Information Security

The unusually large number of CVEs (Common Vulnerabilities and Exposures) disclosed by Microsoft Tuesday is “likely” to be linked to AI-related developments, including the increasing discoveries of vulnerabilities using LLM-powered tools, according to a TrendAI researcher.

Crush Security, a solution provider startup founded by former channel leaders, is aiming to transform the way cybersecurity tools are evaluated and purchased by bringing AI-driven analysis into the process in a bigger way than ever before, Crush Security CEO Joshua Jones told CRN.

While Anthropic’s purportedly ultra-powerful Claude Mythos AI model is poised to overhaul the way vulnerabilities are discovered and managed, the sweeping implications claimed for all of cybersecurity are overstated.

Investors are airing renewed concerns over potential disruption to the software and cybersecurity sectors from AI advancements, according to reports, leading to a major drop in the stock prices of numerous top players Thursday.

Following claims by Anthropic and its partners in a new software security initiative announced this week, it’s clear that AI could soon upend existing vulnerability management practices, according to Forrester analysts.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is ordering federal agencies to prioritize patching for a critical-severity Ivanti mobile management vulnerability.

Palo Alto Networks is increasingly driving improved security outcomes with the utilization of AI, in a strong indication that a more-automated approach can in fact give defenders the bigger AI advantage over threat actors, Palo Alto Networks CTO Lee Klarich tells CRN.

NWN announced the launch Wednesday of a suite of managed security services with the debut of its new NWN Cybersecurity offering, which aims to boost cyber defense for staff-constrained customers with human expertise and AI-enabled assistance, NWN executives told CRN.

Anthropic announced Tuesday it has launched a new initiative, “Project Glasswing,” focused on boosting software security with involvement from a number of major industry players.

A cyberattack campaign linked to Iran is attempting to compromise U.S. critical infrastructure through targeting operational technology (OT) devices, according to an advisory Tuesday from the FBI and other federal agencies.