When AI gets a body, it inherits an attack surface
Embodied AI puts a model inside a machine that operates in the physical world: a robot, an arm, a humanoid. Once a model gains motors, sensors and a body, it…
-
-
Weekly Threat Bulletin – March 4th, 2026
Critical Claude Code Vulnerabilities Allowed RCE and API Key Theft Across Developer Workstations Check Point researchers identified three critical vulnerabilities in Claude Code, an AI coding tool, stemming from its…
-
How this seasoned bug bounty hunter combines Burp Suite and HackerOne to uncover high-impact vulnerabilities | Blog
Amelia Coen | Friday, 12 September 2025 at 12:21 UTC Arman S. (Tess), a full-time independent security researcher and bug bounty hunter, talked us through how he uses Burp Suite…
-
Announcing the General Availability of Prisma AIRS AI Gateway
Every modern enterprise is moving from an organization run by software to one orchestrated by AI, creating a tension between velocity and control. To resolve this tension, organizations require a…
-
Savanti: How Agentic AI Supercharge Cato’s R&D Efficiency
TL;DR: Savanti is Cato Networks’ internal, agentic AI assistant that blends knowledge from Slack, Confluence, Git, and Jira to provide instant, context-rich answers. Savanti routes each query through an adaptive…
-
OpenSSL HollowByte: A DoS Hiding in 11 Bytes
Every so often, a vulnerability reminds us how deeply our digital infrastructure relies on foundational libraries. Recently, the Okta Red Team discovered HollowByte, a Denial of Service (DoS) vulnerability in…
-
SharePoint CVEs FAQ: CVE-2026-56164, CVE-2026-32201, CVE-2026-45659
Four Microsoft SharePoint Server vulnerabilities are under active exploitation, prompting CISA to issue a hardening alert. An additional high-severity flaw recently patched adds pressure for organizations running on-premises deployments. Key…
-
Least privilege for AI agents: Identity, access, and tool binding
In this article AI agents aren’t only smarter API callers. They plan, chain actions across systems, and invoke tools in sequences while no single human explicitly approves each step. The…
-
Sunsetting the Public AttackerKB Platform
What’s changing, where AttackerKB-style analysis will live, and how users can continue finding Rapid7 vulnerability intelligence. On August 18, Rapid7 will sunset the standalone public AttackerKB website as part of…
-
CISA urges software vendors to formalize vulnerability disclosure programs
The Cybersecurity and Infrastructure Security Agency (CISA) and four international cybersecurity agencies have published guidance urging software manufacturers and online service providers to establish coordinated vulnerability disclosure (CVD) programs, saying…
