s agentic AI technology directly into its established network monitoring products while expanding coverage across cloud infrastructure, remote endpoints and Zero Trust environments. The company is