Enterprise Security Tech

A newly released proof-of-concept exploit suggests Microsoft’s September 2026 security update may not have fully resolved ShieldBreak, a Windows Defender vulnerability that can allow attackers to access sensitive files with SYSTEM privileges. Security researcher Nightmare Eclipse published the new exploit, called ShieldCrash, on GitHub only days after Microsoft issued its ShieldBreak fix. According to the researcher, the proof of concept can read arbitrary files with the high

Cybercriminals are disguising sophisticated malware campaigns as routine recruiting outreach, using fake job descriptions and interview documents to compromise Windows computers with a single click. New research from Cyderes’ Howler Cell threat intelligence team details two separate nine-stage attack chains that exploit the trust surrounding online recruitment. Although the campaigns appear to involve different operators, both use fileless malware, hidden persistence and secu

Manufacturers selling connected hardware and software in the European Union now face strict cybersecurity reporting deadlines under the EU Cyber Resilience Act. The requirements took effect on September 11, 2026, and apply to manufacturers of “products with digital elements” made available in the EU, including companies headquartered outside the bloc. Covered businesses must report actively exploited vulnerabilities and severe security incidents affecting their products throu

Comparitech recorded 997 known and suspected ransomware attacks during August, averaging more than 32 incidents per day. The United States accounted for nearly 42 percent of the total. Ransomware activity reached a record high in August 2026, with cybersecurity researchers tracking 997 attacks worldwide during the month, according to new research from Comparitech. The total represents an average of more than 32 ransomware attacks per day. Researchers independently confirmed 7

Anthropic researchers have found a new problem hiding inside the rush toward autonomous AI: agents that behave acceptably on their own can become aggressive when other agents stand in the way. In new research on multiagent systems, Anthropic tested how Claude-based agents behave when operating in shared environments, including software projects where multiple agents depend on one another. The company argues that as AI agents spread across codebases, markets, and enterprise sy

A major software supply chain attack targeting LiteLLM has exposed credentials and CI/CD data linked to more than 2,500 organizations, underscoring how deeply AI infrastructure has become embedded in enterprise development environments. New analysis from SOCRadar indicates the incident was significantly broader than the roughly 40-minute window in March 2026 when malicious LiteLLM packages appeared on the Python Package Index, or PyPI. Researchers reconstructed activity spann