Enterprise Security Tech

Unit 42 is turning frontier AI models into an always-on offensive testing service designed to identify and validate exploitable enterprise attack paths.

Dragos has completed its acquisitions of asset-discovery company runZero and firmware security specialist NetRise, expanding its operational technology platform beyond threat detection and incident response. The deals closed alongside Accenture’s majority investment in Dragos. The companies initially announced transactions with a combined enterprise value of about $4.175 billion, subject to customary adjustments. Dragos said it will continue to operate independently, with fou

Foreign threat actors breached two small, privately owned Colorado water utilities in late August and manipulated equipment used to control drinking-water systems, according to information the governor’s office provided to Axios. Each utility serves fewer than 200 people. Colorado officials said the problems were resolved, technical assistance was offered and other water providers were alerted. The state has not identified the attackers, and the FBI declined to comment on the

Enterprise AI agents can create a security problem without leaking data or executing malicious code. If an agent has no enforced stopping point, a single task can branch into hundreds of downstream calls and quietly push cloud spending far beyond its intended budget. New research from Forcepoint examines this risk through OWASP’s “unbounded consumption” category. The issue covers excessive inference, recursive tool use and other workloads that consume compute or paid API capa

CrowdSec says attackers used lingering access tied to a former employee to clone roughly 170 private repositories, exposing source code and cloud credentials.

Securonix researchers uncovered TASK#STOMP, a Windows PowerShell backdoor built for persistent document theft and remote access.