ransomware – Security Affairs

As artificial intelligence (AI) adoption surges and organisations move from the ‘should we?’ phase to the ‘how do we?’ phase, it’s natural to evaluate the likelihood of positive returns on AI investments. That’s always been the case with the onset of each new technology paradigm: C-suite executives, guided by their boards and aided by technical…

IBM’s 2025 Cost of a Data Breach Report found that 16% of breaches studied involved attackers using AI tools, most often for phishing or deepfake impersonation attacks. For security teams, that has direct implications for the service desk. The service desk is a natural target for social engineering, as an attacker that convinces an agent…

Cloud security firm Sysdig has released details on what it claims to be the world’s first ransomware campaign completely driven by a large language model (LLM). Dubbed JadePuffer, the campaign targeted an internet-facing Langflow instance by exploiting CVE-2025-3248. It then ran “an adaptive and fully automated campaign” which resulted in “a destructive database-extortion playbook against the victim’s production database…

Bad Epoll Flaw Gives Attackers Root Access on Linux and Android Pierluigi Paganini July 06, 2026 Bad Epoll (CVE-2026-46242) lets local attackers gain root on Linux and Android. The flaw was missed by AI but found by a security researcher. A newly disclosed Linux kernel vulnerability, named Bad Epoll (CVE-2026-46242), allows a local attacker with no special…

AI governance is a key enterprise concern. Organizations are assembling councils, publishing principles, rolling out “approved AI tools” lists, and asking employees to opt in to acceptable use policies. In most enterprises, however, the reality is that AI is already widely embedded in employees’ daily work, often outside sanctioned channels and oversight. The visibility and…

We are Yuki Koike, Senior Executive Officer/CTO, and Kota Toda, a part-time member of the Advanced Analysis Division. The vulnerability CVE-2026-43456, which the two of us had reported to the Linux kernel, has now been fixed and is ready for public disclosure. We would therefore like to introduce the details in this blog post. The…